Nov 1 00:33:23.073002 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Oct 31 23:02:53 -00 2025 Nov 1 00:33:23.073033 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:33:23.073044 kernel: BIOS-provided physical RAM map: Nov 1 00:33:23.073051 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Nov 1 00:33:23.073057 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Nov 1 00:33:23.073064 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Nov 1 00:33:23.073072 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Nov 1 00:33:23.073079 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Nov 1 00:33:23.073086 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Nov 1 00:33:23.073092 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Nov 1 00:33:23.073098 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Nov 1 00:33:23.073103 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Nov 1 00:33:23.073109 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Nov 1 00:33:23.073114 kernel: NX (Execute Disable) protection: active Nov 1 00:33:23.073123 kernel: SMBIOS 2.8 present. Nov 1 00:33:23.073129 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Nov 1 00:33:23.073135 kernel: Hypervisor detected: KVM Nov 1 00:33:23.073141 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Nov 1 00:33:23.073150 kernel: kvm-clock: cpu 0, msr 171a0001, primary cpu clock Nov 1 00:33:23.073156 kernel: kvm-clock: using sched offset of 3756411562 cycles Nov 1 00:33:23.073162 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Nov 1 00:33:23.073168 kernel: tsc: Detected 2794.748 MHz processor Nov 1 00:33:23.073175 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Nov 1 00:33:23.073183 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Nov 1 00:33:23.073189 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Nov 1 00:33:23.073195 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Nov 1 00:33:23.073201 kernel: Using GB pages for direct mapping Nov 1 00:33:23.073207 kernel: ACPI: Early table checksum verification disabled Nov 1 00:33:23.073213 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Nov 1 00:33:23.073219 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:33:23.073226 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:33:23.073232 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:33:23.073239 kernel: ACPI: FACS 0x000000009CFE0000 000040 Nov 1 00:33:23.073245 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:33:23.073260 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:33:23.073266 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:33:23.073272 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:33:23.073279 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Nov 1 00:33:23.073285 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Nov 1 00:33:23.073291 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Nov 1 00:33:23.073302 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Nov 1 00:33:23.073308 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Nov 1 00:33:23.073315 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Nov 1 00:33:23.073321 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Nov 1 00:33:23.073327 kernel: No NUMA configuration found Nov 1 00:33:23.073334 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Nov 1 00:33:23.073342 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Nov 1 00:33:23.073348 kernel: Zone ranges: Nov 1 00:33:23.073355 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Nov 1 00:33:23.073361 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Nov 1 00:33:23.073368 kernel: Normal empty Nov 1 00:33:23.073374 kernel: Movable zone start for each node Nov 1 00:33:23.073380 kernel: Early memory node ranges Nov 1 00:33:23.073387 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Nov 1 00:33:23.073393 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Nov 1 00:33:23.073400 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Nov 1 00:33:23.073410 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Nov 1 00:33:23.073417 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Nov 1 00:33:23.073424 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Nov 1 00:33:23.073430 kernel: ACPI: PM-Timer IO Port: 0x608 Nov 1 00:33:23.073437 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Nov 1 00:33:23.073443 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Nov 1 00:33:23.073450 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Nov 1 00:33:23.073456 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Nov 1 00:33:23.073463 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Nov 1 00:33:23.073473 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Nov 1 00:33:23.073479 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Nov 1 00:33:23.073486 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Nov 1 00:33:23.073493 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Nov 1 00:33:23.073499 kernel: TSC deadline timer available Nov 1 00:33:23.073506 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Nov 1 00:33:23.073512 kernel: kvm-guest: KVM setup pv remote TLB flush Nov 1 00:33:23.073519 kernel: kvm-guest: setup PV sched yield Nov 1 00:33:23.073525 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Nov 1 00:33:23.073533 kernel: Booting paravirtualized kernel on KVM Nov 1 00:33:23.073540 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Nov 1 00:33:23.073547 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Nov 1 00:33:23.073554 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Nov 1 00:33:23.073560 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Nov 1 00:33:23.073566 kernel: pcpu-alloc: [0] 0 1 2 3 Nov 1 00:33:23.073573 kernel: kvm-guest: setup async PF for cpu 0 Nov 1 00:33:23.073579 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Nov 1 00:33:23.073586 kernel: kvm-guest: PV spinlocks enabled Nov 1 00:33:23.073594 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Nov 1 00:33:23.073600 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Nov 1 00:33:23.073606 kernel: Policy zone: DMA32 Nov 1 00:33:23.073614 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:33:23.073621 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:33:23.073628 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:33:23.073634 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:33:23.073641 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:33:23.073649 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47496K init, 4084K bss, 134796K reserved, 0K cma-reserved) Nov 1 00:33:23.073656 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Nov 1 00:33:23.073662 kernel: ftrace: allocating 34614 entries in 136 pages Nov 1 00:33:23.073669 kernel: ftrace: allocated 136 pages with 2 groups Nov 1 00:33:23.073675 kernel: rcu: Hierarchical RCU implementation. Nov 1 00:33:23.073682 kernel: rcu: RCU event tracing is enabled. Nov 1 00:33:23.073689 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Nov 1 00:33:23.073696 kernel: Rude variant of Tasks RCU enabled. Nov 1 00:33:23.073702 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:33:23.073710 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:33:23.073717 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Nov 1 00:33:23.073723 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Nov 1 00:33:23.073729 kernel: random: crng init done Nov 1 00:33:23.073736 kernel: Console: colour VGA+ 80x25 Nov 1 00:33:23.073742 kernel: printk: console [ttyS0] enabled Nov 1 00:33:23.073749 kernel: ACPI: Core revision 20210730 Nov 1 00:33:23.073756 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Nov 1 00:33:23.073762 kernel: APIC: Switch to symmetric I/O mode setup Nov 1 00:33:23.073770 kernel: x2apic enabled Nov 1 00:33:23.073776 kernel: Switched APIC routing to physical x2apic. Nov 1 00:33:23.073785 kernel: kvm-guest: setup PV IPIs Nov 1 00:33:23.073792 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Nov 1 00:33:23.073798 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Nov 1 00:33:23.073807 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Nov 1 00:33:23.073813 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Nov 1 00:33:23.073820 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Nov 1 00:33:23.073827 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Nov 1 00:33:23.073839 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Nov 1 00:33:23.073846 kernel: Spectre V2 : Mitigation: Retpolines Nov 1 00:33:23.073853 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Nov 1 00:33:23.073861 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Nov 1 00:33:23.073868 kernel: active return thunk: retbleed_return_thunk Nov 1 00:33:23.073875 kernel: RETBleed: Mitigation: untrained return thunk Nov 1 00:33:23.073882 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Nov 1 00:33:23.073889 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Nov 1 00:33:23.073896 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Nov 1 00:33:23.073904 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Nov 1 00:33:23.073911 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Nov 1 00:33:23.073935 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Nov 1 00:33:23.073942 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Nov 1 00:33:23.073949 kernel: Freeing SMP alternatives memory: 32K Nov 1 00:33:23.073955 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:33:23.073962 kernel: LSM: Security Framework initializing Nov 1 00:33:23.073971 kernel: SELinux: Initializing. Nov 1 00:33:23.073978 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:33:23.073984 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:33:23.073991 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Nov 1 00:33:23.073998 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Nov 1 00:33:23.074007 kernel: ... version: 0 Nov 1 00:33:23.074015 kernel: ... bit width: 48 Nov 1 00:33:23.074024 kernel: ... generic registers: 6 Nov 1 00:33:23.074033 kernel: ... value mask: 0000ffffffffffff Nov 1 00:33:23.074043 kernel: ... max period: 00007fffffffffff Nov 1 00:33:23.074051 kernel: ... fixed-purpose events: 0 Nov 1 00:33:23.074059 kernel: ... event mask: 000000000000003f Nov 1 00:33:23.074068 kernel: signal: max sigframe size: 1776 Nov 1 00:33:23.074076 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:33:23.074085 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:33:23.074093 kernel: x86: Booting SMP configuration: Nov 1 00:33:23.074102 kernel: .... node #0, CPUs: #1 Nov 1 00:33:23.074110 kernel: kvm-clock: cpu 1, msr 171a0041, secondary cpu clock Nov 1 00:33:23.074119 kernel: kvm-guest: setup async PF for cpu 1 Nov 1 00:33:23.074129 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Nov 1 00:33:23.074138 kernel: #2 Nov 1 00:33:23.074147 kernel: kvm-clock: cpu 2, msr 171a0081, secondary cpu clock Nov 1 00:33:23.074156 kernel: kvm-guest: setup async PF for cpu 2 Nov 1 00:33:23.074164 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Nov 1 00:33:23.074176 kernel: #3 Nov 1 00:33:23.074184 kernel: kvm-clock: cpu 3, msr 171a00c1, secondary cpu clock Nov 1 00:33:23.074193 kernel: kvm-guest: setup async PF for cpu 3 Nov 1 00:33:23.074202 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Nov 1 00:33:23.074212 kernel: smp: Brought up 1 node, 4 CPUs Nov 1 00:33:23.074221 kernel: smpboot: Max logical packages: 1 Nov 1 00:33:23.074229 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Nov 1 00:33:23.074237 kernel: devtmpfs: initialized Nov 1 00:33:23.074244 kernel: x86/mm: Memory block size: 128MB Nov 1 00:33:23.074258 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:33:23.074265 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Nov 1 00:33:23.074272 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:33:23.074279 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:33:23.074289 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:33:23.074296 kernel: audit: type=2000 audit(1761957201.032:1): state=initialized audit_enabled=0 res=1 Nov 1 00:33:23.074303 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:33:23.074309 kernel: thermal_sys: Registered thermal governor 'user_space' Nov 1 00:33:23.074316 kernel: cpuidle: using governor menu Nov 1 00:33:23.074323 kernel: ACPI: bus type PCI registered Nov 1 00:33:23.074330 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:33:23.074337 kernel: dca service started, version 1.12.1 Nov 1 00:33:23.074344 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Nov 1 00:33:23.074352 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Nov 1 00:33:23.074359 kernel: PCI: Using configuration type 1 for base access Nov 1 00:33:23.074366 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Nov 1 00:33:23.074373 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:33:23.074380 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:33:23.074387 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:33:23.074394 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:33:23.074401 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:33:23.074408 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:33:23.074416 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:33:23.074423 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:33:23.074430 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:33:23.074437 kernel: ACPI: Interpreter enabled Nov 1 00:33:23.074444 kernel: ACPI: PM: (supports S0 S3 S5) Nov 1 00:33:23.074451 kernel: ACPI: Using IOAPIC for interrupt routing Nov 1 00:33:23.074458 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Nov 1 00:33:23.074464 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Nov 1 00:33:23.074471 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Nov 1 00:33:23.074681 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Nov 1 00:33:23.074762 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Nov 1 00:33:23.074837 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Nov 1 00:33:23.074846 kernel: PCI host bridge to bus 0000:00 Nov 1 00:33:23.074962 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Nov 1 00:33:23.075050 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Nov 1 00:33:23.075127 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Nov 1 00:33:23.075193 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Nov 1 00:33:23.075271 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Nov 1 00:33:23.075338 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Nov 1 00:33:23.075404 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Nov 1 00:33:23.075502 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Nov 1 00:33:23.075597 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Nov 1 00:33:23.075677 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Nov 1 00:33:23.075751 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Nov 1 00:33:23.075824 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Nov 1 00:33:23.075896 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Nov 1 00:33:23.076006 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Nov 1 00:33:23.076083 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Nov 1 00:33:23.076171 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Nov 1 00:33:23.076259 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Nov 1 00:33:23.076398 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Nov 1 00:33:23.076478 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Nov 1 00:33:23.076629 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Nov 1 00:33:23.076733 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Nov 1 00:33:23.076826 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Nov 1 00:33:23.076902 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Nov 1 00:33:23.076999 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Nov 1 00:33:23.077075 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Nov 1 00:33:23.077185 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Nov 1 00:33:23.077291 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Nov 1 00:33:23.077368 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Nov 1 00:33:23.077468 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Nov 1 00:33:23.077548 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Nov 1 00:33:23.077622 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Nov 1 00:33:23.077712 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Nov 1 00:33:23.077788 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Nov 1 00:33:23.077797 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Nov 1 00:33:23.077805 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Nov 1 00:33:23.077812 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Nov 1 00:33:23.077819 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Nov 1 00:33:23.077829 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Nov 1 00:33:23.077836 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Nov 1 00:33:23.077843 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Nov 1 00:33:23.077850 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Nov 1 00:33:23.077857 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Nov 1 00:33:23.077864 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Nov 1 00:33:23.077871 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Nov 1 00:33:23.077878 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Nov 1 00:33:23.077885 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Nov 1 00:33:23.077893 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Nov 1 00:33:23.077900 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Nov 1 00:33:23.077907 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Nov 1 00:33:23.077925 kernel: iommu: Default domain type: Translated Nov 1 00:33:23.077933 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Nov 1 00:33:23.078015 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Nov 1 00:33:23.078115 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Nov 1 00:33:23.078193 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Nov 1 00:33:23.078206 kernel: vgaarb: loaded Nov 1 00:33:23.078213 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:33:23.078220 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:33:23.078227 kernel: PTP clock support registered Nov 1 00:33:23.078234 kernel: PCI: Using ACPI for IRQ routing Nov 1 00:33:23.078241 kernel: PCI: pci_cache_line_size set to 64 bytes Nov 1 00:33:23.078248 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Nov 1 00:33:23.078267 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Nov 1 00:33:23.078274 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Nov 1 00:33:23.078282 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Nov 1 00:33:23.078289 kernel: clocksource: Switched to clocksource kvm-clock Nov 1 00:33:23.078296 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:33:23.078305 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:33:23.078311 kernel: pnp: PnP ACPI init Nov 1 00:33:23.078412 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Nov 1 00:33:23.078423 kernel: pnp: PnP ACPI: found 6 devices Nov 1 00:33:23.078430 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Nov 1 00:33:23.078440 kernel: NET: Registered PF_INET protocol family Nov 1 00:33:23.078447 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:33:23.078454 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Nov 1 00:33:23.078461 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:33:23.078469 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:33:23.078475 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Nov 1 00:33:23.078483 kernel: TCP: Hash tables configured (established 32768 bind 32768) Nov 1 00:33:23.078489 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:33:23.078496 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:33:23.078505 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:33:23.078512 kernel: NET: Registered PF_XDP protocol family Nov 1 00:33:23.078580 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Nov 1 00:33:23.078646 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Nov 1 00:33:23.078711 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Nov 1 00:33:23.078777 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Nov 1 00:33:23.078842 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Nov 1 00:33:23.078909 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Nov 1 00:33:23.078930 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:33:23.078939 kernel: Initialise system trusted keyrings Nov 1 00:33:23.078946 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Nov 1 00:33:23.078954 kernel: Key type asymmetric registered Nov 1 00:33:23.078960 kernel: Asymmetric key parser 'x509' registered Nov 1 00:33:23.078967 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:33:23.078974 kernel: io scheduler mq-deadline registered Nov 1 00:33:23.078981 kernel: io scheduler kyber registered Nov 1 00:33:23.078988 kernel: io scheduler bfq registered Nov 1 00:33:23.078995 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Nov 1 00:33:23.079004 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Nov 1 00:33:23.079011 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Nov 1 00:33:23.079018 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Nov 1 00:33:23.079025 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:33:23.079032 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Nov 1 00:33:23.079039 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Nov 1 00:33:23.079046 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Nov 1 00:33:23.079053 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Nov 1 00:33:23.079138 kernel: rtc_cmos 00:04: RTC can wake from S4 Nov 1 00:33:23.079152 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Nov 1 00:33:23.079224 kernel: rtc_cmos 00:04: registered as rtc0 Nov 1 00:33:23.079305 kernel: rtc_cmos 00:04: setting system clock to 2025-11-01T00:33:22 UTC (1761957202) Nov 1 00:33:23.079373 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Nov 1 00:33:23.079382 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:33:23.079389 kernel: Segment Routing with IPv6 Nov 1 00:33:23.079396 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:33:23.079403 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:33:23.079413 kernel: Key type dns_resolver registered Nov 1 00:33:23.079420 kernel: IPI shorthand broadcast: enabled Nov 1 00:33:23.079427 kernel: sched_clock: Marking stable (714489267, 427128380)->(1331155241, -189537594) Nov 1 00:33:23.079434 kernel: registered taskstats version 1 Nov 1 00:33:23.079441 kernel: Loading compiled-in X.509 certificates Nov 1 00:33:23.079448 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: f2055682e6899ad8548fd369019e7b47939b46a0' Nov 1 00:33:23.079455 kernel: Key type .fscrypt registered Nov 1 00:33:23.079461 kernel: Key type fscrypt-provisioning registered Nov 1 00:33:23.079469 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:33:23.079477 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:33:23.079484 kernel: ima: No architecture policies found Nov 1 00:33:23.079491 kernel: clk: Disabling unused clocks Nov 1 00:33:23.079498 kernel: Freeing unused kernel image (initmem) memory: 47496K Nov 1 00:33:23.079505 kernel: Write protecting the kernel read-only data: 28672k Nov 1 00:33:23.079512 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Nov 1 00:33:23.079519 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Nov 1 00:33:23.079526 kernel: Run /init as init process Nov 1 00:33:23.079534 kernel: with arguments: Nov 1 00:33:23.079541 kernel: /init Nov 1 00:33:23.079548 kernel: with environment: Nov 1 00:33:23.079555 kernel: HOME=/ Nov 1 00:33:23.079561 kernel: TERM=linux Nov 1 00:33:23.079568 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:33:23.079577 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:33:23.079587 systemd[1]: Detected virtualization kvm. Nov 1 00:33:23.079596 systemd[1]: Detected architecture x86-64. Nov 1 00:33:23.079603 systemd[1]: Running in initrd. Nov 1 00:33:23.079610 systemd[1]: No hostname configured, using default hostname. Nov 1 00:33:23.079617 systemd[1]: Hostname set to . Nov 1 00:33:23.079625 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:33:23.079632 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:33:23.079640 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:33:23.079648 systemd[1]: Reached target cryptsetup.target. Nov 1 00:33:23.079655 systemd[1]: Reached target paths.target. Nov 1 00:33:23.079663 systemd[1]: Reached target slices.target. Nov 1 00:33:23.079677 systemd[1]: Reached target swap.target. Nov 1 00:33:23.079686 systemd[1]: Reached target timers.target. Nov 1 00:33:23.079694 systemd[1]: Listening on iscsid.socket. Nov 1 00:33:23.079702 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:33:23.079711 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:33:23.079719 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:33:23.079726 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:33:23.079734 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:33:23.079742 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:33:23.079750 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:33:23.079757 systemd[1]: Reached target sockets.target. Nov 1 00:33:23.079765 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:33:23.079773 systemd[1]: Finished network-cleanup.service. Nov 1 00:33:23.079781 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:33:23.079789 systemd[1]: Starting systemd-journald.service... Nov 1 00:33:23.079797 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:33:23.079804 systemd[1]: Starting systemd-resolved.service... Nov 1 00:33:23.079813 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:33:23.079821 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:33:23.079837 systemd-journald[199]: Journal started Nov 1 00:33:23.080004 systemd-journald[199]: Runtime Journal (/run/log/journal/c8cabfc8cb84463d94fd01d003148241) is 6.0M, max 48.5M, 42.5M free. Nov 1 00:33:23.076722 systemd-modules-load[200]: Inserted module 'overlay' Nov 1 00:33:23.162112 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:33:23.162144 kernel: Bridge firewalling registered Nov 1 00:33:23.162158 kernel: SCSI subsystem initialized Nov 1 00:33:23.162175 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:33:23.162200 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:33:23.162224 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:33:23.162247 kernel: audit: type=1130 audit(1761957203.161:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.097397 systemd-resolved[201]: Positive Trust Anchors: Nov 1 00:33:23.169532 systemd[1]: Started systemd-journald.service. Nov 1 00:33:23.097416 systemd-resolved[201]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:33:23.097442 systemd-resolved[201]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:33:23.099736 systemd-resolved[201]: Defaulting to hostname 'linux'. Nov 1 00:33:23.123756 systemd-modules-load[200]: Inserted module 'br_netfilter' Nov 1 00:33:23.170113 systemd-modules-load[200]: Inserted module 'dm_multipath' Nov 1 00:33:23.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.186732 systemd[1]: Started systemd-resolved.service. Nov 1 00:33:23.194883 kernel: audit: type=1130 audit(1761957203.185:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.194906 kernel: audit: type=1130 audit(1761957203.193:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.195152 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:33:23.202287 kernel: audit: type=1130 audit(1761957203.202:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.202411 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:33:23.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.210242 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:33:23.218147 kernel: audit: type=1130 audit(1761957203.209:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.218165 kernel: audit: type=1130 audit(1761957203.217:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.218267 systemd[1]: Reached target nss-lookup.target. Nov 1 00:33:23.226314 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:33:23.229499 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:33:23.232946 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:33:23.238345 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:33:23.253718 kernel: audit: type=1130 audit(1761957203.238:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.253742 kernel: audit: type=1130 audit(1761957203.244:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.253753 kernel: audit: type=1130 audit(1761957203.252:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.240830 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:33:23.251214 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:33:23.254571 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:33:23.264271 dracut-cmdline[221]: dracut-dracut-053 Nov 1 00:33:23.265710 dracut-cmdline[221]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:33:23.324955 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:33:23.341954 kernel: iscsi: registered transport (tcp) Nov 1 00:33:23.364036 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:33:23.364097 kernel: QLogic iSCSI HBA Driver Nov 1 00:33:23.391321 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:33:23.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.395389 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:33:23.445971 kernel: raid6: avx2x4 gen() 26367 MB/s Nov 1 00:33:23.463945 kernel: raid6: avx2x4 xor() 6963 MB/s Nov 1 00:33:23.481954 kernel: raid6: avx2x2 gen() 30593 MB/s Nov 1 00:33:23.499993 kernel: raid6: avx2x2 xor() 16544 MB/s Nov 1 00:33:23.517975 kernel: raid6: avx2x1 gen() 21878 MB/s Nov 1 00:33:23.535973 kernel: raid6: avx2x1 xor() 12112 MB/s Nov 1 00:33:23.553969 kernel: raid6: sse2x4 gen() 12583 MB/s Nov 1 00:33:23.571974 kernel: raid6: sse2x4 xor() 6667 MB/s Nov 1 00:33:23.589965 kernel: raid6: sse2x2 gen() 15090 MB/s Nov 1 00:33:23.631957 kernel: raid6: sse2x2 xor() 8377 MB/s Nov 1 00:33:23.650036 kernel: raid6: sse2x1 gen() 10904 MB/s Nov 1 00:33:23.668452 kernel: raid6: sse2x1 xor() 6749 MB/s Nov 1 00:33:23.668557 kernel: raid6: using algorithm avx2x2 gen() 30593 MB/s Nov 1 00:33:23.668576 kernel: raid6: .... xor() 16544 MB/s, rmw enabled Nov 1 00:33:23.669758 kernel: raid6: using avx2x2 recovery algorithm Nov 1 00:33:23.683967 kernel: xor: automatically using best checksumming function avx Nov 1 00:33:23.782945 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Nov 1 00:33:23.791212 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:33:23.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.793000 audit: BPF prog-id=7 op=LOAD Nov 1 00:33:23.793000 audit: BPF prog-id=8 op=LOAD Nov 1 00:33:23.794600 systemd[1]: Starting systemd-udevd.service... Nov 1 00:33:23.808663 systemd-udevd[398]: Using default interface naming scheme 'v252'. Nov 1 00:33:23.813997 systemd[1]: Started systemd-udevd.service. Nov 1 00:33:23.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.817614 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:33:23.832559 dracut-pre-trigger[409]: rd.md=0: removing MD RAID activation Nov 1 00:33:23.866043 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:33:23.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.868443 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:33:23.914683 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:33:23.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:23.954517 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Nov 1 00:33:24.009368 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:33:24.009384 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Nov 1 00:33:24.009394 kernel: GPT:9289727 != 19775487 Nov 1 00:33:24.009402 kernel: GPT:Alternate GPT header not at the end of the disk. Nov 1 00:33:24.009411 kernel: GPT:9289727 != 19775487 Nov 1 00:33:24.009425 kernel: GPT: Use GNU Parted to correct GPT errors. Nov 1 00:33:24.009434 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:33:24.022943 kernel: AVX2 version of gcm_enc/dec engaged. Nov 1 00:33:24.022993 kernel: AES CTR mode by8 optimization enabled Nov 1 00:33:24.023944 kernel: libata version 3.00 loaded. Nov 1 00:33:24.033993 kernel: ahci 0000:00:1f.2: version 3.0 Nov 1 00:33:24.056580 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Nov 1 00:33:24.056604 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Nov 1 00:33:24.056791 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Nov 1 00:33:24.056907 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (455) Nov 1 00:33:24.056939 kernel: scsi host0: ahci Nov 1 00:33:24.057087 kernel: scsi host1: ahci Nov 1 00:33:24.057238 kernel: scsi host2: ahci Nov 1 00:33:24.057388 kernel: scsi host3: ahci Nov 1 00:33:24.057552 kernel: scsi host4: ahci Nov 1 00:33:24.057677 kernel: scsi host5: ahci Nov 1 00:33:24.057786 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Nov 1 00:33:24.057797 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Nov 1 00:33:24.057805 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Nov 1 00:33:24.057814 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Nov 1 00:33:24.057823 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Nov 1 00:33:24.057832 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Nov 1 00:33:24.036770 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:33:24.144299 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:33:24.146272 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:33:24.151215 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:33:24.166815 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:33:24.170016 systemd[1]: Starting disk-uuid.service... Nov 1 00:33:24.207992 disk-uuid[537]: Primary Header is updated. Nov 1 00:33:24.207992 disk-uuid[537]: Secondary Entries is updated. Nov 1 00:33:24.207992 disk-uuid[537]: Secondary Header is updated. Nov 1 00:33:24.215348 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:33:24.217955 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:33:24.365254 kernel: ata6: SATA link down (SStatus 0 SControl 300) Nov 1 00:33:24.365341 kernel: ata4: SATA link down (SStatus 0 SControl 300) Nov 1 00:33:24.368009 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Nov 1 00:33:24.369959 kernel: ata5: SATA link down (SStatus 0 SControl 300) Nov 1 00:33:24.371969 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Nov 1 00:33:24.374120 kernel: ata3.00: applying bridge limits Nov 1 00:33:24.374976 kernel: ata2: SATA link down (SStatus 0 SControl 300) Nov 1 00:33:24.377968 kernel: ata1: SATA link down (SStatus 0 SControl 300) Nov 1 00:33:24.378004 kernel: ata3.00: configured for UDMA/100 Nov 1 00:33:24.381942 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Nov 1 00:33:24.412614 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Nov 1 00:33:24.430206 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Nov 1 00:33:24.430238 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Nov 1 00:33:25.220958 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:33:25.221044 disk-uuid[539]: The operation has completed successfully. Nov 1 00:33:25.245532 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:33:25.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.245676 systemd[1]: Finished disk-uuid.service. Nov 1 00:33:25.260827 systemd[1]: Starting verity-setup.service... Nov 1 00:33:25.277978 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Nov 1 00:33:25.304390 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:33:25.307849 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:33:25.310626 systemd[1]: Finished verity-setup.service. Nov 1 00:33:25.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.393951 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:33:25.394143 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:33:25.395755 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:33:25.396566 systemd[1]: Starting ignition-setup.service... Nov 1 00:33:25.398878 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:33:25.410624 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:33:25.410680 kernel: BTRFS info (device vda6): using free space tree Nov 1 00:33:25.410691 kernel: BTRFS info (device vda6): has skinny extents Nov 1 00:33:25.422941 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:33:25.450234 systemd[1]: Finished ignition-setup.service. Nov 1 00:33:25.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.451584 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:33:25.483459 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:33:25.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.485000 audit: BPF prog-id=9 op=LOAD Nov 1 00:33:25.486865 systemd[1]: Starting systemd-networkd.service... Nov 1 00:33:25.526164 systemd-networkd[717]: lo: Link UP Nov 1 00:33:25.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.526178 systemd-networkd[717]: lo: Gained carrier Nov 1 00:33:25.527029 systemd-networkd[717]: Enumeration completed Nov 1 00:33:25.527174 systemd[1]: Started systemd-networkd.service. Nov 1 00:33:25.528911 systemd-networkd[717]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:33:25.529194 systemd[1]: Reached target network.target. Nov 1 00:33:25.530540 systemd-networkd[717]: eth0: Link UP Nov 1 00:33:25.530544 systemd-networkd[717]: eth0: Gained carrier Nov 1 00:33:25.532064 systemd[1]: Starting iscsiuio.service... Nov 1 00:33:25.578480 ignition[683]: Ignition 2.14.0 Nov 1 00:33:25.578494 ignition[683]: Stage: fetch-offline Nov 1 00:33:25.578613 ignition[683]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:33:25.578624 ignition[683]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:33:25.579652 ignition[683]: parsed url from cmdline: "" Nov 1 00:33:25.579661 ignition[683]: no config URL provided Nov 1 00:33:25.579667 ignition[683]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:33:25.579677 ignition[683]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:33:25.579696 ignition[683]: op(1): [started] loading QEMU firmware config module Nov 1 00:33:25.579716 ignition[683]: op(1): executing: "modprobe" "qemu_fw_cfg" Nov 1 00:33:25.588907 ignition[683]: op(1): [finished] loading QEMU firmware config module Nov 1 00:33:25.595869 systemd[1]: Started iscsiuio.service. Nov 1 00:33:25.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.599676 systemd[1]: Starting iscsid.service... Nov 1 00:33:25.603576 iscsid[723]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:33:25.603576 iscsid[723]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:33:25.603576 iscsid[723]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:33:25.603576 iscsid[723]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:33:25.608472 iscsid[723]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:33:25.608472 iscsid[723]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:33:25.606470 systemd[1]: Started iscsid.service. Nov 1 00:33:25.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.628964 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:33:25.642576 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:33:25.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.646135 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:33:25.649707 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:33:25.653418 systemd[1]: Reached target remote-fs.target. Nov 1 00:33:25.658110 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:33:25.666133 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:33:25.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.708769 ignition[683]: parsing config with SHA512: 688109f430601c832e7dd9f46c996547a6880b1fb8d4a8d68f77879a04862af5f06a03159b33c761bcf8aa598b59d81dcdf1f009dd334ee1013de2328d3ef13f Nov 1 00:33:25.710141 systemd-networkd[717]: eth0: DHCPv4 address 10.0.0.38/16, gateway 10.0.0.1 acquired from 10.0.0.1 Nov 1 00:33:25.720413 unknown[683]: fetched base config from "system" Nov 1 00:33:25.720427 unknown[683]: fetched user config from "qemu" Nov 1 00:33:25.721170 ignition[683]: fetch-offline: fetch-offline passed Nov 1 00:33:25.721274 ignition[683]: Ignition finished successfully Nov 1 00:33:25.727124 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:33:25.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.727945 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Nov 1 00:33:25.730288 systemd[1]: Starting ignition-kargs.service... Nov 1 00:33:25.746373 ignition[738]: Ignition 2.14.0 Nov 1 00:33:25.746383 ignition[738]: Stage: kargs Nov 1 00:33:25.746487 ignition[738]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:33:25.746497 ignition[738]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:33:25.753108 ignition[738]: kargs: kargs passed Nov 1 00:33:25.753165 ignition[738]: Ignition finished successfully Nov 1 00:33:25.756603 systemd[1]: Finished ignition-kargs.service. Nov 1 00:33:25.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.759394 systemd[1]: Starting ignition-disks.service... Nov 1 00:33:25.768482 ignition[744]: Ignition 2.14.0 Nov 1 00:33:25.768497 ignition[744]: Stage: disks Nov 1 00:33:25.768607 ignition[744]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:33:25.768618 ignition[744]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:33:25.774756 ignition[744]: disks: disks passed Nov 1 00:33:25.774799 ignition[744]: Ignition finished successfully Nov 1 00:33:25.777750 systemd[1]: Finished ignition-disks.service. Nov 1 00:33:25.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.778560 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:33:25.781611 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:33:25.784391 systemd[1]: Reached target local-fs.target. Nov 1 00:33:25.786871 systemd[1]: Reached target sysinit.target. Nov 1 00:33:25.789284 systemd[1]: Reached target basic.target. Nov 1 00:33:25.795938 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:33:25.807894 systemd-resolved[201]: Detected conflict on linux IN A 10.0.0.38 Nov 1 00:33:25.807932 systemd-resolved[201]: Hostname conflict, changing published hostname from 'linux' to 'linux2'. Nov 1 00:33:25.810431 systemd-fsck[752]: ROOT: clean, 637/553520 files, 56032/553472 blocks Nov 1 00:33:25.820688 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:33:25.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.826538 systemd[1]: Mounting sysroot.mount... Nov 1 00:33:25.837943 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:33:25.838151 systemd[1]: Mounted sysroot.mount. Nov 1 00:33:25.840355 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:33:25.844114 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:33:25.846985 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Nov 1 00:33:25.847030 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:33:25.852157 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:33:25.855782 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:33:25.858742 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:33:25.863858 initrd-setup-root[762]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:33:25.869244 initrd-setup-root[770]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:33:25.874168 initrd-setup-root[778]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:33:25.878846 initrd-setup-root[786]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:33:25.913695 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:33:25.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.917566 systemd[1]: Starting ignition-mount.service... Nov 1 00:33:25.921326 systemd[1]: Starting sysroot-boot.service... Nov 1 00:33:25.924900 bash[803]: umount: /sysroot/usr/share/oem: not mounted. Nov 1 00:33:25.943597 systemd[1]: Finished sysroot-boot.service. Nov 1 00:33:25.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:25.946578 ignition[804]: INFO : Ignition 2.14.0 Nov 1 00:33:25.946578 ignition[804]: INFO : Stage: mount Nov 1 00:33:25.949500 ignition[804]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:33:25.949500 ignition[804]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:33:25.949500 ignition[804]: INFO : mount: mount passed Nov 1 00:33:25.949500 ignition[804]: INFO : Ignition finished successfully Nov 1 00:33:25.958376 systemd[1]: Finished ignition-mount.service. Nov 1 00:33:25.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:26.325488 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:33:26.333950 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (813) Nov 1 00:33:26.338430 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:33:26.338455 kernel: BTRFS info (device vda6): using free space tree Nov 1 00:33:26.338467 kernel: BTRFS info (device vda6): has skinny extents Nov 1 00:33:26.343844 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:33:26.345557 systemd[1]: Starting ignition-files.service... Nov 1 00:33:26.368275 ignition[833]: INFO : Ignition 2.14.0 Nov 1 00:33:26.368275 ignition[833]: INFO : Stage: files Nov 1 00:33:26.372399 ignition[833]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:33:26.372399 ignition[833]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:33:26.372399 ignition[833]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:33:26.372399 ignition[833]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:33:26.372399 ignition[833]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:33:26.384797 ignition[833]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:33:26.384797 ignition[833]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:33:26.384797 ignition[833]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:33:26.384797 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Nov 1 00:33:26.384797 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Nov 1 00:33:26.373346 unknown[833]: wrote ssh authorized keys file for user: core Nov 1 00:33:26.443575 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Nov 1 00:33:26.555024 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Nov 1 00:33:26.555024 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Nov 1 00:33:26.561552 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Nov 1 00:33:26.851234 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Nov 1 00:33:27.453277 systemd-networkd[717]: eth0: Gained IPv6LL Nov 1 00:33:27.942417 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Nov 1 00:33:27.947435 ignition[833]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Nov 1 00:33:28.011100 ignition[833]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Nov 1 00:33:28.015912 ignition[833]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Nov 1 00:33:28.015912 ignition[833]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:33:28.015912 ignition[833]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:33:28.015912 ignition[833]: INFO : files: files passed Nov 1 00:33:28.015912 ignition[833]: INFO : Ignition finished successfully Nov 1 00:33:28.046397 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 00:33:28.046436 kernel: audit: type=1130 audit(1761957208.015:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.046451 kernel: audit: type=1130 audit(1761957208.032:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.046468 kernel: audit: type=1131 audit(1761957208.032:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.012631 systemd[1]: Finished ignition-files.service. Nov 1 00:33:28.017381 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:33:28.026045 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:33:28.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.059087 initrd-setup-root-after-ignition[857]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Nov 1 00:33:28.065385 kernel: audit: type=1130 audit(1761957208.049:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.026855 systemd[1]: Starting ignition-quench.service... Nov 1 00:33:28.067164 initrd-setup-root-after-ignition[859]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:33:28.030162 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:33:28.030234 systemd[1]: Finished ignition-quench.service. Nov 1 00:33:28.086326 kernel: audit: type=1130 audit(1761957208.071:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.086354 kernel: audit: type=1131 audit(1761957208.071:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.046749 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:33:28.049601 systemd[1]: Reached target ignition-complete.target. Nov 1 00:33:28.053067 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:33:28.071505 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:33:28.071625 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:33:28.073184 systemd[1]: Reached target initrd-fs.target. Nov 1 00:33:28.089502 systemd[1]: Reached target initrd.target. Nov 1 00:33:28.090521 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:33:28.091955 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:33:28.108294 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:33:28.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.111683 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:33:28.118872 kernel: audit: type=1130 audit(1761957208.110:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.122652 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:33:28.124307 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:33:28.127300 systemd[1]: Stopped target timers.target. Nov 1 00:33:28.130057 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:33:28.141191 kernel: audit: type=1131 audit(1761957208.132:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.130228 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:33:28.133193 systemd[1]: Stopped target initrd.target. Nov 1 00:33:28.141321 systemd[1]: Stopped target basic.target. Nov 1 00:33:28.144219 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:33:28.147228 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:33:28.150019 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:33:28.153269 systemd[1]: Stopped target remote-fs.target. Nov 1 00:33:28.156284 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:33:28.159363 systemd[1]: Stopped target sysinit.target. Nov 1 00:33:28.162422 systemd[1]: Stopped target local-fs.target. Nov 1 00:33:28.165348 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:33:28.168340 systemd[1]: Stopped target swap.target. Nov 1 00:33:28.182704 kernel: audit: type=1131 audit(1761957208.173:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.170961 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:33:28.171342 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:33:28.195168 kernel: audit: type=1131 audit(1761957208.185:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.174358 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:33:28.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.182763 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:33:28.182884 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:33:28.186163 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:33:28.186323 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:33:28.195437 systemd[1]: Stopped target paths.target. Nov 1 00:33:28.198013 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:33:28.202017 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:33:28.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.204857 systemd[1]: Stopped target slices.target. Nov 1 00:33:28.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.207569 systemd[1]: Stopped target sockets.target. Nov 1 00:33:28.210226 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:33:28.224589 iscsid[723]: iscsid shutting down. Nov 1 00:33:28.210351 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:33:28.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.230588 ignition[874]: INFO : Ignition 2.14.0 Nov 1 00:33:28.230588 ignition[874]: INFO : Stage: umount Nov 1 00:33:28.230588 ignition[874]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:33:28.230588 ignition[874]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:33:28.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.214230 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:33:28.240936 ignition[874]: INFO : umount: umount passed Nov 1 00:33:28.240936 ignition[874]: INFO : Ignition finished successfully Nov 1 00:33:28.214444 systemd[1]: Stopped ignition-files.service. Nov 1 00:33:28.219420 systemd[1]: Stopping ignition-mount.service... Nov 1 00:33:28.221565 systemd[1]: Stopping iscsid.service... Nov 1 00:33:28.224657 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:33:28.224940 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:33:28.228840 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:33:28.230984 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:33:28.231167 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:33:28.235369 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:33:28.240952 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:33:28.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.262010 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:33:28.264199 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:33:28.265728 systemd[1]: Stopped iscsid.service. Nov 1 00:33:28.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.268447 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:33:28.268521 systemd[1]: Stopped ignition-mount.service. Nov 1 00:33:28.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.273212 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:33:28.273294 systemd[1]: Closed iscsid.socket. Nov 1 00:33:28.276905 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:33:28.276991 systemd[1]: Stopped ignition-disks.service. Nov 1 00:33:28.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.281573 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:33:28.281615 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:33:28.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.284529 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:33:28.285747 systemd[1]: Stopped ignition-setup.service. Nov 1 00:33:28.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.289879 systemd[1]: Stopping iscsiuio.service... Nov 1 00:33:28.292714 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:33:28.294398 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:33:28.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.297265 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:33:28.298751 systemd[1]: Stopped iscsiuio.service. Nov 1 00:33:28.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.301890 systemd[1]: Stopped target network.target. Nov 1 00:33:28.304506 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:33:28.306033 systemd[1]: Closed iscsiuio.socket. Nov 1 00:33:28.315844 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:33:28.319074 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:33:28.323989 systemd-networkd[717]: eth0: DHCPv6 lease lost Nov 1 00:33:28.325652 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:33:28.327339 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:33:28.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.331171 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:33:28.332889 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:33:28.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.336678 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:33:28.336741 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:33:28.339000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:33:28.339000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:33:28.342219 systemd[1]: Stopping network-cleanup.service... Nov 1 00:33:28.344793 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:33:28.344853 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:33:28.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.349817 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:33:28.349891 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:33:28.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.354883 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:33:28.356638 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:33:28.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.359711 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:33:28.363567 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:33:28.367464 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:33:28.367586 systemd[1]: Stopped network-cleanup.service. Nov 1 00:33:28.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.373876 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:33:28.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.374032 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:33:28.378261 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:33:28.378354 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:33:28.379994 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:33:28.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.380056 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:33:28.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.383275 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:33:28.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.383402 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:33:28.386145 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:33:28.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.386224 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:33:28.389406 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:33:28.389452 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:33:28.392026 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:33:28.393507 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:33:28.393559 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:33:28.398557 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:33:28.398676 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:33:28.456454 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:33:28.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.456579 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:33:28.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:28.458501 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:33:28.460150 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:33:28.460237 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:33:28.465514 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:33:28.486593 systemd[1]: Switching root. Nov 1 00:33:28.508692 systemd-journald[199]: Journal stopped Nov 1 00:33:33.227071 systemd-journald[199]: Received SIGTERM from PID 1 (systemd). Nov 1 00:33:33.227237 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:33:33.227252 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:33:33.227269 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:33:33.227284 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:33:33.227294 kernel: SELinux: policy capability open_perms=1 Nov 1 00:33:33.227304 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:33:33.227314 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:33:33.227326 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:33:33.227351 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:33:33.227361 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:33:33.227372 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:33:33.227384 systemd[1]: Successfully loaded SELinux policy in 50.716ms. Nov 1 00:33:33.227404 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.311ms. Nov 1 00:33:33.227416 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:33:33.227427 systemd[1]: Detected virtualization kvm. Nov 1 00:33:33.227437 systemd[1]: Detected architecture x86-64. Nov 1 00:33:33.227447 systemd[1]: Detected first boot. Nov 1 00:33:33.227468 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:33:33.227482 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:33:33.227493 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:33:33.227505 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:33:33.227517 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:33:33.227536 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:33:33.227551 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:33:33.227562 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:33:33.227572 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:33:33.227583 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:33:33.227601 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:33:33.227621 systemd[1]: Created slice system-getty.slice. Nov 1 00:33:33.227648 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:33:33.227659 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:33:33.227681 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:33:33.227694 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:33:33.227705 systemd[1]: Created slice user.slice. Nov 1 00:33:33.227715 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:33:33.227726 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:33:33.227737 systemd[1]: Set up automount boot.automount. Nov 1 00:33:33.227750 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:33:33.227773 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:33:33.227788 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:33:33.227798 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:33:33.227809 systemd[1]: Reached target integritysetup.target. Nov 1 00:33:33.227820 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:33:33.227830 systemd[1]: Reached target remote-fs.target. Nov 1 00:33:33.227841 systemd[1]: Reached target slices.target. Nov 1 00:33:33.227851 systemd[1]: Reached target swap.target. Nov 1 00:33:33.227869 systemd[1]: Reached target torcx.target. Nov 1 00:33:33.227880 systemd[1]: Reached target veritysetup.target. Nov 1 00:33:33.227890 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:33:33.227900 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:33:33.227911 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:33:33.227944 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:33:33.227955 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:33:33.227975 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:33:33.227989 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:33:33.228007 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:33:33.228034 systemd[1]: Mounting media.mount... Nov 1 00:33:33.228045 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:33:33.228055 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:33:33.228066 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:33:33.228078 systemd[1]: Mounting tmp.mount... Nov 1 00:33:33.228091 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:33:33.228105 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:33:33.228119 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:33:33.228133 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:33:33.228160 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:33:33.228176 systemd[1]: Starting modprobe@drm.service... Nov 1 00:33:33.228193 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:33:33.228207 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:33:33.228221 systemd[1]: Starting modprobe@loop.service... Nov 1 00:33:33.228240 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:33:33.228256 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:33:33.228273 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:33:33.228303 kernel: fuse: init (API version 7.34) Nov 1 00:33:33.228314 kernel: loop: module loaded Nov 1 00:33:33.228324 kernel: kauditd_printk_skb: 63 callbacks suppressed Nov 1 00:33:33.228335 kernel: audit: type=1131 audit(1761957213.167:102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.228346 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:33:33.228357 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:33:33.228368 kernel: audit: type=1131 audit(1761957213.178:103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.228378 systemd[1]: Stopped systemd-journald.service. Nov 1 00:33:33.228390 kernel: audit: type=1130 audit(1761957213.186:104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.228409 kernel: audit: type=1131 audit(1761957213.186:105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.228420 kernel: audit: type=1334 audit(1761957213.199:106): prog-id=18 op=LOAD Nov 1 00:33:33.228432 kernel: audit: type=1334 audit(1761957213.201:107): prog-id=19 op=LOAD Nov 1 00:33:33.228445 kernel: audit: type=1334 audit(1761957213.203:108): prog-id=20 op=LOAD Nov 1 00:33:33.228455 kernel: audit: type=1334 audit(1761957213.205:109): prog-id=16 op=UNLOAD Nov 1 00:33:33.228465 systemd[1]: Starting systemd-journald.service... Nov 1 00:33:33.228478 kernel: audit: type=1334 audit(1761957213.205:110): prog-id=17 op=UNLOAD Nov 1 00:33:33.228492 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:33:33.228513 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:33:33.228524 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:33:33.228534 kernel: audit: type=1305 audit(1761957213.223:111): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:33:33.228548 systemd-journald[996]: Journal started Nov 1 00:33:33.228593 systemd-journald[996]: Runtime Journal (/run/log/journal/c8cabfc8cb84463d94fd01d003148241) is 6.0M, max 48.5M, 42.5M free. Nov 1 00:33:28.584000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:33:29.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:33:29.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:33:29.178000 audit: BPF prog-id=10 op=LOAD Nov 1 00:33:29.178000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:33:29.178000 audit: BPF prog-id=11 op=LOAD Nov 1 00:33:29.178000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:33:29.212000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:33:29.212000 audit[907]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:29.212000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:33:29.214000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:33:29.214000 audit[907]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179a9 a2=1ed a3=0 items=2 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:29.214000 audit: CWD cwd="/" Nov 1 00:33:29.214000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:29.214000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:29.214000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:33:32.916000 audit: BPF prog-id=12 op=LOAD Nov 1 00:33:32.916000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:33:32.916000 audit: BPF prog-id=13 op=LOAD Nov 1 00:33:32.916000 audit: BPF prog-id=14 op=LOAD Nov 1 00:33:32.916000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:33:32.916000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:33:32.917000 audit: BPF prog-id=15 op=LOAD Nov 1 00:33:32.917000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:33:32.917000 audit: BPF prog-id=16 op=LOAD Nov 1 00:33:32.917000 audit: BPF prog-id=17 op=LOAD Nov 1 00:33:32.917000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:33:32.917000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:33:32.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:32.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:32.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:32.929000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:33:33.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.199000 audit: BPF prog-id=18 op=LOAD Nov 1 00:33:33.201000 audit: BPF prog-id=19 op=LOAD Nov 1 00:33:33.203000 audit: BPF prog-id=20 op=LOAD Nov 1 00:33:33.205000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:33:33.205000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:33:33.223000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:33:32.915182 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:33:29.211315 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:33:32.915196 systemd[1]: Unnecessary job was removed for dev-vda6.device. Nov 1 00:33:29.211516 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:33:33.223000 audit[996]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7fff391bdad0 a2=4000 a3=7fff391bdb6c items=0 ppid=1 pid=996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:33.223000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:33:32.919549 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:33:29.211537 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:33:29.211572 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:33:29.211589 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:33:29.211643 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:33:29.211664 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:33:29.211953 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:33:29.212004 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:33:29.212022 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:33:29.212643 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:33:29.212675 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:33:29.212691 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:33:29.212704 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:33:29.212719 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:33:29.212731 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:33:32.561302 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:32Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:33:32.561592 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:32Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:33:32.561710 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:32Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:33:32.561899 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:32Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:33:32.561969 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:32Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:33:32.562048 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:33:32Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:33:33.235600 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:33:33.235655 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:33:33.238790 systemd[1]: Stopped verity-setup.service. Nov 1 00:33:33.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.243937 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:33:33.247475 systemd[1]: Started systemd-journald.service. Nov 1 00:33:33.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.248053 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:33:33.249401 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:33:33.250744 systemd[1]: Mounted media.mount. Nov 1 00:33:33.252061 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:33:33.253570 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:33:33.255126 systemd[1]: Mounted tmp.mount. Nov 1 00:33:33.256540 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:33:33.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.258133 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:33:33.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.259681 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:33:33.259835 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:33:33.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.261378 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:33:33.261552 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:33:33.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.263100 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:33:33.263248 systemd[1]: Finished modprobe@drm.service. Nov 1 00:33:33.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.264757 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:33:33.264898 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:33:33.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.266574 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:33:33.266708 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:33:33.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.268281 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:33:33.268615 systemd[1]: Finished modprobe@loop.service. Nov 1 00:33:33.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.270330 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:33:33.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.272494 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:33:33.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.274345 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:33:33.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.276275 systemd[1]: Reached target network-pre.target. Nov 1 00:33:33.279128 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:33:33.281791 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:33:33.283098 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:33:33.284777 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:33:33.287350 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:33:33.288988 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:33:33.290296 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:33:33.291813 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:33:33.292914 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:33:33.295577 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:33:33.298669 systemd-journald[996]: Time spent on flushing to /var/log/journal/c8cabfc8cb84463d94fd01d003148241 is 16.832ms for 1111 entries. Nov 1 00:33:33.298669 systemd-journald[996]: System Journal (/var/log/journal/c8cabfc8cb84463d94fd01d003148241) is 8.0M, max 195.6M, 187.6M free. Nov 1 00:33:33.798981 systemd-journald[996]: Received client request to flush runtime journal. Nov 1 00:33:33.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:33.300153 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:33:33.302604 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:33:33.799681 udevadm[1010]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Nov 1 00:33:33.304409 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:33:33.307434 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:33:33.376511 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:33:33.378243 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:33:33.546418 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:33:33.548108 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:33:33.800636 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:33:33.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:34.607125 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:33:34.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:34.629000 audit: BPF prog-id=21 op=LOAD Nov 1 00:33:34.629000 audit: BPF prog-id=22 op=LOAD Nov 1 00:33:34.629000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:33:34.629000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:33:34.631453 systemd[1]: Starting systemd-udevd.service... Nov 1 00:33:34.647750 systemd-udevd[1013]: Using default interface naming scheme 'v252'. Nov 1 00:33:34.661414 systemd[1]: Started systemd-udevd.service. Nov 1 00:33:34.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:34.758948 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Nov 1 00:33:34.760693 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Nov 1 00:33:34.761000 audit: BPF prog-id=23 op=LOAD Nov 1 00:33:34.762840 systemd[1]: Starting systemd-networkd.service... Nov 1 00:33:34.765973 kernel: ACPI: button: Power Button [PWRF] Nov 1 00:33:34.768000 audit: BPF prog-id=24 op=LOAD Nov 1 00:33:34.768000 audit: BPF prog-id=25 op=LOAD Nov 1 00:33:34.768000 audit: BPF prog-id=26 op=LOAD Nov 1 00:33:34.770407 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:33:34.776000 audit[1024]: AVC avc: denied { confidentiality } for pid=1024 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:33:34.776000 audit[1024]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55ce26f3c100 a1=338ec a2=7f50270c1bc5 a3=5 items=110 ppid=1013 pid=1024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:34.776000 audit: CWD cwd="/" Nov 1 00:33:34.776000 audit: PATH item=0 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=1 name=(null) inode=15432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=2 name=(null) inode=15432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=3 name=(null) inode=15433 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=4 name=(null) inode=15432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=5 name=(null) inode=15434 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=6 name=(null) inode=15432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=7 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=8 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=9 name=(null) inode=15436 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=10 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=11 name=(null) inode=15437 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=12 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=13 name=(null) inode=15438 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=14 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=15 name=(null) inode=15439 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=16 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=17 name=(null) inode=15440 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=18 name=(null) inode=15432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=19 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=20 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=21 name=(null) inode=15442 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=22 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=23 name=(null) inode=15443 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=24 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=25 name=(null) inode=15444 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=26 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=27 name=(null) inode=15445 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=28 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=29 name=(null) inode=15446 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=30 name=(null) inode=15432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=31 name=(null) inode=15447 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=32 name=(null) inode=15447 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=33 name=(null) inode=15448 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=34 name=(null) inode=15447 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=35 name=(null) inode=15449 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=36 name=(null) inode=15447 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=37 name=(null) inode=15450 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=38 name=(null) inode=15447 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=39 name=(null) inode=15451 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=40 name=(null) inode=15447 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=41 name=(null) inode=15452 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=42 name=(null) inode=15432 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=43 name=(null) inode=15453 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=44 name=(null) inode=15453 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=45 name=(null) inode=15454 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=46 name=(null) inode=15453 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=47 name=(null) inode=15455 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=48 name=(null) inode=15453 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=49 name=(null) inode=15456 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=50 name=(null) inode=15453 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=51 name=(null) inode=15457 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=52 name=(null) inode=15453 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=53 name=(null) inode=15458 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=54 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=55 name=(null) inode=15459 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=56 name=(null) inode=15459 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=57 name=(null) inode=15460 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=58 name=(null) inode=15459 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=59 name=(null) inode=15461 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=60 name=(null) inode=15459 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=61 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=62 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=63 name=(null) inode=15463 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=64 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=65 name=(null) inode=15464 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=66 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=67 name=(null) inode=15465 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=68 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=69 name=(null) inode=15466 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=70 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=71 name=(null) inode=15467 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=72 name=(null) inode=15459 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=73 name=(null) inode=15468 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=74 name=(null) inode=15468 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=75 name=(null) inode=15469 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=76 name=(null) inode=15468 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=77 name=(null) inode=15470 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=78 name=(null) inode=15468 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=79 name=(null) inode=15471 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=80 name=(null) inode=15468 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=81 name=(null) inode=15472 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=82 name=(null) inode=15468 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=83 name=(null) inode=15473 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=84 name=(null) inode=15459 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=85 name=(null) inode=15474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=86 name=(null) inode=15474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=87 name=(null) inode=15475 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=88 name=(null) inode=15474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=89 name=(null) inode=15476 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=90 name=(null) inode=15474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=91 name=(null) inode=15477 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=92 name=(null) inode=15474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=93 name=(null) inode=15478 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=94 name=(null) inode=15474 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=95 name=(null) inode=15479 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=96 name=(null) inode=15459 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=97 name=(null) inode=15480 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=98 name=(null) inode=15480 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=99 name=(null) inode=15481 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=100 name=(null) inode=15480 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=101 name=(null) inode=15482 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=102 name=(null) inode=15480 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=103 name=(null) inode=15483 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=104 name=(null) inode=15480 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=105 name=(null) inode=15484 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=106 name=(null) inode=15480 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=107 name=(null) inode=15485 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PATH item=109 name=(null) inode=15486 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:33:34.776000 audit: PROCTITLE proctitle="(udev-worker)" Nov 1 00:33:34.798486 systemd[1]: Started systemd-userdbd.service. Nov 1 00:33:34.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:34.804947 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Nov 1 00:33:34.932103 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Nov 1 00:33:34.932465 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Nov 1 00:33:34.932611 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Nov 1 00:33:35.055199 kernel: mousedev: PS/2 mouse device common for all mice Nov 1 00:33:35.087968 kernel: kvm: Nested Virtualization enabled Nov 1 00:33:35.088100 kernel: SVM: kvm: Nested Paging enabled Nov 1 00:33:35.088125 kernel: SVM: Virtual VMLOAD VMSAVE supported Nov 1 00:33:35.088145 kernel: SVM: Virtual GIF supported Nov 1 00:33:35.096369 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:33:35.099241 systemd-networkd[1032]: lo: Link UP Nov 1 00:33:35.099265 systemd-networkd[1032]: lo: Gained carrier Nov 1 00:33:35.099729 systemd-networkd[1032]: Enumeration completed Nov 1 00:33:35.099830 systemd-networkd[1032]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:33:35.101388 systemd-networkd[1032]: eth0: Link UP Nov 1 00:33:35.101631 systemd-networkd[1032]: eth0: Gained carrier Nov 1 00:33:35.117166 kernel: EDAC MC: Ver: 3.0.0 Nov 1 00:33:35.208077 systemd-networkd[1032]: eth0: DHCPv4 address 10.0.0.38/16, gateway 10.0.0.1 acquired from 10.0.0.1 Nov 1 00:33:35.212470 systemd[1]: Started systemd-networkd.service. Nov 1 00:33:35.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:35.223335 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:33:35.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:35.324787 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:33:35.333060 lvm[1048]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:33:35.364000 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:33:35.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:35.450740 systemd[1]: Reached target cryptsetup.target. Nov 1 00:33:35.453236 systemd[1]: Starting lvm2-activation.service... Nov 1 00:33:35.457276 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:33:35.486215 systemd[1]: Finished lvm2-activation.service. Nov 1 00:33:35.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:35.534655 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:33:35.536197 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:33:35.536225 systemd[1]: Reached target local-fs.target. Nov 1 00:33:35.537500 systemd[1]: Reached target machines.target. Nov 1 00:33:35.540171 systemd[1]: Starting ldconfig.service... Nov 1 00:33:35.541954 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:33:35.541992 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:33:35.542879 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:33:35.546136 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:33:35.630627 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:33:35.633813 systemd[1]: Starting systemd-sysext.service... Nov 1 00:33:35.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:35.635344 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1051 (bootctl) Nov 1 00:33:35.637376 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:33:35.652161 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:33:35.948180 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:33:36.010909 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:33:36.011131 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:33:36.037960 kernel: loop0: detected capacity change from 0 to 229808 Nov 1 00:33:36.178717 systemd-fsck[1058]: fsck.fat 4.2 (2021-01-31) Nov 1 00:33:36.178717 systemd-fsck[1058]: /dev/vda1: 790 files, 120773/258078 clusters Nov 1 00:33:36.180546 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:33:36.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.185204 systemd[1]: Mounting boot.mount... Nov 1 00:33:36.198387 systemd[1]: Mounted boot.mount. Nov 1 00:33:36.211755 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:33:36.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.287978 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:33:36.288696 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:33:36.289320 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:33:36.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.343945 kernel: loop1: detected capacity change from 0 to 229808 Nov 1 00:33:36.349155 (sd-sysext)[1064]: Using extensions 'kubernetes'. Nov 1 00:33:36.349632 (sd-sysext)[1064]: Merged extensions into '/usr'. Nov 1 00:33:36.370004 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:33:36.371940 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:33:36.385016 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.387636 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:33:36.391425 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:33:36.400755 ldconfig[1050]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:33:36.413104 systemd[1]: Starting modprobe@loop.service... Nov 1 00:33:36.415065 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.415341 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:33:36.415595 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:33:36.422274 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:33:36.424618 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:33:36.424861 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:33:36.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.427424 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:33:36.427890 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:33:36.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.430947 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:33:36.431159 systemd[1]: Finished modprobe@loop.service. Nov 1 00:33:36.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.433158 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:33:36.433268 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.434270 systemd[1]: Finished systemd-sysext.service. Nov 1 00:33:36.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.437642 systemd[1]: Starting ensure-sysext.service... Nov 1 00:33:36.440532 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:33:36.447499 systemd[1]: Reloading. Nov 1 00:33:36.454696 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:33:36.457694 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:33:36.460947 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:33:36.510241 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-11-01T00:33:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:33:36.510265 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-11-01T00:33:36Z" level=info msg="torcx already run" Nov 1 00:33:36.657357 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:33:36.657385 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:33:36.682723 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:33:36.744000 audit: BPF prog-id=27 op=LOAD Nov 1 00:33:36.744000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:33:36.744000 audit: BPF prog-id=28 op=LOAD Nov 1 00:33:36.744000 audit: BPF prog-id=29 op=LOAD Nov 1 00:33:36.744000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:33:36.744000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:33:36.745000 audit: BPF prog-id=30 op=LOAD Nov 1 00:33:36.745000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:33:36.745000 audit: BPF prog-id=31 op=LOAD Nov 1 00:33:36.746000 audit: BPF prog-id=32 op=LOAD Nov 1 00:33:36.746000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:33:36.746000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:33:36.746000 audit: BPF prog-id=33 op=LOAD Nov 1 00:33:36.746000 audit: BPF prog-id=34 op=LOAD Nov 1 00:33:36.746000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:33:36.746000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:33:36.747000 audit: BPF prog-id=35 op=LOAD Nov 1 00:33:36.747000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:33:36.750650 systemd[1]: Finished ldconfig.service. Nov 1 00:33:36.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.753419 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:33:36.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.758443 systemd[1]: Starting audit-rules.service... Nov 1 00:33:36.761407 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:33:36.764947 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:33:36.783000 audit: BPF prog-id=36 op=LOAD Nov 1 00:33:36.786097 systemd[1]: Starting systemd-resolved.service... Nov 1 00:33:36.788000 audit: BPF prog-id=37 op=LOAD Nov 1 00:33:36.790052 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:33:36.793778 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:33:36.842796 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:33:36.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.844855 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:33:36.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.847000 audit[1147]: SYSTEM_BOOT pid=1147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:33:36.855579 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.855000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:33:36.855000 audit[1154]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffde36e3ee0 a2=420 a3=0 items=0 ppid=1133 pid=1154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:36.855000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:33:36.856781 augenrules[1154]: No rules Nov 1 00:33:36.858305 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:33:36.861501 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:33:36.865177 systemd[1]: Starting modprobe@loop.service... Nov 1 00:33:36.868718 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.868908 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:33:36.870675 systemd[1]: Starting systemd-update-done.service... Nov 1 00:33:36.872470 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:33:36.874178 systemd[1]: Finished audit-rules.service. Nov 1 00:33:36.877820 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:33:36.879845 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:33:36.880167 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:33:36.882374 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:33:36.882526 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:33:36.884542 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:33:36.884846 systemd[1]: Finished modprobe@loop.service. Nov 1 00:33:36.888553 systemd[1]: Finished systemd-update-done.service. Nov 1 00:33:36.892233 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.894534 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:33:36.936591 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:33:36.939205 systemd[1]: Starting modprobe@loop.service... Nov 1 00:33:36.943171 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.943319 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:33:36.943456 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:33:36.943476 systemd-timesyncd[1144]: Contacted time server 10.0.0.1:123 (10.0.0.1). Nov 1 00:33:36.943514 systemd-timesyncd[1144]: Initial clock synchronization to Sat 2025-11-01 00:33:36.624505 UTC. Nov 1 00:33:36.944449 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:33:36.946762 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:33:36.947023 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:33:36.948852 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:33:36.949072 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:33:36.951079 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:33:36.951215 systemd[1]: Finished modprobe@loop.service. Nov 1 00:33:36.953171 systemd[1]: Reached target time-set.target. Nov 1 00:33:36.954748 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:33:36.954908 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.956888 systemd-resolved[1143]: Positive Trust Anchors: Nov 1 00:33:36.956899 systemd-resolved[1143]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:33:36.956941 systemd-resolved[1143]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:33:36.958374 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.961026 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:33:36.964197 systemd[1]: Starting modprobe@drm.service... Nov 1 00:33:36.967381 systemd-resolved[1143]: Defaulting to hostname 'linux'. Nov 1 00:33:36.968463 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:33:36.971534 systemd[1]: Starting modprobe@loop.service... Nov 1 00:33:36.972843 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:33:36.973051 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:33:36.974904 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:33:36.976562 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:33:36.977896 systemd[1]: Started systemd-resolved.service. Nov 1 00:33:36.979809 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:33:36.980014 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:33:36.981875 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:33:36.982070 systemd[1]: Finished modprobe@drm.service. Nov 1 00:33:36.983838 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:33:36.984135 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:33:36.986046 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:33:36.986204 systemd[1]: Finished modprobe@loop.service. Nov 1 00:33:36.988407 systemd[1]: Reached target network.target. Nov 1 00:33:36.989876 systemd[1]: Reached target nss-lookup.target. Nov 1 00:33:36.991287 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:33:36.991341 systemd[1]: Reached target sysinit.target. Nov 1 00:33:36.992739 systemd[1]: Started motdgen.path. Nov 1 00:33:36.993992 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:33:36.996062 systemd[1]: Started logrotate.timer. Nov 1 00:33:36.997394 systemd[1]: Started mdadm.timer. Nov 1 00:33:36.998538 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:33:37.000016 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:33:37.000057 systemd[1]: Reached target paths.target. Nov 1 00:33:37.001311 systemd[1]: Reached target timers.target. Nov 1 00:33:37.002982 systemd[1]: Listening on dbus.socket. Nov 1 00:33:37.005626 systemd[1]: Starting docker.socket... Nov 1 00:33:37.009386 systemd[1]: Listening on sshd.socket. Nov 1 00:33:37.010671 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:33:37.010724 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:33:37.012962 systemd[1]: Finished ensure-sysext.service. Nov 1 00:33:37.014416 systemd[1]: Listening on docker.socket. Nov 1 00:33:37.016588 systemd[1]: Reached target sockets.target. Nov 1 00:33:37.033573 systemd[1]: Reached target basic.target. Nov 1 00:33:37.034807 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:33:37.034861 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:33:37.034902 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:33:37.036156 systemd[1]: Starting containerd.service... Nov 1 00:33:37.038506 systemd[1]: Starting dbus.service... Nov 1 00:33:37.041202 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:33:37.044341 systemd[1]: Starting extend-filesystems.service... Nov 1 00:33:37.045821 jq[1176]: false Nov 1 00:33:37.045767 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:33:37.046865 systemd[1]: Starting motdgen.service... Nov 1 00:33:37.049196 systemd[1]: Starting prepare-helm.service... Nov 1 00:33:37.051675 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:33:37.053177 systemd-networkd[1032]: eth0: Gained IPv6LL Nov 1 00:33:37.074997 extend-filesystems[1177]: Found loop1 Nov 1 00:33:37.074997 extend-filesystems[1177]: Found sr0 Nov 1 00:33:37.074997 extend-filesystems[1177]: Found vda Nov 1 00:33:37.074997 extend-filesystems[1177]: Found vda1 Nov 1 00:33:37.074997 extend-filesystems[1177]: Found vda2 Nov 1 00:33:37.074997 extend-filesystems[1177]: Found vda3 Nov 1 00:33:37.074997 extend-filesystems[1177]: Found usr Nov 1 00:33:37.074997 extend-filesystems[1177]: Found vda4 Nov 1 00:33:37.074997 extend-filesystems[1177]: Found vda6 Nov 1 00:33:37.074997 extend-filesystems[1177]: Found vda7 Nov 1 00:33:37.074997 extend-filesystems[1177]: Found vda9 Nov 1 00:33:37.074997 extend-filesystems[1177]: Checking size of /dev/vda9 Nov 1 00:33:37.054738 systemd[1]: Starting sshd-keygen.service... Nov 1 00:33:37.121589 dbus-daemon[1175]: [system] SELinux support is enabled Nov 1 00:33:37.058060 systemd[1]: Starting systemd-logind.service... Nov 1 00:33:37.059364 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:33:37.059440 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:33:37.220601 jq[1192]: true Nov 1 00:33:37.059816 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:33:37.060510 systemd[1]: Starting update-engine.service... Nov 1 00:33:37.220955 tar[1199]: linux-amd64/LICENSE Nov 1 00:33:37.220955 tar[1199]: linux-amd64/helm Nov 1 00:33:37.063364 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:33:37.221224 jq[1200]: true Nov 1 00:33:37.117575 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:33:37.118469 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:33:37.122991 systemd[1]: Started dbus.service. Nov 1 00:33:37.126464 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:33:37.126604 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:33:37.126860 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:33:37.127006 systemd[1]: Finished motdgen.service. Nov 1 00:33:37.130211 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:33:37.130455 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:33:37.167898 systemd[1]: Reached target network-online.target. Nov 1 00:33:37.173957 systemd[1]: Starting kubelet.service... Nov 1 00:33:37.175271 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:33:37.175349 systemd[1]: Reached target system-config.target. Nov 1 00:33:37.177163 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:33:37.177213 systemd[1]: Reached target user-config.target. Nov 1 00:33:37.225141 extend-filesystems[1177]: Resized partition /dev/vda9 Nov 1 00:33:37.228313 extend-filesystems[1215]: resize2fs 1.46.5 (30-Dec-2021) Nov 1 00:33:37.250529 env[1201]: time="2025-11-01T00:33:37.250413262Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:33:37.260365 update_engine[1188]: I1101 00:33:37.260135 1188 main.cc:92] Flatcar Update Engine starting Nov 1 00:33:37.264627 systemd[1]: Started update-engine.service. Nov 1 00:33:37.264728 update_engine[1188]: I1101 00:33:37.264667 1188 update_check_scheduler.cc:74] Next update check in 4m9s Nov 1 00:33:37.292477 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Nov 1 00:33:37.295018 env[1201]: time="2025-11-01T00:33:37.294547218Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:33:37.295018 env[1201]: time="2025-11-01T00:33:37.294821275Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:33:37.297764 env[1201]: time="2025-11-01T00:33:37.297727992Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:33:37.297871 env[1201]: time="2025-11-01T00:33:37.297846533Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:33:37.298256 env[1201]: time="2025-11-01T00:33:37.298228596Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:33:37.298356 env[1201]: time="2025-11-01T00:33:37.298331332Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:33:37.298457 env[1201]: time="2025-11-01T00:33:37.298427824Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:33:37.298559 env[1201]: time="2025-11-01T00:33:37.298535042Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:33:37.298747 env[1201]: time="2025-11-01T00:33:37.298724112Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:33:37.299206 env[1201]: time="2025-11-01T00:33:37.299182775Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:33:37.299476 env[1201]: time="2025-11-01T00:33:37.299434554Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:33:37.299596 env[1201]: time="2025-11-01T00:33:37.299561655Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:33:37.299772 env[1201]: time="2025-11-01T00:33:37.299746703Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:33:37.299872 env[1201]: time="2025-11-01T00:33:37.299849150Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:33:37.316704 systemd[1]: Started locksmithd.service. Nov 1 00:33:37.325259 systemd-logind[1187]: Watching system buttons on /dev/input/event1 (Power Button) Nov 1 00:33:37.325733 systemd-logind[1187]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 1 00:33:37.326297 systemd-logind[1187]: New seat seat0. Nov 1 00:33:37.334075 systemd[1]: Started systemd-logind.service. Nov 1 00:33:37.370948 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Nov 1 00:33:37.636817 extend-filesystems[1215]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Nov 1 00:33:37.636817 extend-filesystems[1215]: old_desc_blocks = 1, new_desc_blocks = 1 Nov 1 00:33:37.636817 extend-filesystems[1215]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Nov 1 00:33:37.650263 sshd_keygen[1198]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:33:37.471012 locksmithd[1234]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:33:37.650647 extend-filesystems[1177]: Resized filesystem in /dev/vda9 Nov 1 00:33:37.652386 bash[1228]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:33:37.637851 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:33:37.638085 systemd[1]: Finished extend-filesystems.service. Nov 1 00:33:37.646079 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:33:37.654087 env[1201]: time="2025-11-01T00:33:37.653768497Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:33:37.654087 env[1201]: time="2025-11-01T00:33:37.653874801Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:33:37.654087 env[1201]: time="2025-11-01T00:33:37.653925746Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:33:37.654087 env[1201]: time="2025-11-01T00:33:37.654003316Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.654087 env[1201]: time="2025-11-01T00:33:37.654030232Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.654087 env[1201]: time="2025-11-01T00:33:37.654068190Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.654087 env[1201]: time="2025-11-01T00:33:37.654083235Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.654370 env[1201]: time="2025-11-01T00:33:37.654102993Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.654370 env[1201]: time="2025-11-01T00:33:37.654279452Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.654370 env[1201]: time="2025-11-01T00:33:37.654302933Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.654370 env[1201]: time="2025-11-01T00:33:37.654318083Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.654468 env[1201]: time="2025-11-01T00:33:37.654416874Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.654630906Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.654744416Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655212823Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655251715Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655268963Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655344898Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655362030Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655376276Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655389022Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655403249Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655420199Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655433194Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655446123Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655460648Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:33:37.656754 env[1201]: time="2025-11-01T00:33:37.655604363Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.657420 env[1201]: time="2025-11-01T00:33:37.655628969Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.657420 env[1201]: time="2025-11-01T00:33:37.655643186Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.657420 env[1201]: time="2025-11-01T00:33:37.655764766Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:33:37.657420 env[1201]: time="2025-11-01T00:33:37.655790421Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:33:37.657420 env[1201]: time="2025-11-01T00:33:37.655802455Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:33:37.657420 env[1201]: time="2025-11-01T00:33:37.655832689Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:33:37.657420 env[1201]: time="2025-11-01T00:33:37.655885942Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.656166232Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.656234472Z" level=info msg="Connect containerd service" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.656289207Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.657158455Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.657288096Z" level=info msg="Start subscribing containerd event" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.657347342Z" level=info msg="Start recovering state" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.657404097Z" level=info msg="Start event monitor" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.657421171Z" level=info msg="Start snapshots syncer" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.657444334Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:33:37.657641 env[1201]: time="2025-11-01T00:33:37.657453070Z" level=info msg="Start streaming server" Nov 1 00:33:37.660351 env[1201]: time="2025-11-01T00:33:37.657944929Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:33:37.660351 env[1201]: time="2025-11-01T00:33:37.657993574Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:33:37.658165 systemd[1]: Started containerd.service. Nov 1 00:33:37.667141 env[1201]: time="2025-11-01T00:33:37.667108171Z" level=info msg="containerd successfully booted in 0.421052s" Nov 1 00:33:37.680114 systemd[1]: Finished sshd-keygen.service. Nov 1 00:33:37.683975 systemd[1]: Starting issuegen.service... Nov 1 00:33:37.690561 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:33:37.690751 systemd[1]: Finished issuegen.service. Nov 1 00:33:37.693714 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:33:37.705400 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:33:37.709646 systemd[1]: Started getty@tty1.service. Nov 1 00:33:37.715866 systemd[1]: Started serial-getty@ttyS0.service. Nov 1 00:33:37.718115 systemd[1]: Reached target getty.target. Nov 1 00:33:38.078193 tar[1199]: linux-amd64/README.md Nov 1 00:33:38.084987 systemd[1]: Finished prepare-helm.service. Nov 1 00:33:39.116435 systemd[1]: Started kubelet.service. Nov 1 00:33:39.118710 systemd[1]: Reached target multi-user.target. Nov 1 00:33:39.122070 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:33:39.132751 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:33:39.132967 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:33:39.134668 systemd[1]: Startup finished in 1.065s (kernel) + 5.656s (initrd) + 10.602s (userspace) = 17.324s. Nov 1 00:33:40.453000 kubelet[1257]: E1101 00:33:40.452872 1257 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:33:40.455671 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:33:40.455796 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:33:40.456092 systemd[1]: kubelet.service: Consumed 2.189s CPU time. Nov 1 00:33:46.395652 systemd[1]: Created slice system-sshd.slice. Nov 1 00:33:46.396948 systemd[1]: Started sshd@0-10.0.0.38:22-10.0.0.1:51574.service. Nov 1 00:33:46.448284 sshd[1267]: Accepted publickey for core from 10.0.0.1 port 51574 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:33:46.451317 sshd[1267]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:33:46.464773 systemd[1]: Created slice user-500.slice. Nov 1 00:33:46.467290 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:33:46.470087 systemd-logind[1187]: New session 1 of user core. Nov 1 00:33:46.477999 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:33:46.479798 systemd[1]: Starting user@500.service... Nov 1 00:33:46.483351 (systemd)[1270]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:33:46.619818 systemd[1270]: Queued start job for default target default.target. Nov 1 00:33:46.620461 systemd[1270]: Reached target paths.target. Nov 1 00:33:46.620486 systemd[1270]: Reached target sockets.target. Nov 1 00:33:46.620505 systemd[1270]: Reached target timers.target. Nov 1 00:33:46.620521 systemd[1270]: Reached target basic.target. Nov 1 00:33:46.620574 systemd[1270]: Reached target default.target. Nov 1 00:33:46.620606 systemd[1270]: Startup finished in 130ms. Nov 1 00:33:46.620832 systemd[1]: Started user@500.service. Nov 1 00:33:46.622228 systemd[1]: Started session-1.scope. Nov 1 00:33:46.677407 systemd[1]: Started sshd@1-10.0.0.38:22-10.0.0.1:51580.service. Nov 1 00:33:46.719673 sshd[1279]: Accepted publickey for core from 10.0.0.1 port 51580 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:33:46.721063 sshd[1279]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:33:46.725042 systemd-logind[1187]: New session 2 of user core. Nov 1 00:33:46.726461 systemd[1]: Started session-2.scope. Nov 1 00:33:46.780578 sshd[1279]: pam_unix(sshd:session): session closed for user core Nov 1 00:33:46.784024 systemd[1]: sshd@1-10.0.0.38:22-10.0.0.1:51580.service: Deactivated successfully. Nov 1 00:33:46.784628 systemd[1]: session-2.scope: Deactivated successfully. Nov 1 00:33:46.785205 systemd-logind[1187]: Session 2 logged out. Waiting for processes to exit. Nov 1 00:33:46.786384 systemd[1]: Started sshd@2-10.0.0.38:22-10.0.0.1:51596.service. Nov 1 00:33:46.787139 systemd-logind[1187]: Removed session 2. Nov 1 00:33:46.825039 sshd[1285]: Accepted publickey for core from 10.0.0.1 port 51596 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:33:46.826452 sshd[1285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:33:46.830200 systemd-logind[1187]: New session 3 of user core. Nov 1 00:33:46.831075 systemd[1]: Started session-3.scope. Nov 1 00:33:46.881012 sshd[1285]: pam_unix(sshd:session): session closed for user core Nov 1 00:33:46.884635 systemd[1]: sshd@2-10.0.0.38:22-10.0.0.1:51596.service: Deactivated successfully. Nov 1 00:33:46.885294 systemd[1]: session-3.scope: Deactivated successfully. Nov 1 00:33:46.885869 systemd-logind[1187]: Session 3 logged out. Waiting for processes to exit. Nov 1 00:33:46.887388 systemd[1]: Started sshd@3-10.0.0.38:22-10.0.0.1:51612.service. Nov 1 00:33:46.888328 systemd-logind[1187]: Removed session 3. Nov 1 00:33:46.930170 sshd[1291]: Accepted publickey for core from 10.0.0.1 port 51612 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:33:46.931629 sshd[1291]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:33:46.935560 systemd-logind[1187]: New session 4 of user core. Nov 1 00:33:46.936425 systemd[1]: Started session-4.scope. Nov 1 00:33:46.991358 sshd[1291]: pam_unix(sshd:session): session closed for user core Nov 1 00:33:46.994578 systemd[1]: sshd@3-10.0.0.38:22-10.0.0.1:51612.service: Deactivated successfully. Nov 1 00:33:46.995198 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:33:46.995699 systemd-logind[1187]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:33:46.996886 systemd[1]: Started sshd@4-10.0.0.38:22-10.0.0.1:51626.service. Nov 1 00:33:46.998342 systemd-logind[1187]: Removed session 4. Nov 1 00:33:47.038775 sshd[1297]: Accepted publickey for core from 10.0.0.1 port 51626 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:33:47.041534 sshd[1297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:33:47.045259 systemd-logind[1187]: New session 5 of user core. Nov 1 00:33:47.046319 systemd[1]: Started session-5.scope. Nov 1 00:33:47.108689 sudo[1301]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:33:47.108881 sudo[1301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:33:47.123326 dbus-daemon[1175]: \xd0m\x8b%\xd8U: received setenforce notice (enforcing=-286351856) Nov 1 00:33:47.127178 sudo[1301]: pam_unix(sudo:session): session closed for user root Nov 1 00:33:47.141762 sshd[1297]: pam_unix(sshd:session): session closed for user core Nov 1 00:33:47.144815 systemd[1]: sshd@4-10.0.0.38:22-10.0.0.1:51626.service: Deactivated successfully. Nov 1 00:33:47.145514 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:33:47.146079 systemd-logind[1187]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:33:47.147480 systemd[1]: Started sshd@5-10.0.0.38:22-10.0.0.1:51632.service. Nov 1 00:33:47.148420 systemd-logind[1187]: Removed session 5. Nov 1 00:33:47.188656 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 51632 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:33:47.190284 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:33:47.193830 systemd-logind[1187]: New session 6 of user core. Nov 1 00:33:47.194635 systemd[1]: Started session-6.scope. Nov 1 00:33:47.250448 sudo[1309]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:33:47.250643 sudo[1309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:33:47.253578 sudo[1309]: pam_unix(sudo:session): session closed for user root Nov 1 00:33:47.258091 sudo[1308]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:33:47.258299 sudo[1308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:33:47.269894 systemd[1]: Stopping audit-rules.service... Nov 1 00:33:47.269000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:33:47.274981 kernel: kauditd_printk_skb: 194 callbacks suppressed Nov 1 00:33:47.275110 kernel: audit: type=1305 audit(1761957227.269:189): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:33:47.275174 auditctl[1312]: No rules Nov 1 00:33:47.275802 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:33:47.276042 systemd[1]: Stopped audit-rules.service. Nov 1 00:33:47.269000 audit[1312]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe3b76e6c0 a2=420 a3=0 items=0 ppid=1 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:47.279941 systemd[1]: Starting audit-rules.service... Nov 1 00:33:47.287850 kernel: audit: type=1300 audit(1761957227.269:189): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe3b76e6c0 a2=420 a3=0 items=0 ppid=1 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:47.287971 kernel: audit: type=1327 audit(1761957227.269:189): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:33:47.269000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:33:47.290900 kernel: audit: type=1131 audit(1761957227.272:190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.298978 augenrules[1329]: No rules Nov 1 00:33:47.299656 systemd[1]: Finished audit-rules.service. Nov 1 00:33:47.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.304096 sudo[1308]: pam_unix(sudo:session): session closed for user root Nov 1 00:33:47.306320 kernel: audit: type=1130 audit(1761957227.298:191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.306378 kernel: audit: type=1106 audit(1761957227.303:192): pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.303000 audit[1308]: USER_END pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.305541 sshd[1305]: pam_unix(sshd:session): session closed for user core Nov 1 00:33:47.308706 systemd[1]: sshd@5-10.0.0.38:22-10.0.0.1:51632.service: Deactivated successfully. Nov 1 00:33:47.309495 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:33:47.310217 systemd-logind[1187]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:33:47.311292 systemd[1]: Started sshd@6-10.0.0.38:22-10.0.0.1:51644.service. Nov 1 00:33:47.312122 systemd-logind[1187]: Removed session 6. Nov 1 00:33:47.303000 audit[1308]: CRED_DISP pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.321259 kernel: audit: type=1104 audit(1761957227.303:193): pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.321316 kernel: audit: type=1106 audit(1761957227.305:194): pid=1305 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:33:47.305000 audit[1305]: USER_END pid=1305 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:33:47.329746 kernel: audit: type=1104 audit(1761957227.305:195): pid=1305 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:33:47.305000 audit[1305]: CRED_DISP pid=1305 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:33:47.336242 kernel: audit: type=1131 audit(1761957227.308:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.38:22-10.0.0.1:51632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.38:22-10.0.0.1:51632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.38:22-10.0.0.1:51644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.367000 audit[1335]: USER_ACCT pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:33:47.369639 sshd[1335]: Accepted publickey for core from 10.0.0.1 port 51644 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:33:47.369000 audit[1335]: CRED_ACQ pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:33:47.369000 audit[1335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc43733980 a2=3 a3=0 items=0 ppid=1 pid=1335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:47.369000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:33:47.371018 sshd[1335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:33:47.376356 systemd-logind[1187]: New session 7 of user core. Nov 1 00:33:47.377495 systemd[1]: Started session-7.scope. Nov 1 00:33:47.384000 audit[1335]: USER_START pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:33:47.385000 audit[1337]: CRED_ACQ pid=1337 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:33:47.433000 audit[1338]: USER_ACCT pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.433000 audit[1338]: CRED_REFR pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.434322 sudo[1338]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:33:47.434599 sudo[1338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:33:47.435000 audit[1338]: USER_START pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:33:47.474156 systemd[1]: Starting docker.service... Nov 1 00:33:47.591589 env[1350]: time="2025-11-01T00:33:47.591476861Z" level=info msg="Starting up" Nov 1 00:33:47.593415 env[1350]: time="2025-11-01T00:33:47.593354897Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:33:47.593415 env[1350]: time="2025-11-01T00:33:47.593388663Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:33:47.593415 env[1350]: time="2025-11-01T00:33:47.593415837Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:33:47.593663 env[1350]: time="2025-11-01T00:33:47.593431480Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:33:47.596975 env[1350]: time="2025-11-01T00:33:47.596932611Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:33:47.596975 env[1350]: time="2025-11-01T00:33:47.596960141Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:33:47.596975 env[1350]: time="2025-11-01T00:33:47.596982942Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:33:47.597183 env[1350]: time="2025-11-01T00:33:47.596995732Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:33:48.909100 env[1350]: time="2025-11-01T00:33:48.909031053Z" level=info msg="Loading containers: start." Nov 1 00:33:48.974000 audit[1384]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:48.974000 audit[1384]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd7c63be60 a2=0 a3=7ffd7c63be4c items=0 ppid=1350 pid=1384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:48.974000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:33:48.975000 audit[1386]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:48.975000 audit[1386]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe8ed72000 a2=0 a3=7ffe8ed71fec items=0 ppid=1350 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:48.975000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:33:48.977000 audit[1388]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:48.977000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff74b56d80 a2=0 a3=7fff74b56d6c items=0 ppid=1350 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:48.977000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:33:48.979000 audit[1390]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:48.979000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe25426d70 a2=0 a3=7ffe25426d5c items=0 ppid=1350 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:48.979000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:33:48.981000 audit[1392]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:48.981000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd70934e70 a2=0 a3=7ffd70934e5c items=0 ppid=1350 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:48.981000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:33:49.001000 audit[1397]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.001000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd23716f00 a2=0 a3=7ffd23716eec items=0 ppid=1350 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.001000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:33:49.110000 audit[1399]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.110000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe9a16d230 a2=0 a3=7ffe9a16d21c items=0 ppid=1350 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.110000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:33:49.113000 audit[1401]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.113000 audit[1401]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffcc648d3c0 a2=0 a3=7ffcc648d3ac items=0 ppid=1350 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.113000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:33:49.116000 audit[1403]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.116000 audit[1403]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd3d2f4270 a2=0 a3=7ffd3d2f425c items=0 ppid=1350 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.116000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:33:49.138000 audit[1407]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.138000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdc9ce2270 a2=0 a3=7ffdc9ce225c items=0 ppid=1350 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.138000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:33:49.143000 audit[1408]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.143000 audit[1408]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff935a4c00 a2=0 a3=7fff935a4bec items=0 ppid=1350 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.143000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:33:49.153946 kernel: Initializing XFRM netlink socket Nov 1 00:33:49.185507 env[1350]: time="2025-11-01T00:33:49.185328234Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:33:49.214000 audit[1416]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.214000 audit[1416]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff3194ebd0 a2=0 a3=7fff3194ebbc items=0 ppid=1350 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.214000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:33:49.234000 audit[1419]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.234000 audit[1419]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdbf3b1210 a2=0 a3=7ffdbf3b11fc items=0 ppid=1350 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.234000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:33:49.237000 audit[1422]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.237000 audit[1422]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe6c779330 a2=0 a3=7ffe6c77931c items=0 ppid=1350 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.237000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:33:49.239000 audit[1424]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.239000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffe5cbf540 a2=0 a3=7fffe5cbf52c items=0 ppid=1350 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.239000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:33:49.243000 audit[1426]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.243000 audit[1426]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff30f394c0 a2=0 a3=7fff30f394ac items=0 ppid=1350 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.243000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:33:49.246000 audit[1428]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.246000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffdfd816970 a2=0 a3=7ffdfd81695c items=0 ppid=1350 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.246000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:33:49.248000 audit[1430]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.248000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdb68ef580 a2=0 a3=7ffdb68ef56c items=0 ppid=1350 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:33:49.260000 audit[1433]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.260000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc475ba5f0 a2=0 a3=7ffc475ba5dc items=0 ppid=1350 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.260000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:33:49.262000 audit[1435]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.262000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe2be8db00 a2=0 a3=7ffe2be8daec items=0 ppid=1350 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.262000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:33:49.265000 audit[1437]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.265000 audit[1437]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff6ccb78c0 a2=0 a3=7fff6ccb78ac items=0 ppid=1350 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.265000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:33:49.267000 audit[1439]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.267000 audit[1439]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe3a1a5960 a2=0 a3=7ffe3a1a594c items=0 ppid=1350 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.267000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:33:49.269343 systemd-networkd[1032]: docker0: Link UP Nov 1 00:33:49.286000 audit[1443]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.286000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd6adec660 a2=0 a3=7ffd6adec64c items=0 ppid=1350 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.286000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:33:49.291000 audit[1444]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:33:49.291000 audit[1444]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe0c8b3c20 a2=0 a3=7ffe0c8b3c0c items=0 ppid=1350 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:33:49.291000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:33:49.292584 env[1350]: time="2025-11-01T00:33:49.292533827Z" level=info msg="Loading containers: done." Nov 1 00:33:49.307437 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2174858879-merged.mount: Deactivated successfully. Nov 1 00:33:49.319891 env[1350]: time="2025-11-01T00:33:49.319786903Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:33:49.320182 env[1350]: time="2025-11-01T00:33:49.320147238Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:33:49.320343 env[1350]: time="2025-11-01T00:33:49.320309263Z" level=info msg="Daemon has completed initialization" Nov 1 00:33:49.352654 systemd[1]: Started docker.service. Nov 1 00:33:49.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:49.358971 env[1350]: time="2025-11-01T00:33:49.358871533Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:33:50.557537 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:33:50.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:50.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:50.557784 systemd[1]: Stopped kubelet.service. Nov 1 00:33:50.557847 systemd[1]: kubelet.service: Consumed 2.189s CPU time. Nov 1 00:33:50.560227 systemd[1]: Starting kubelet.service... Nov 1 00:33:50.712329 systemd[1]: Started kubelet.service. Nov 1 00:33:50.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:33:50.777507 kubelet[1483]: E1101 00:33:50.777441 1483 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:33:50.780662 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:33:50.780838 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:33:50.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:33:50.955321 env[1201]: time="2025-11-01T00:33:50.955141070Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Nov 1 00:33:52.137267 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount196771108.mount: Deactivated successfully. Nov 1 00:33:59.938714 env[1201]: time="2025-11-01T00:33:59.938648665Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:33:59.994390 env[1201]: time="2025-11-01T00:33:59.994288937Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:00.024571 env[1201]: time="2025-11-01T00:34:00.024478581Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:00.057004 env[1201]: time="2025-11-01T00:34:00.056909765Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:00.057719 env[1201]: time="2025-11-01T00:34:00.057680266Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62\"" Nov 1 00:34:00.058660 env[1201]: time="2025-11-01T00:34:00.058629122Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Nov 1 00:34:00.807591 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:34:00.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:00.807857 systemd[1]: Stopped kubelet.service. Nov 1 00:34:00.810012 systemd[1]: Starting kubelet.service... Nov 1 00:34:00.825312 kernel: kauditd_printk_skb: 88 callbacks suppressed Nov 1 00:34:00.825448 kernel: audit: type=1130 audit(1761957240.806:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:00.807000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:00.851349 kernel: audit: type=1131 audit(1761957240.807:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:00.910362 systemd[1]: Started kubelet.service. Nov 1 00:34:00.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:00.933970 kernel: audit: type=1130 audit(1761957240.909:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:01.280402 kubelet[1497]: E1101 00:34:01.280225 1497 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:34:01.282778 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:34:01.282943 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:34:01.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:34:01.290008 kernel: audit: type=1131 audit(1761957241.282:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:34:04.924667 env[1201]: time="2025-11-01T00:34:04.924577188Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:04.927681 env[1201]: time="2025-11-01T00:34:04.927638325Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:04.930611 env[1201]: time="2025-11-01T00:34:04.930525924Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:04.934593 env[1201]: time="2025-11-01T00:34:04.934508192Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:04.936141 env[1201]: time="2025-11-01T00:34:04.936060493Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668\"" Nov 1 00:34:04.936897 env[1201]: time="2025-11-01T00:34:04.936827651Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Nov 1 00:34:07.041093 env[1201]: time="2025-11-01T00:34:07.040976742Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:07.044423 env[1201]: time="2025-11-01T00:34:07.044367333Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:07.139496 env[1201]: time="2025-11-01T00:34:07.139395080Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:07.149044 env[1201]: time="2025-11-01T00:34:07.148965150Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:07.149943 env[1201]: time="2025-11-01T00:34:07.149860790Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf\"" Nov 1 00:34:07.150459 env[1201]: time="2025-11-01T00:34:07.150426502Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Nov 1 00:34:09.373975 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2297261716.mount: Deactivated successfully. Nov 1 00:34:10.896140 env[1201]: time="2025-11-01T00:34:10.896065159Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:10.900424 env[1201]: time="2025-11-01T00:34:10.900369451Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:10.902858 env[1201]: time="2025-11-01T00:34:10.902813832Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:10.904481 env[1201]: time="2025-11-01T00:34:10.904424321Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:10.905006 env[1201]: time="2025-11-01T00:34:10.904969696Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3\"" Nov 1 00:34:10.905678 env[1201]: time="2025-11-01T00:34:10.905650024Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Nov 1 00:34:11.307394 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Nov 1 00:34:11.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:11.307623 systemd[1]: Stopped kubelet.service. Nov 1 00:34:11.309517 systemd[1]: Starting kubelet.service... Nov 1 00:34:11.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:11.339294 kernel: audit: type=1130 audit(1761957251.306:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:11.339420 kernel: audit: type=1131 audit(1761957251.306:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:11.422974 systemd[1]: Started kubelet.service. Nov 1 00:34:11.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:11.471968 kernel: audit: type=1130 audit(1761957251.422:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:11.489694 kubelet[1508]: E1101 00:34:11.489630 1508 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:34:11.491461 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:34:11.491578 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:34:11.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:34:11.553967 kernel: audit: type=1131 audit(1761957251.490:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:34:12.775066 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4030341772.mount: Deactivated successfully. Nov 1 00:34:16.049722 env[1201]: time="2025-11-01T00:34:16.049638853Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:16.052334 env[1201]: time="2025-11-01T00:34:16.052304167Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:16.054942 env[1201]: time="2025-11-01T00:34:16.054910288Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:16.057987 env[1201]: time="2025-11-01T00:34:16.057949162Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:16.059746 env[1201]: time="2025-11-01T00:34:16.059644973Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Nov 1 00:34:16.060504 env[1201]: time="2025-11-01T00:34:16.060473273Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:34:16.552095 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount759476126.mount: Deactivated successfully. Nov 1 00:34:16.559361 env[1201]: time="2025-11-01T00:34:16.559276023Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:16.561487 env[1201]: time="2025-11-01T00:34:16.561444220Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:16.563421 env[1201]: time="2025-11-01T00:34:16.563379000Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:16.565560 env[1201]: time="2025-11-01T00:34:16.565507213Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:16.566737 env[1201]: time="2025-11-01T00:34:16.566657935Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Nov 1 00:34:16.567428 env[1201]: time="2025-11-01T00:34:16.567359209Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Nov 1 00:34:17.255856 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1525632111.mount: Deactivated successfully. Nov 1 00:34:21.354541 env[1201]: time="2025-11-01T00:34:21.354453772Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:21.357155 env[1201]: time="2025-11-01T00:34:21.357114206Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:21.359152 env[1201]: time="2025-11-01T00:34:21.359121677Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:21.361264 env[1201]: time="2025-11-01T00:34:21.361242921Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:21.362284 env[1201]: time="2025-11-01T00:34:21.362248040Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Nov 1 00:34:21.557512 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Nov 1 00:34:21.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:21.557719 systemd[1]: Stopped kubelet.service. Nov 1 00:34:21.559581 systemd[1]: Starting kubelet.service... Nov 1 00:34:21.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:21.571602 kernel: audit: type=1130 audit(1761957261.556:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:21.571693 kernel: audit: type=1131 audit(1761957261.556:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:21.681704 systemd[1]: Started kubelet.service. Nov 1 00:34:21.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:21.695953 kernel: audit: type=1130 audit(1761957261.680:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:21.759165 kubelet[1526]: E1101 00:34:21.759098 1526 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:34:21.761275 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:34:21.761426 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:34:21.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:34:21.772955 kernel: audit: type=1131 audit(1761957261.759:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:34:22.815582 update_engine[1188]: I1101 00:34:22.815431 1188 update_attempter.cc:509] Updating boot flags... Nov 1 00:34:24.668251 systemd[1]: Stopped kubelet.service. Nov 1 00:34:24.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:24.670576 systemd[1]: Starting kubelet.service... Nov 1 00:34:24.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:24.715652 kernel: audit: type=1130 audit(1761957264.667:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:24.715723 kernel: audit: type=1131 audit(1761957264.667:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:24.733123 systemd[1]: Reloading. Nov 1 00:34:24.792083 /usr/lib/systemd/system-generators/torcx-generator[1590]: time="2025-11-01T00:34:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:34:24.793936 /usr/lib/systemd/system-generators/torcx-generator[1590]: time="2025-11-01T00:34:24Z" level=info msg="torcx already run" Nov 1 00:34:25.983537 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:34:25.983558 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:34:26.003208 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107914 kernel: audit: type=1400 audit(1761957266.072:249): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.108008 kernel: audit: type=1400 audit(1761957266.072:250): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.108051 kernel: audit: type=1400 audit(1761957266.072:251): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.113833 kernel: audit: type=1400 audit(1761957266.072:252): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit: BPF prog-id=43 op=LOAD Nov 1 00:34:26.107000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit: BPF prog-id=44 op=LOAD Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.119000 audit: BPF prog-id=45 op=LOAD Nov 1 00:34:26.119000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:34:26.119000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit: BPF prog-id=46 op=LOAD Nov 1 00:34:26.121000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit: BPF prog-id=47 op=LOAD Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.121000 audit: BPF prog-id=48 op=LOAD Nov 1 00:34:26.121000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:34:26.121000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.122000 audit: BPF prog-id=49 op=LOAD Nov 1 00:34:26.122000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit: BPF prog-id=50 op=LOAD Nov 1 00:34:26.123000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit: BPF prog-id=51 op=LOAD Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.124000 audit: BPF prog-id=52 op=LOAD Nov 1 00:34:26.124000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:34:26.124000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit: BPF prog-id=53 op=LOAD Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit: BPF prog-id=54 op=LOAD Nov 1 00:34:26.125000 audit: BPF prog-id=33 op=UNLOAD Nov 1 00:34:26.125000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit: BPF prog-id=55 op=LOAD Nov 1 00:34:26.126000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.126000 audit: BPF prog-id=56 op=LOAD Nov 1 00:34:26.126000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:26.127000 audit: BPF prog-id=57 op=LOAD Nov 1 00:34:26.127000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:34:26.139394 systemd[1]: Started kubelet.service. Nov 1 00:34:26.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:26.140703 systemd[1]: Stopping kubelet.service... Nov 1 00:34:26.140964 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:34:26.141135 systemd[1]: Stopped kubelet.service. Nov 1 00:34:26.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:26.142609 systemd[1]: Starting kubelet.service... Nov 1 00:34:26.240625 systemd[1]: Started kubelet.service. Nov 1 00:34:26.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:26.333161 kubelet[1638]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:34:26.333161 kubelet[1638]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:34:26.333161 kubelet[1638]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:34:26.333565 kubelet[1638]: I1101 00:34:26.333222 1638 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:34:27.016173 kubelet[1638]: I1101 00:34:27.016100 1638 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:34:27.016173 kubelet[1638]: I1101 00:34:27.016148 1638 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:34:27.016484 kubelet[1638]: I1101 00:34:27.016393 1638 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:34:27.205595 kubelet[1638]: I1101 00:34:27.205345 1638 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:34:27.212646 kubelet[1638]: E1101 00:34:27.212584 1638 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.38:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:34:27.233964 kubelet[1638]: E1101 00:34:27.233846 1638 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:34:27.233964 kubelet[1638]: I1101 00:34:27.233968 1638 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:34:27.240050 kubelet[1638]: I1101 00:34:27.239963 1638 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:34:27.240711 kubelet[1638]: I1101 00:34:27.240370 1638 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:34:27.240711 kubelet[1638]: I1101 00:34:27.240418 1638 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:34:27.240711 kubelet[1638]: I1101 00:34:27.240708 1638 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:34:27.240711 kubelet[1638]: I1101 00:34:27.240719 1638 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:34:27.241020 kubelet[1638]: I1101 00:34:27.240958 1638 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:34:27.277942 kubelet[1638]: I1101 00:34:27.277727 1638 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:34:27.277942 kubelet[1638]: I1101 00:34:27.277812 1638 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:34:27.288436 kubelet[1638]: I1101 00:34:27.288406 1638 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:34:27.288612 kubelet[1638]: I1101 00:34:27.288588 1638 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:34:27.288792 kubelet[1638]: E1101 00:34:27.288730 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:34:27.289294 kubelet[1638]: E1101 00:34:27.289250 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:34:27.330867 kubelet[1638]: I1101 00:34:27.330814 1638 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:34:27.331912 kubelet[1638]: I1101 00:34:27.331849 1638 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:34:27.332620 kubelet[1638]: W1101 00:34:27.332599 1638 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:34:27.335242 kubelet[1638]: I1101 00:34:27.335211 1638 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:34:27.335490 kubelet[1638]: I1101 00:34:27.335274 1638 server.go:1289] "Started kubelet" Nov 1 00:34:27.335000 audit[1638]: AVC avc: denied { mac_admin } for pid=1638 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:27.336687 kubelet[1638]: I1101 00:34:27.336541 1638 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:34:27.336687 kubelet[1638]: I1101 00:34:27.336592 1638 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:34:27.347040 kernel: kauditd_printk_skb: 171 callbacks suppressed Nov 1 00:34:27.347289 kernel: audit: type=1400 audit(1761957267.335:424): avc: denied { mac_admin } for pid=1638 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:27.335000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:34:27.356303 kernel: audit: type=1401 audit(1761957267.335:424): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:34:27.356370 kernel: audit: type=1300 audit(1761957267.335:424): arch=c000003e syscall=188 success=no exit=-22 a0=c000ad56b0 a1=c0008d5638 a2=c000ad5680 a3=25 items=0 ppid=1 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.335000 audit[1638]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ad56b0 a1=c0008d5638 a2=c000ad5680 a3=25 items=0 ppid=1 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.335000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:34:27.374445 kernel: audit: type=1327 audit(1761957267.335:424): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:34:27.374550 kernel: audit: type=1400 audit(1761957267.335:425): avc: denied { mac_admin } for pid=1638 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:27.335000 audit[1638]: AVC avc: denied { mac_admin } for pid=1638 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:27.335000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:34:27.381553 kubelet[1638]: I1101 00:34:27.381482 1638 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:34:27.382634 kubelet[1638]: I1101 00:34:27.382598 1638 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:34:27.383847 kubelet[1638]: I1101 00:34:27.383828 1638 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:34:27.384667 kernel: audit: type=1401 audit(1761957267.335:425): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:34:27.335000 audit[1638]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000af8d80 a1=c0008d5668 a2=c000ad5740 a3=25 items=0 ppid=1 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.387563 kubelet[1638]: I1101 00:34:27.387482 1638 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:34:27.388300 kubelet[1638]: I1101 00:34:27.387781 1638 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:34:27.388300 kubelet[1638]: I1101 00:34:27.388090 1638 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:34:27.391082 kubelet[1638]: E1101 00:34:27.390636 1638 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:34:27.391082 kubelet[1638]: I1101 00:34:27.390676 1638 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:34:27.391082 kubelet[1638]: I1101 00:34:27.390832 1638 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:34:27.391082 kubelet[1638]: I1101 00:34:27.390888 1638 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:34:27.391365 kubelet[1638]: E1101 00:34:27.391206 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:34:27.391591 kubelet[1638]: I1101 00:34:27.391562 1638 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:34:27.391648 kubelet[1638]: I1101 00:34:27.391625 1638 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:34:27.394519 kernel: audit: type=1300 audit(1761957267.335:425): arch=c000003e syscall=188 success=no exit=-22 a0=c000af8d80 a1=c0008d5668 a2=c000ad5740 a3=25 items=0 ppid=1 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.394650 kernel: audit: type=1327 audit(1761957267.335:425): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:34:27.335000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:34:27.393000 audit[1655]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.410677 kubelet[1638]: E1101 00:34:27.410404 1638 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.38:6443: connect: connection refused" interval="200ms" Nov 1 00:34:27.410763 kubelet[1638]: E1101 00:34:27.410712 1638 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:34:27.411023 kubelet[1638]: I1101 00:34:27.410996 1638 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:34:27.413982 kernel: audit: type=1325 audit(1761957267.393:426): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.414051 kernel: audit: type=1300 audit(1761957267.393:426): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcd59f8740 a2=0 a3=7ffcd59f872c items=0 ppid=1638 pid=1655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.393000 audit[1655]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcd59f8740 a2=0 a3=7ffcd59f872c items=0 ppid=1638 pid=1655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.419518 kubelet[1638]: E1101 00:34:27.414722 1638 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.38:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.38:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1873bacca4ef4510 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-11-01 00:34:27.335234832 +0000 UTC m=+1.090524433,LastTimestamp:2025-11-01 00:34:27.335234832 +0000 UTC m=+1.090524433,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Nov 1 00:34:27.393000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:34:27.394000 audit[1656]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1656 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.394000 audit[1656]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc117fdc00 a2=0 a3=7ffc117fdbec items=0 ppid=1638 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.394000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:34:27.397000 audit[1658]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1658 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.397000 audit[1658]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffea0c25cd0 a2=0 a3=7ffea0c25cbc items=0 ppid=1638 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.397000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:34:27.399000 audit[1660]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.399000 audit[1660]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdd7749c90 a2=0 a3=7ffdd7749c7c items=0 ppid=1638 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.399000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:34:27.613946 kubelet[1638]: E1101 00:34:27.613890 1638 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:34:27.614230 kubelet[1638]: E1101 00:34:27.614192 1638 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.38:6443: connect: connection refused" interval="400ms" Nov 1 00:34:27.613000 audit[1667]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.613000 audit[1667]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd5e80ccf0 a2=0 a3=7ffd5e80ccdc items=0 ppid=1638 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.613000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:34:27.614913 kubelet[1638]: I1101 00:34:27.614867 1638 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:34:27.615000 audit[1669]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1669 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:27.615000 audit[1669]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff15148de0 a2=0 a3=7fff15148dcc items=0 ppid=1638 pid=1669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.615000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:34:27.615000 audit[1670]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1670 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.615000 audit[1670]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3a32f2a0 a2=0 a3=7ffc3a32f28c items=0 ppid=1638 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.615000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:34:27.616983 kubelet[1638]: I1101 00:34:27.616855 1638 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:34:27.616983 kubelet[1638]: I1101 00:34:27.616902 1638 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:34:27.617058 kubelet[1638]: I1101 00:34:27.616991 1638 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:34:27.617058 kubelet[1638]: I1101 00:34:27.617007 1638 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:34:27.617122 kubelet[1638]: E1101 00:34:27.617064 1638 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:34:27.618177 kubelet[1638]: I1101 00:34:27.618131 1638 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:34:27.618177 kubelet[1638]: I1101 00:34:27.618157 1638 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:34:27.618365 kubelet[1638]: I1101 00:34:27.618189 1638 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:34:27.617000 audit[1673]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1673 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:27.617000 audit[1673]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd28afbc10 a2=0 a3=7ffd28afbbfc items=0 ppid=1638 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.617000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:34:27.622000 audit[1674]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1674 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:27.622000 audit[1674]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffef2f74e40 a2=0 a3=7ffef2f74e2c items=0 ppid=1638 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.622000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:34:27.622000 audit[1672]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.622000 audit[1672]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffce220d5e0 a2=0 a3=7ffce220d5cc items=0 ppid=1638 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.622000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:34:27.623000 audit[1676]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:27.623000 audit[1676]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe933a1ef0 a2=0 a3=7ffe933a1edc items=0 ppid=1638 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.623000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:34:27.625000 audit[1675]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1675 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:27.625000 audit[1675]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd7a85bf30 a2=0 a3=7ffd7a85bf1c items=0 ppid=1638 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.625000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:34:27.638396 kubelet[1638]: E1101 00:34:27.635656 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:34:27.715307 kubelet[1638]: E1101 00:34:27.714015 1638 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:34:27.717200 kubelet[1638]: E1101 00:34:27.717154 1638 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:34:27.816546 kubelet[1638]: E1101 00:34:27.816333 1638 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:34:27.916017 kubelet[1638]: I1101 00:34:27.915783 1638 policy_none.go:49] "None policy: Start" Nov 1 00:34:27.916017 kubelet[1638]: I1101 00:34:27.915854 1638 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:34:27.916017 kubelet[1638]: I1101 00:34:27.915875 1638 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:34:27.916744 kubelet[1638]: E1101 00:34:27.916688 1638 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:34:27.917910 kubelet[1638]: E1101 00:34:27.917848 1638 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:34:27.952050 systemd[1]: Created slice kubepods.slice. Nov 1 00:34:27.958312 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:34:27.961466 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:34:27.976104 kubelet[1638]: E1101 00:34:27.976038 1638 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:34:27.975000 audit[1638]: AVC avc: denied { mac_admin } for pid=1638 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:27.975000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:34:27.975000 audit[1638]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fae180 a1=c000ce7908 a2=c000fae150 a3=25 items=0 ppid=1 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:27.975000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:34:27.976552 kubelet[1638]: E1101 00:34:27.976171 1638 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:34:27.976552 kubelet[1638]: I1101 00:34:27.976379 1638 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:34:27.976552 kubelet[1638]: I1101 00:34:27.976408 1638 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:34:27.977234 kubelet[1638]: I1101 00:34:27.977193 1638 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:34:27.977826 kubelet[1638]: E1101 00:34:27.977774 1638 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:34:27.977907 kubelet[1638]: E1101 00:34:27.977835 1638 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Nov 1 00:34:28.015561 kubelet[1638]: E1101 00:34:28.015483 1638 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.38:6443: connect: connection refused" interval="800ms" Nov 1 00:34:28.078133 kubelet[1638]: I1101 00:34:28.078093 1638 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:34:28.080629 kubelet[1638]: E1101 00:34:28.080574 1638 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.38:6443/api/v1/nodes\": dial tcp 10.0.0.38:6443: connect: connection refused" node="localhost" Nov 1 00:34:28.272985 kubelet[1638]: E1101 00:34:28.272823 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:34:28.282260 kubelet[1638]: I1101 00:34:28.282204 1638 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:34:28.282582 kubelet[1638]: E1101 00:34:28.282531 1638 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.38:6443/api/v1/nodes\": dial tcp 10.0.0.38:6443: connect: connection refused" node="localhost" Nov 1 00:34:28.413976 systemd[1]: Created slice kubepods-burstable-podfa437e44f25341be4a92109c8783902b.slice. Nov 1 00:34:28.419008 kubelet[1638]: I1101 00:34:28.418972 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fa437e44f25341be4a92109c8783902b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"fa437e44f25341be4a92109c8783902b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:28.419008 kubelet[1638]: I1101 00:34:28.419007 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fa437e44f25341be4a92109c8783902b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"fa437e44f25341be4a92109c8783902b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:28.419322 kubelet[1638]: I1101 00:34:28.419031 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fa437e44f25341be4a92109c8783902b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"fa437e44f25341be4a92109c8783902b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:28.422528 kubelet[1638]: E1101 00:34:28.422493 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:28.455460 kubelet[1638]: E1101 00:34:28.455383 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:34:28.504704 systemd[1]: Created slice kubepods-burstable-pod20c890a246d840d308022312da9174cb.slice. Nov 1 00:34:28.508707 kubelet[1638]: E1101 00:34:28.508662 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:28.519944 kubelet[1638]: I1101 00:34:28.519877 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:28.519944 kubelet[1638]: I1101 00:34:28.519938 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:28.520148 kubelet[1638]: I1101 00:34:28.519962 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:28.520148 kubelet[1638]: I1101 00:34:28.519979 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:28.520148 kubelet[1638]: I1101 00:34:28.519998 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:28.550288 systemd[1]: Created slice kubepods-burstable-podd13d96f639b65e57f439b4396b605564.slice. Nov 1 00:34:28.552429 kubelet[1638]: E1101 00:34:28.552395 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:28.620346 kubelet[1638]: I1101 00:34:28.620297 1638 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d13d96f639b65e57f439b4396b605564-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d13d96f639b65e57f439b4396b605564\") " pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:28.679399 kubelet[1638]: E1101 00:34:28.679323 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:34:28.683974 kubelet[1638]: I1101 00:34:28.683944 1638 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:34:28.684252 kubelet[1638]: E1101 00:34:28.684219 1638 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.38:6443/api/v1/nodes\": dial tcp 10.0.0.38:6443: connect: connection refused" node="localhost" Nov 1 00:34:28.723339 kubelet[1638]: E1101 00:34:28.723271 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:28.724099 env[1201]: time="2025-11-01T00:34:28.724045085Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:fa437e44f25341be4a92109c8783902b,Namespace:kube-system,Attempt:0,}" Nov 1 00:34:28.790054 kubelet[1638]: E1101 00:34:28.789999 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:34:28.809437 kubelet[1638]: E1101 00:34:28.809395 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:28.810059 env[1201]: time="2025-11-01T00:34:28.810009939Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:20c890a246d840d308022312da9174cb,Namespace:kube-system,Attempt:0,}" Nov 1 00:34:28.816507 kubelet[1638]: E1101 00:34:28.816466 1638 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.38:6443: connect: connection refused" interval="1.6s" Nov 1 00:34:28.853247 kubelet[1638]: E1101 00:34:28.853191 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:28.853820 env[1201]: time="2025-11-01T00:34:28.853762525Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d13d96f639b65e57f439b4396b605564,Namespace:kube-system,Attempt:0,}" Nov 1 00:34:29.317348 kubelet[1638]: E1101 00:34:29.317273 1638 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.38:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:34:29.486865 kubelet[1638]: I1101 00:34:29.486802 1638 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:34:29.487253 kubelet[1638]: E1101 00:34:29.487217 1638 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.38:6443/api/v1/nodes\": dial tcp 10.0.0.38:6443: connect: connection refused" node="localhost" Nov 1 00:34:30.301320 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount392517991.mount: Deactivated successfully. Nov 1 00:34:30.417314 kubelet[1638]: E1101 00:34:30.417225 1638 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.38:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.38:6443: connect: connection refused" interval="3.2s" Nov 1 00:34:30.573352 kubelet[1638]: E1101 00:34:30.573286 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.38:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:34:30.842152 env[1201]: time="2025-11-01T00:34:30.841944720Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.945480 env[1201]: time="2025-11-01T00:34:30.945347970Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.954952 env[1201]: time="2025-11-01T00:34:30.954856387Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.966039 env[1201]: time="2025-11-01T00:34:30.965956347Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.981616 env[1201]: time="2025-11-01T00:34:30.981516022Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.983100 env[1201]: time="2025-11-01T00:34:30.983045352Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.984803 env[1201]: time="2025-11-01T00:34:30.984764878Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.986986 env[1201]: time="2025-11-01T00:34:30.986909317Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.989052 env[1201]: time="2025-11-01T00:34:30.989008516Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.991160 env[1201]: time="2025-11-01T00:34:30.991106903Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.993120 env[1201]: time="2025-11-01T00:34:30.993069701Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:30.999514 env[1201]: time="2025-11-01T00:34:30.999471083Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:31.060492 env[1201]: time="2025-11-01T00:34:31.060347875Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:34:31.060492 env[1201]: time="2025-11-01T00:34:31.060399878Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:34:31.060492 env[1201]: time="2025-11-01T00:34:31.060411902Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:34:31.062124 env[1201]: time="2025-11-01T00:34:31.060986548Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/549e4ab9a33b4b1885ea3f39b459a2f9949f7957751133ff31ee72b4fd5c90e4 pid=1683 runtime=io.containerd.runc.v2 Nov 1 00:34:31.090430 kubelet[1638]: I1101 00:34:31.089662 1638 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:34:31.090430 kubelet[1638]: E1101 00:34:31.090167 1638 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.38:6443/api/v1/nodes\": dial tcp 10.0.0.38:6443: connect: connection refused" node="localhost" Nov 1 00:34:31.145835 kubelet[1638]: E1101 00:34:31.144941 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.38:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:34:31.235648 env[1201]: time="2025-11-01T00:34:31.235462247Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:34:31.235648 env[1201]: time="2025-11-01T00:34:31.235546463Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:34:31.235648 env[1201]: time="2025-11-01T00:34:31.235566934Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:34:31.236048 env[1201]: time="2025-11-01T00:34:31.235994659Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1501a7982c5d5fe2e7cea1b3f2d5a6dc4e092a958aff4783ca40312ea97eafce pid=1697 runtime=io.containerd.runc.v2 Nov 1 00:34:31.301172 systemd[1]: Started cri-containerd-549e4ab9a33b4b1885ea3f39b459a2f9949f7957751133ff31ee72b4fd5c90e4.scope. Nov 1 00:34:31.319749 env[1201]: time="2025-11-01T00:34:31.319435463Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:34:31.319749 env[1201]: time="2025-11-01T00:34:31.319503107Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:34:31.319749 env[1201]: time="2025-11-01T00:34:31.319515932Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:34:31.320108 env[1201]: time="2025-11-01T00:34:31.319781447Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/40238a2d75d652780089dc0c96be5dcbebe5a21ece111556ffad23087107f5ec pid=1728 runtime=io.containerd.runc.v2 Nov 1 00:34:31.339504 systemd[1]: Started cri-containerd-1501a7982c5d5fe2e7cea1b3f2d5a6dc4e092a958aff4783ca40312ea97eafce.scope. Nov 1 00:34:31.452755 kubelet[1638]: E1101 00:34:31.450651 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.38:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.672181 kubelet[1638]: E1101 00:34:31.672010 1638 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.38:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.38:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1873bacca4ef4510 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-11-01 00:34:27.335234832 +0000 UTC m=+1.090524433,LastTimestamp:2025-11-01 00:34:27.335234832 +0000 UTC m=+1.090524433,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Nov 1 00:34:31.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.827000 audit: BPF prog-id=58 op=LOAD Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1683 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534396534616239613333623462313838356561336633396234353961 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1683 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534396534616239613333623462313838356561336633396234353961 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit: BPF prog-id=59 op=LOAD Nov 1 00:34:31.828000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ea980 items=0 ppid=1683 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534396534616239613333623462313838356561336633396234353961 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit: BPF prog-id=60 op=LOAD Nov 1 00:34:31.828000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ea9c8 items=0 ppid=1683 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534396534616239613333623462313838356561336633396234353961 Nov 1 00:34:31.828000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:34:31.828000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.828000 audit: BPF prog-id=61 op=LOAD Nov 1 00:34:31.828000 audit[1703]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003eadd8 items=0 ppid=1683 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534396534616239613333623462313838356561336633396234353961 Nov 1 00:34:31.873768 systemd[1]: Started cri-containerd-40238a2d75d652780089dc0c96be5dcbebe5a21ece111556ffad23087107f5ec.scope. Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.887000 audit: BPF prog-id=62 op=LOAD Nov 1 00:34:31.887000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.887000 audit[1724]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1697 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303161373938326335643566653265376365613162336632643561 Nov 1 00:34:31.887000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.887000 audit[1724]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1697 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303161373938326335643566653265376365613162336632643561 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit: BPF prog-id=63 op=LOAD Nov 1 00:34:31.888000 audit[1724]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00034bce0 items=0 ppid=1697 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303161373938326335643566653265376365613162336632643561 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit: BPF prog-id=64 op=LOAD Nov 1 00:34:31.888000 audit[1724]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00034bd28 items=0 ppid=1697 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303161373938326335643566653265376365613162336632643561 Nov 1 00:34:31.888000 audit: BPF prog-id=64 op=UNLOAD Nov 1 00:34:31.888000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { perfmon } for pid=1724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit[1724]: AVC avc: denied { bpf } for pid=1724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.888000 audit: BPF prog-id=65 op=LOAD Nov 1 00:34:31.888000 audit[1724]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ce138 items=0 ppid=1697 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135303161373938326335643566653265376365613162336632643561 Nov 1 00:34:31.908003 kubelet[1638]: E1101 00:34:31.907953 1638 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.38:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.38:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:34:31.920388 env[1201]: time="2025-11-01T00:34:31.920327863Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:20c890a246d840d308022312da9174cb,Namespace:kube-system,Attempt:0,} returns sandbox id \"549e4ab9a33b4b1885ea3f39b459a2f9949f7957751133ff31ee72b4fd5c90e4\"" Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.920000 audit: BPF prog-id=66 op=LOAD Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1728 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323338613264373564363532373830303839646330633936626535 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=1728 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323338613264373564363532373830303839646330633936626535 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit: BPF prog-id=67 op=LOAD Nov 1 00:34:31.921000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00020af70 items=0 ppid=1728 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323338613264373564363532373830303839646330633936626535 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit: BPF prog-id=68 op=LOAD Nov 1 00:34:31.921000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00020afb8 items=0 ppid=1728 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323338613264373564363532373830303839646330633936626535 Nov 1 00:34:31.921000 audit: BPF prog-id=68 op=UNLOAD Nov 1 00:34:31.921000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:31.921000 audit: BPF prog-id=69 op=LOAD Nov 1 00:34:31.921000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00020b3c8 items=0 ppid=1728 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:31.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323338613264373564363532373830303839646330633936626535 Nov 1 00:34:31.923963 kubelet[1638]: E1101 00:34:31.923937 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:31.931765 env[1201]: time="2025-11-01T00:34:31.931712194Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:fa437e44f25341be4a92109c8783902b,Namespace:kube-system,Attempt:0,} returns sandbox id \"1501a7982c5d5fe2e7cea1b3f2d5a6dc4e092a958aff4783ca40312ea97eafce\"" Nov 1 00:34:31.932348 kubelet[1638]: E1101 00:34:31.932308 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:31.974557 env[1201]: time="2025-11-01T00:34:31.974488845Z" level=info msg="CreateContainer within sandbox \"549e4ab9a33b4b1885ea3f39b459a2f9949f7957751133ff31ee72b4fd5c90e4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:34:31.978295 env[1201]: time="2025-11-01T00:34:31.978257123Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d13d96f639b65e57f439b4396b605564,Namespace:kube-system,Attempt:0,} returns sandbox id \"40238a2d75d652780089dc0c96be5dcbebe5a21ece111556ffad23087107f5ec\"" Nov 1 00:34:31.979273 kubelet[1638]: E1101 00:34:31.979072 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:32.088629 env[1201]: time="2025-11-01T00:34:32.088452014Z" level=info msg="CreateContainer within sandbox \"1501a7982c5d5fe2e7cea1b3f2d5a6dc4e092a958aff4783ca40312ea97eafce\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:34:32.146455 env[1201]: time="2025-11-01T00:34:32.146378072Z" level=info msg="CreateContainer within sandbox \"40238a2d75d652780089dc0c96be5dcbebe5a21ece111556ffad23087107f5ec\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:34:32.397027 env[1201]: time="2025-11-01T00:34:32.396853380Z" level=info msg="CreateContainer within sandbox \"549e4ab9a33b4b1885ea3f39b459a2f9949f7957751133ff31ee72b4fd5c90e4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"8dae0d940510f19e9be2fcf60919dc630e52225230950c6cf0d8f37956da0371\"" Nov 1 00:34:32.397725 env[1201]: time="2025-11-01T00:34:32.397691363Z" level=info msg="StartContainer for \"8dae0d940510f19e9be2fcf60919dc630e52225230950c6cf0d8f37956da0371\"" Nov 1 00:34:32.409715 env[1201]: time="2025-11-01T00:34:32.409639227Z" level=info msg="CreateContainer within sandbox \"1501a7982c5d5fe2e7cea1b3f2d5a6dc4e092a958aff4783ca40312ea97eafce\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"70323f425b39f00c95c50652331e387ae7d3f2995bab3910e0ae28e736fbf42c\"" Nov 1 00:34:32.410426 env[1201]: time="2025-11-01T00:34:32.410392884Z" level=info msg="StartContainer for \"70323f425b39f00c95c50652331e387ae7d3f2995bab3910e0ae28e736fbf42c\"" Nov 1 00:34:32.413854 env[1201]: time="2025-11-01T00:34:32.413789072Z" level=info msg="CreateContainer within sandbox \"40238a2d75d652780089dc0c96be5dcbebe5a21ece111556ffad23087107f5ec\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"ace2e855dc1c689b85830725140fa32783511c2f180ec80d5e9e52391289fdca\"" Nov 1 00:34:32.414343 env[1201]: time="2025-11-01T00:34:32.414307885Z" level=info msg="StartContainer for \"ace2e855dc1c689b85830725140fa32783511c2f180ec80d5e9e52391289fdca\"" Nov 1 00:34:32.417347 systemd[1]: Started cri-containerd-8dae0d940510f19e9be2fcf60919dc630e52225230950c6cf0d8f37956da0371.scope. Nov 1 00:34:32.460635 systemd[1]: Started cri-containerd-70323f425b39f00c95c50652331e387ae7d3f2995bab3910e0ae28e736fbf42c.scope. Nov 1 00:34:32.482579 systemd[1]: Started cri-containerd-ace2e855dc1c689b85830725140fa32783511c2f180ec80d5e9e52391289fdca.scope. Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.787113 kernel: kauditd_printk_skb: 209 callbacks suppressed Nov 1 00:34:32.787208 kernel: audit: type=1400 audit(1761957272.784:493): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.800706 kernel: audit: type=1400 audit(1761957272.784:494): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.807186 kernel: audit: type=1400 audit(1761957272.784:495): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.807291 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.814085 kernel: audit: type=1400 audit(1761957272.784:496): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.814257 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.815214 kernel: audit: type=1400 audit(1761957272.784:497): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.817142 kernel: audit: backlog limit exceeded Nov 1 00:34:32.822753 kernel: audit: type=1400 audit(1761957272.784:498): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit: BPF prog-id=70 op=LOAD Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1683 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.849010 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:34:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864616530643934303531306631396539626532666366363039313964 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1683 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864616530643934303531306631396539626532666366363039313964 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.786000 audit: BPF prog-id=71 op=LOAD Nov 1 00:34:32.786000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000f3dc0 items=0 ppid=1683 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864616530643934303531306631396539626532666366363039313964 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.793000 audit: BPF prog-id=72 op=LOAD Nov 1 00:34:32.793000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000f3e08 items=0 ppid=1683 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864616530643934303531306631396539626532666366363039313964 Nov 1 00:34:32.799000 audit: BPF prog-id=72 op=UNLOAD Nov 1 00:34:32.799000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.799000 audit: BPF prog-id=73 op=LOAD Nov 1 00:34:32.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.823000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.823000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1697 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit: BPF prog-id=75 op=LOAD Nov 1 00:34:32.799000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d0218 items=0 ppid=1683 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864616530643934303531306631396539626532666366363039313964 Nov 1 00:34:32.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333233663432356233396630306339356335303635323333316533 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1697 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333233663432356233396630306339356335303635323333316533 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit: BPF prog-id=76 op=LOAD Nov 1 00:34:32.849000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000281490 items=0 ppid=1697 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333233663432356233396630306339356335303635323333316533 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.849000 audit: BPF prog-id=77 op=LOAD Nov 1 00:34:32.849000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002814d8 items=0 ppid=1697 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333233663432356233396630306339356335303635323333316533 Nov 1 00:34:32.850000 audit: BPF prog-id=77 op=UNLOAD Nov 1 00:34:32.850000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { perfmon } for pid=1835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1835]: AVC avc: denied { bpf } for pid=1835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit: BPF prog-id=78 op=LOAD Nov 1 00:34:32.850000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1728 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.850000 audit[1835]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002818e8 items=0 ppid=1697 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730333233663432356233396630306339356335303635323333316533 Nov 1 00:34:32.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653265383535646331633638396238353833303732353134306661 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1728 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653265383535646331633638396238353833303732353134306661 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.850000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000195a00 items=0 ppid=1728 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653265383535646331633638396238353833303732353134306661 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.851000 audit: BPF prog-id=80 op=LOAD Nov 1 00:34:32.851000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000195a48 items=0 ppid=1728 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653265383535646331633638396238353833303732353134306661 Nov 1 00:34:32.851000 audit: BPF prog-id=80 op=UNLOAD Nov 1 00:34:32.851000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:32.852000 audit: BPF prog-id=81 op=LOAD Nov 1 00:34:32.852000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000195e58 items=0 ppid=1728 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:32.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653265383535646331633638396238353833303732353134306661 Nov 1 00:34:32.895610 env[1201]: time="2025-11-01T00:34:32.895531315Z" level=info msg="StartContainer for \"70323f425b39f00c95c50652331e387ae7d3f2995bab3910e0ae28e736fbf42c\" returns successfully" Nov 1 00:34:33.122580 env[1201]: time="2025-11-01T00:34:33.122520687Z" level=info msg="StartContainer for \"ace2e855dc1c689b85830725140fa32783511c2f180ec80d5e9e52391289fdca\" returns successfully" Nov 1 00:34:33.123104 env[1201]: time="2025-11-01T00:34:33.122557480Z" level=info msg="StartContainer for \"8dae0d940510f19e9be2fcf60919dc630e52225230950c6cf0d8f37956da0371\" returns successfully" Nov 1 00:34:33.691392 kubelet[1638]: E1101 00:34:33.691355 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:33.691956 kubelet[1638]: E1101 00:34:33.691941 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:33.693540 kubelet[1638]: E1101 00:34:33.693525 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:33.693727 kubelet[1638]: E1101 00:34:33.693712 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:33.695129 kubelet[1638]: E1101 00:34:33.695114 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:33.695289 kubelet[1638]: E1101 00:34:33.695274 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:33.818000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:33.818000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000668690 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:34:33.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:34:33.819000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:33.819000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0003f35e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:34:33.819000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:34:34.312007 kubelet[1638]: I1101 00:34:34.311912 1638 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:34:34.698006 kubelet[1638]: E1101 00:34:34.697857 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:34.698446 kubelet[1638]: E1101 00:34:34.698050 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:34.698446 kubelet[1638]: E1101 00:34:34.698332 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:34.698446 kubelet[1638]: E1101 00:34:34.698344 1638 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:34:34.698446 kubelet[1638]: E1101 00:34:34.698415 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:34.698654 kubelet[1638]: E1101 00:34:34.698584 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:35.108000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:35.108000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c007b4b360 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:34:35.108000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:34:35.108000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:35.108000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c00489f170 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:34:35.108000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:34:35.108000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:35.108000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004714330 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:34:35.108000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:34:35.112000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:35.112000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0088d7200 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:34:35.112000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:34:35.112000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:35.112000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00507e960 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:34:35.112000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:34:35.112000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:35.112000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00507e990 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:34:35.112000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:34:35.175826 kubelet[1638]: E1101 00:34:35.175755 1638 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Nov 1 00:34:35.316418 kubelet[1638]: I1101 00:34:35.311806 1638 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Nov 1 00:34:35.316418 kubelet[1638]: E1101 00:34:35.311849 1638 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Nov 1 00:34:35.331320 kubelet[1638]: E1101 00:34:35.331238 1638 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:34:35.432535 kubelet[1638]: E1101 00:34:35.432373 1638 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:34:35.492505 kubelet[1638]: I1101 00:34:35.492430 1638 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:35.552819 kubelet[1638]: E1101 00:34:35.552734 1638 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:35.552819 kubelet[1638]: I1101 00:34:35.552793 1638 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:35.633472 kubelet[1638]: E1101 00:34:35.633127 1638 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:35.633472 kubelet[1638]: I1101 00:34:35.633177 1638 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:35.634987 kubelet[1638]: E1101 00:34:35.634938 1638 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:35.698642 kubelet[1638]: I1101 00:34:35.698503 1638 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:35.699134 kubelet[1638]: I1101 00:34:35.698700 1638 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:35.701226 kubelet[1638]: E1101 00:34:35.701176 1638 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:35.701339 kubelet[1638]: E1101 00:34:35.701319 1638 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:35.701531 kubelet[1638]: E1101 00:34:35.701388 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:35.701531 kubelet[1638]: E1101 00:34:35.701536 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:36.311425 kubelet[1638]: I1101 00:34:36.311376 1638 apiserver.go:52] "Watching apiserver" Nov 1 00:34:36.391310 kubelet[1638]: I1101 00:34:36.391233 1638 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:34:37.413645 kubelet[1638]: I1101 00:34:37.413597 1638 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:37.505036 kubelet[1638]: E1101 00:34:37.504981 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:37.702308 kubelet[1638]: E1101 00:34:37.702180 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:37.886889 kubelet[1638]: I1101 00:34:37.886787 1638 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=0.88674492 podStartE2EDuration="886.74492ms" podCreationTimestamp="2025-11-01 00:34:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:34:37.886733738 +0000 UTC m=+11.642023339" watchObservedRunningTime="2025-11-01 00:34:37.88674492 +0000 UTC m=+11.642034521" Nov 1 00:34:38.183113 kubelet[1638]: I1101 00:34:38.183056 1638 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:38.387506 kubelet[1638]: E1101 00:34:38.387452 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:38.704421 kubelet[1638]: E1101 00:34:38.704385 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:42.457666 systemd[1]: Reloading. Nov 1 00:34:42.671296 /usr/lib/systemd/system-generators/torcx-generator[1944]: time="2025-11-01T00:34:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:34:42.671337 /usr/lib/systemd/system-generators/torcx-generator[1944]: time="2025-11-01T00:34:42Z" level=info msg="torcx already run" Nov 1 00:34:42.738472 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:34:42.738493 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:34:42.757422 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.848294 kernel: kauditd_printk_skb: 195 callbacks suppressed Nov 1 00:34:42.848426 kernel: audit: type=1400 audit(1761957282.834:553): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.848449 kernel: audit: type=1400 audit(1761957282.834:554): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.850421 kubelet[1638]: I1101 00:34:42.850392 1638 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:42.854527 kernel: audit: type=1400 audit(1761957282.834:555): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.854617 kernel: audit: type=1400 audit(1761957282.834:556): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.857297 kubelet[1638]: E1101 00:34:42.857253 1638 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:42.867960 kernel: audit: type=1400 audit(1761957282.834:557): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.868192 kubelet[1638]: I1101 00:34:42.866622 1638 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=4.866605004 podStartE2EDuration="4.866605004s" podCreationTimestamp="2025-11-01 00:34:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:34:42.866159659 +0000 UTC m=+16.621449260" watchObservedRunningTime="2025-11-01 00:34:42.866605004 +0000 UTC m=+16.621894605" Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.874693 kernel: audit: type=1400 audit(1761957282.834:558): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.874833 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:34:42.874875 kernel: audit: type=1400 audit(1761957282.834:559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.876961 kernel: audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:34:42.877033 kernel: audit: backlog limit exceeded Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit: BPF prog-id=82 op=LOAD Nov 1 00:34:42.842000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit: BPF prog-id=83 op=LOAD Nov 1 00:34:42.847000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit: BPF prog-id=84 op=LOAD Nov 1 00:34:42.853000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit: BPF prog-id=85 op=LOAD Nov 1 00:34:42.860000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit: BPF prog-id=86 op=LOAD Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.867000 audit: BPF prog-id=87 op=LOAD Nov 1 00:34:42.867000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:34:42.867000 audit: BPF prog-id=45 op=UNLOAD Nov 1 00:34:42.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit: BPF prog-id=90 op=LOAD Nov 1 00:34:42.885000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:34:42.885000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.886000 audit: BPF prog-id=91 op=LOAD Nov 1 00:34:42.886000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:34:42.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.887000 audit: BPF prog-id=92 op=LOAD Nov 1 00:34:42.887000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit: BPF prog-id=93 op=LOAD Nov 1 00:34:42.888000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit: BPF prog-id=94 op=LOAD Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.888000 audit: BPF prog-id=95 op=LOAD Nov 1 00:34:42.889000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:34:42.889000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.890000 audit: BPF prog-id=96 op=LOAD Nov 1 00:34:42.890000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit: BPF prog-id=97 op=LOAD Nov 1 00:34:42.891000 audit: BPF prog-id=70 op=UNLOAD Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit: BPF prog-id=98 op=LOAD Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit: BPF prog-id=99 op=LOAD Nov 1 00:34:42.892000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:34:42.892000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit: BPF prog-id=100 op=LOAD Nov 1 00:34:42.892000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.893000 audit: BPF prog-id=101 op=LOAD Nov 1 00:34:42.893000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:42.894000 audit: BPF prog-id=102 op=LOAD Nov 1 00:34:42.894000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:34:42.905693 systemd[1]: Stopping kubelet.service... Nov 1 00:34:42.932330 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:34:42.932543 systemd[1]: Stopped kubelet.service. Nov 1 00:34:42.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:42.932619 systemd[1]: kubelet.service: Consumed 2.083s CPU time. Nov 1 00:34:42.934665 systemd[1]: Starting kubelet.service... Nov 1 00:34:43.084157 systemd[1]: Started kubelet.service. Nov 1 00:34:43.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:34:43.213422 kubelet[1990]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:34:43.213422 kubelet[1990]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:34:43.213422 kubelet[1990]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:34:43.213880 kubelet[1990]: I1101 00:34:43.213442 1990 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:34:43.221418 kubelet[1990]: I1101 00:34:43.221351 1990 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:34:43.221418 kubelet[1990]: I1101 00:34:43.221398 1990 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:34:43.221696 kubelet[1990]: I1101 00:34:43.221678 1990 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:34:43.222945 kubelet[1990]: I1101 00:34:43.222895 1990 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Nov 1 00:34:43.225181 kubelet[1990]: I1101 00:34:43.225157 1990 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:34:43.228251 kubelet[1990]: E1101 00:34:43.228217 1990 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:34:43.228251 kubelet[1990]: I1101 00:34:43.228243 1990 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:34:43.234782 kubelet[1990]: I1101 00:34:43.234744 1990 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:34:43.235057 kubelet[1990]: I1101 00:34:43.235009 1990 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:34:43.235205 kubelet[1990]: I1101 00:34:43.235046 1990 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:34:43.235305 kubelet[1990]: I1101 00:34:43.235215 1990 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:34:43.235305 kubelet[1990]: I1101 00:34:43.235225 1990 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:34:43.235305 kubelet[1990]: I1101 00:34:43.235292 1990 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:34:43.235503 kubelet[1990]: I1101 00:34:43.235486 1990 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:34:43.235550 kubelet[1990]: I1101 00:34:43.235508 1990 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:34:43.235550 kubelet[1990]: I1101 00:34:43.235534 1990 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:34:43.235686 kubelet[1990]: I1101 00:34:43.235647 1990 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:34:43.239515 kubelet[1990]: I1101 00:34:43.239483 1990 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:34:43.240506 kubelet[1990]: I1101 00:34:43.240458 1990 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:34:43.244249 kubelet[1990]: I1101 00:34:43.244227 1990 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:34:43.244324 kubelet[1990]: I1101 00:34:43.244291 1990 server.go:1289] "Started kubelet" Nov 1 00:34:43.244000 audit[1990]: AVC avc: denied { mac_admin } for pid=1990 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:43.244000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:34:43.244000 audit[1990]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000463650 a1=c000ac4de0 a2=c0004635f0 a3=25 items=0 ppid=1 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:43.244000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:34:43.244000 audit[1990]: AVC avc: denied { mac_admin } for pid=1990 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:43.244000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:34:43.244000 audit[1990]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0004694c0 a1=c000ac4df8 a2=c000463770 a3=25 items=0 ppid=1 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:43.244000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:34:43.246802 kubelet[1990]: I1101 00:34:43.245866 1990 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:34:43.246802 kubelet[1990]: I1101 00:34:43.245939 1990 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:34:43.246802 kubelet[1990]: I1101 00:34:43.246007 1990 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:34:43.251452 kubelet[1990]: E1101 00:34:43.249625 1990 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:34:43.251452 kubelet[1990]: I1101 00:34:43.250457 1990 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:34:43.251452 kubelet[1990]: I1101 00:34:43.250756 1990 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:34:43.251452 kubelet[1990]: I1101 00:34:43.250846 1990 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:34:43.251452 kubelet[1990]: I1101 00:34:43.250952 1990 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:34:43.252007 kubelet[1990]: I1101 00:34:43.251984 1990 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:34:43.254111 kubelet[1990]: I1101 00:34:43.253562 1990 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:34:43.254111 kubelet[1990]: I1101 00:34:43.253690 1990 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:34:43.255208 kubelet[1990]: I1101 00:34:43.255132 1990 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:34:43.255700 kubelet[1990]: I1101 00:34:43.255673 1990 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:34:43.255914 kubelet[1990]: I1101 00:34:43.255887 1990 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:34:43.258199 kubelet[1990]: I1101 00:34:43.258145 1990 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:34:43.270140 kubelet[1990]: I1101 00:34:43.270089 1990 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:34:43.271042 kubelet[1990]: I1101 00:34:43.271021 1990 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:34:43.271042 kubelet[1990]: I1101 00:34:43.271041 1990 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:34:43.271141 kubelet[1990]: I1101 00:34:43.271063 1990 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:34:43.271141 kubelet[1990]: I1101 00:34:43.271070 1990 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:34:43.271141 kubelet[1990]: E1101 00:34:43.271119 1990 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:34:43.294477 kubelet[1990]: I1101 00:34:43.294432 1990 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:34:43.294477 kubelet[1990]: I1101 00:34:43.294451 1990 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:34:43.294477 kubelet[1990]: I1101 00:34:43.294470 1990 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:34:43.294801 kubelet[1990]: I1101 00:34:43.294635 1990 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:34:43.294801 kubelet[1990]: I1101 00:34:43.294645 1990 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:34:43.294801 kubelet[1990]: I1101 00:34:43.294663 1990 policy_none.go:49] "None policy: Start" Nov 1 00:34:43.294801 kubelet[1990]: I1101 00:34:43.294673 1990 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:34:43.294801 kubelet[1990]: I1101 00:34:43.294682 1990 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:34:43.294801 kubelet[1990]: I1101 00:34:43.294762 1990 state_mem.go:75] "Updated machine memory state" Nov 1 00:34:43.298610 kubelet[1990]: E1101 00:34:43.298584 1990 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:34:43.297000 audit[1990]: AVC avc: denied { mac_admin } for pid=1990 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:43.297000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:34:43.297000 audit[1990]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fc12f0 a1=c000ac53e0 a2=c000fc12c0 a3=25 items=0 ppid=1 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:43.297000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:34:43.298876 kubelet[1990]: E1101 00:34:43.298640 1990 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:34:43.298876 kubelet[1990]: I1101 00:34:43.298775 1990 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:34:43.298876 kubelet[1990]: I1101 00:34:43.298785 1990 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:34:43.299121 kubelet[1990]: I1101 00:34:43.299001 1990 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:34:43.300304 kubelet[1990]: E1101 00:34:43.299729 1990 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:34:43.372989 kubelet[1990]: I1101 00:34:43.372791 1990 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:43.372989 kubelet[1990]: I1101 00:34:43.372899 1990 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:43.373223 kubelet[1990]: I1101 00:34:43.372904 1990 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:43.406503 kubelet[1990]: I1101 00:34:43.406454 1990 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:34:43.451870 kubelet[1990]: I1101 00:34:43.451801 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:43.451870 kubelet[1990]: I1101 00:34:43.451848 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d13d96f639b65e57f439b4396b605564-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d13d96f639b65e57f439b4396b605564\") " pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:43.451870 kubelet[1990]: I1101 00:34:43.451867 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fa437e44f25341be4a92109c8783902b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"fa437e44f25341be4a92109c8783902b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:43.451870 kubelet[1990]: I1101 00:34:43.451885 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:43.452189 kubelet[1990]: I1101 00:34:43.451996 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:43.452189 kubelet[1990]: I1101 00:34:43.452050 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:43.452189 kubelet[1990]: I1101 00:34:43.452067 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fa437e44f25341be4a92109c8783902b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"fa437e44f25341be4a92109c8783902b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:43.452189 kubelet[1990]: I1101 00:34:43.452089 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fa437e44f25341be4a92109c8783902b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"fa437e44f25341be4a92109c8783902b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:43.452189 kubelet[1990]: I1101 00:34:43.452120 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:43.557598 kubelet[1990]: E1101 00:34:43.557543 1990 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:43.557598 kubelet[1990]: E1101 00:34:43.557543 1990 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:43.557825 kubelet[1990]: E1101 00:34:43.557757 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:43.557893 kubelet[1990]: E1101 00:34:43.557874 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:43.627209 kubelet[1990]: E1101 00:34:43.627046 1990 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Nov 1 00:34:43.627705 kubelet[1990]: E1101 00:34:43.627671 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:43.634965 kubelet[1990]: I1101 00:34:43.634940 1990 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Nov 1 00:34:43.635227 kubelet[1990]: I1101 00:34:43.635169 1990 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Nov 1 00:34:44.085000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521002 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:34:44.085000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0009fee80 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:34:44.085000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:34:44.237605 kubelet[1990]: I1101 00:34:44.237549 1990 apiserver.go:52] "Watching apiserver" Nov 1 00:34:44.252520 kubelet[1990]: I1101 00:34:44.252374 1990 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:34:44.283989 kubelet[1990]: I1101 00:34:44.283955 1990 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:44.284185 kubelet[1990]: E1101 00:34:44.284024 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:44.284247 kubelet[1990]: I1101 00:34:44.284225 1990 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:44.292772 kubelet[1990]: E1101 00:34:44.292729 1990 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Nov 1 00:34:44.292971 kubelet[1990]: E1101 00:34:44.292950 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:44.295638 kubelet[1990]: E1101 00:34:44.295605 1990 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:34:44.295741 kubelet[1990]: E1101 00:34:44.295731 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:45.285346 kubelet[1990]: E1101 00:34:45.285293 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:45.285346 kubelet[1990]: E1101 00:34:45.285344 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:45.285774 kubelet[1990]: E1101 00:34:45.285363 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:46.286807 kubelet[1990]: E1101 00:34:46.286763 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:46.884000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:46.884000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016e83e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:34:46.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:34:46.885000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:46.885000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00183b260 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:34:46.885000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:34:46.885000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:46.885000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00183b420 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:34:46.885000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:34:46.886000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:34:46.886000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00183b5e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:34:46.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:34:47.261706 kubelet[1990]: I1101 00:34:47.261569 1990 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:34:47.262055 env[1201]: time="2025-11-01T00:34:47.262009266Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:34:47.262363 kubelet[1990]: I1101 00:34:47.262244 1990 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:34:48.168506 systemd[1]: Created slice kubepods-besteffort-podeb849d7f_b1bc_4607_a2d0_28ad96780d7d.slice. Nov 1 00:34:48.189112 kubelet[1990]: I1101 00:34:48.189028 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/eb849d7f-b1bc-4607-a2d0-28ad96780d7d-kube-proxy\") pod \"kube-proxy-fk4hd\" (UID: \"eb849d7f-b1bc-4607-a2d0-28ad96780d7d\") " pod="kube-system/kube-proxy-fk4hd" Nov 1 00:34:48.189112 kubelet[1990]: I1101 00:34:48.189084 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/eb849d7f-b1bc-4607-a2d0-28ad96780d7d-lib-modules\") pod \"kube-proxy-fk4hd\" (UID: \"eb849d7f-b1bc-4607-a2d0-28ad96780d7d\") " pod="kube-system/kube-proxy-fk4hd" Nov 1 00:34:48.189112 kubelet[1990]: I1101 00:34:48.189114 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/eb849d7f-b1bc-4607-a2d0-28ad96780d7d-xtables-lock\") pod \"kube-proxy-fk4hd\" (UID: \"eb849d7f-b1bc-4607-a2d0-28ad96780d7d\") " pod="kube-system/kube-proxy-fk4hd" Nov 1 00:34:48.189699 kubelet[1990]: I1101 00:34:48.189137 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xm9xl\" (UniqueName: \"kubernetes.io/projected/eb849d7f-b1bc-4607-a2d0-28ad96780d7d-kube-api-access-xm9xl\") pod \"kube-proxy-fk4hd\" (UID: \"eb849d7f-b1bc-4607-a2d0-28ad96780d7d\") " pod="kube-system/kube-proxy-fk4hd" Nov 1 00:34:48.455477 kubelet[1990]: I1101 00:34:48.455330 1990 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:34:48.476587 kubelet[1990]: E1101 00:34:48.476533 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:48.477861 env[1201]: time="2025-11-01T00:34:48.477395764Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fk4hd,Uid:eb849d7f-b1bc-4607-a2d0-28ad96780d7d,Namespace:kube-system,Attempt:0,}" Nov 1 00:34:48.482906 systemd[1]: Created slice kubepods-besteffort-podea92ce0e_2b7a_41f5_be4c_d596585ffc91.slice. Nov 1 00:34:48.502581 env[1201]: time="2025-11-01T00:34:48.502497920Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:34:48.502581 env[1201]: time="2025-11-01T00:34:48.502543818Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:34:48.502581 env[1201]: time="2025-11-01T00:34:48.502558546Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:34:48.502791 env[1201]: time="2025-11-01T00:34:48.502695912Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/651850399609b756a48a0696c55bd56c2eff58295f06ebb0bc1f6380f6d7c3f7 pid=2053 runtime=io.containerd.runc.v2 Nov 1 00:34:48.526078 systemd[1]: Started cri-containerd-651850399609b756a48a0696c55bd56c2eff58295f06ebb0bc1f6380f6d7c3f7.scope. Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.546388 kernel: kauditd_printk_skb: 317 callbacks suppressed Nov 1 00:34:48.546539 kernel: audit: type=1400 audit(1761957288.543:780): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.557170 kernel: audit: type=1400 audit(1761957288.543:781): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.557373 kernel: audit: type=1400 audit(1761957288.543:782): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.567385 kernel: audit: type=1400 audit(1761957288.543:783): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.567458 kernel: audit: type=1400 audit(1761957288.543:784): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.577568 kernel: audit: type=1400 audit(1761957288.543:785): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.577713 kernel: audit: type=1400 audit(1761957288.543:786): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.587639 kernel: audit: type=1400 audit(1761957288.543:787): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.587719 kernel: audit: type=1400 audit(1761957288.543:788): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.592962 kubelet[1990]: I1101 00:34:48.592903 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kgszw\" (UniqueName: \"kubernetes.io/projected/ea92ce0e-2b7a-41f5-be4c-d596585ffc91-kube-api-access-kgszw\") pod \"tigera-operator-7dcd859c48-cd98j\" (UID: \"ea92ce0e-2b7a-41f5-be4c-d596585ffc91\") " pod="tigera-operator/tigera-operator-7dcd859c48-cd98j" Nov 1 00:34:48.593080 kubelet[1990]: I1101 00:34:48.592966 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ea92ce0e-2b7a-41f5-be4c-d596585ffc91-var-lib-calico\") pod \"tigera-operator-7dcd859c48-cd98j\" (UID: \"ea92ce0e-2b7a-41f5-be4c-d596585ffc91\") " pod="tigera-operator/tigera-operator-7dcd859c48-cd98j" Nov 1 00:34:48.597626 kernel: audit: type=1400 audit(1761957288.543:789): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.543000 audit: BPF prog-id=103 op=LOAD Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2053 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635313835303339393630396237353661343861303639366335356264 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2053 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635313835303339393630396237353661343861303639366335356264 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.544000 audit: BPF prog-id=104 op=LOAD Nov 1 00:34:48.544000 audit[2063]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d5ce0 items=0 ppid=2053 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635313835303339393630396237353661343861303639366335356264 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.550000 audit: BPF prog-id=105 op=LOAD Nov 1 00:34:48.550000 audit[2063]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d5d28 items=0 ppid=2053 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635313835303339393630396237353661343861303639366335356264 Nov 1 00:34:48.556000 audit: BPF prog-id=105 op=UNLOAD Nov 1 00:34:48.556000 audit: BPF prog-id=104 op=UNLOAD Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { perfmon } for pid=2063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit[2063]: AVC avc: denied { bpf } for pid=2063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.556000 audit: BPF prog-id=106 op=LOAD Nov 1 00:34:48.556000 audit[2063]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003bc138 items=0 ppid=2053 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635313835303339393630396237353661343861303639366335356264 Nov 1 00:34:48.599366 env[1201]: time="2025-11-01T00:34:48.598428264Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fk4hd,Uid:eb849d7f-b1bc-4607-a2d0-28ad96780d7d,Namespace:kube-system,Attempt:0,} returns sandbox id \"651850399609b756a48a0696c55bd56c2eff58295f06ebb0bc1f6380f6d7c3f7\"" Nov 1 00:34:48.599419 kubelet[1990]: E1101 00:34:48.599103 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:48.605041 env[1201]: time="2025-11-01T00:34:48.604979146Z" level=info msg="CreateContainer within sandbox \"651850399609b756a48a0696c55bd56c2eff58295f06ebb0bc1f6380f6d7c3f7\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:34:48.621969 env[1201]: time="2025-11-01T00:34:48.621882398Z" level=info msg="CreateContainer within sandbox \"651850399609b756a48a0696c55bd56c2eff58295f06ebb0bc1f6380f6d7c3f7\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"4655c99a15f21304286080b97f4f142ad63f7de5f1aa26de57f35072cfd21c90\"" Nov 1 00:34:48.622968 env[1201]: time="2025-11-01T00:34:48.622933708Z" level=info msg="StartContainer for \"4655c99a15f21304286080b97f4f142ad63f7de5f1aa26de57f35072cfd21c90\"" Nov 1 00:34:48.640999 systemd[1]: Started cri-containerd-4655c99a15f21304286080b97f4f142ad63f7de5f1aa26de57f35072cfd21c90.scope. Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fb04556d688 items=0 ppid=2053 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436353563393961313566323133303432383630383062393766346631 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit: BPF prog-id=107 op=LOAD Nov 1 00:34:48.656000 audit[2093]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000212bc8 items=0 ppid=2053 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436353563393961313566323133303432383630383062393766346631 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.656000 audit: BPF prog-id=108 op=LOAD Nov 1 00:34:48.656000 audit[2093]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000212c18 items=0 ppid=2053 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436353563393961313566323133303432383630383062393766346631 Nov 1 00:34:48.656000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:34:48.657000 audit: BPF prog-id=107 op=UNLOAD Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { perfmon } for pid=2093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit[2093]: AVC avc: denied { bpf } for pid=2093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.657000 audit: BPF prog-id=109 op=LOAD Nov 1 00:34:48.657000 audit[2093]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000212ca8 items=0 ppid=2053 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436353563393961313566323133303432383630383062393766346631 Nov 1 00:34:48.672313 env[1201]: time="2025-11-01T00:34:48.672238122Z" level=info msg="StartContainer for \"4655c99a15f21304286080b97f4f142ad63f7de5f1aa26de57f35072cfd21c90\" returns successfully" Nov 1 00:34:48.780000 audit[2155]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.780000 audit[2155]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc4a47ac50 a2=0 a3=7ffc4a47ac3c items=0 ppid=2104 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.780000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:34:48.780000 audit[2156]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.780000 audit[2156]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffca2f4eb0 a2=0 a3=7fffca2f4e9c items=0 ppid=2104 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.780000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:34:48.782000 audit[2157]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.782000 audit[2157]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee7bc7c50 a2=0 a3=7ffee7bc7c3c items=0 ppid=2104 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.782000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:34:48.783000 audit[2161]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.783000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed3f0c0f0 a2=0 a3=7ffed3f0c0dc items=0 ppid=2104 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.783000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:34:48.783000 audit[2160]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.783000 audit[2160]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff60c8b300 a2=0 a3=7fff60c8b2ec items=0 ppid=2104 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:34:48.784000 audit[2163]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.784000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffffa61ed0 a2=0 a3=7fffffa61ebc items=0 ppid=2104 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.784000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:34:48.786847 env[1201]: time="2025-11-01T00:34:48.786814636Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-cd98j,Uid:ea92ce0e-2b7a-41f5-be4c-d596585ffc91,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:34:48.812588 env[1201]: time="2025-11-01T00:34:48.812532090Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:34:48.812789 env[1201]: time="2025-11-01T00:34:48.812764098Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:34:48.812906 env[1201]: time="2025-11-01T00:34:48.812862639Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:34:48.813154 env[1201]: time="2025-11-01T00:34:48.813119013Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/582c58a074d7026ce8d786fa304f04bf8973ebfec70f1423269e1de221ab9ab4 pid=2172 runtime=io.containerd.runc.v2 Nov 1 00:34:48.826325 systemd[1]: Started cri-containerd-582c58a074d7026ce8d786fa304f04bf8973ebfec70f1423269e1de221ab9ab4.scope. Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit: BPF prog-id=110 op=LOAD Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2172 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538326335386130373464373032366365386437383666613330346630 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2172 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538326335386130373464373032366365386437383666613330346630 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit: BPF prog-id=111 op=LOAD Nov 1 00:34:48.848000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000291350 items=0 ppid=2172 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538326335386130373464373032366365386437383666613330346630 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.848000 audit: BPF prog-id=112 op=LOAD Nov 1 00:34:48.848000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000291398 items=0 ppid=2172 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538326335386130373464373032366365386437383666613330346630 Nov 1 00:34:48.848000 audit: BPF prog-id=112 op=UNLOAD Nov 1 00:34:48.849000 audit: BPF prog-id=111 op=UNLOAD Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:48.849000 audit: BPF prog-id=113 op=LOAD Nov 1 00:34:48.849000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002917a8 items=0 ppid=2172 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538326335386130373464373032366365386437383666613330346630 Nov 1 00:34:48.880013 env[1201]: time="2025-11-01T00:34:48.879525414Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-cd98j,Uid:ea92ce0e-2b7a-41f5-be4c-d596585ffc91,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"582c58a074d7026ce8d786fa304f04bf8973ebfec70f1423269e1de221ab9ab4\"" Nov 1 00:34:48.881529 env[1201]: time="2025-11-01T00:34:48.881495168Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:34:48.884000 audit[2206]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.884000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe0c937df0 a2=0 a3=7ffe0c937ddc items=0 ppid=2104 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.884000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:34:48.888000 audit[2208]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.888000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffca86f8570 a2=0 a3=7ffca86f855c items=0 ppid=2104 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.888000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:34:48.893000 audit[2211]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.893000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff337f1790 a2=0 a3=7fff337f177c items=0 ppid=2104 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.893000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:34:48.895000 audit[2212]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.895000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffcc643bc0 a2=0 a3=7fffcc643bac items=0 ppid=2104 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.895000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:34:48.898000 audit[2214]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.898000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc3e3457d0 a2=0 a3=7ffc3e3457bc items=0 ppid=2104 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:34:48.899000 audit[2215]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.899000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0392de00 a2=0 a3=7ffd0392ddec items=0 ppid=2104 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.899000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:34:48.902000 audit[2217]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.902000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe6640aac0 a2=0 a3=7ffe6640aaac items=0 ppid=2104 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.902000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:34:48.906000 audit[2220]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.906000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe77c01f80 a2=0 a3=7ffe77c01f6c items=0 ppid=2104 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.906000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:34:48.908000 audit[2221]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.908000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc24999650 a2=0 a3=7ffc2499963c items=0 ppid=2104 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.908000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:34:48.912000 audit[2223]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.912000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc72ee2c00 a2=0 a3=7ffc72ee2bec items=0 ppid=2104 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.912000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:34:48.914000 audit[2224]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.914000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff689ca570 a2=0 a3=7fff689ca55c items=0 ppid=2104 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.914000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:34:48.916000 audit[2226]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.916000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff97d93550 a2=0 a3=7fff97d9353c items=0 ppid=2104 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:34:48.920000 audit[2229]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.920000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc34acb1e0 a2=0 a3=7ffc34acb1cc items=0 ppid=2104 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.920000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:34:48.924000 audit[2232]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.924000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeb650b840 a2=0 a3=7ffeb650b82c items=0 ppid=2104 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.924000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:34:48.925000 audit[2233]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.925000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffedcbae3c0 a2=0 a3=7ffedcbae3ac items=0 ppid=2104 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.925000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:34:48.927000 audit[2235]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.927000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff02357360 a2=0 a3=7fff0235734c items=0 ppid=2104 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.927000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:34:48.930000 audit[2238]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.930000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd74778bd0 a2=0 a3=7ffd74778bbc items=0 ppid=2104 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.930000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:34:48.931000 audit[2239]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.931000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec7b16c90 a2=0 a3=7ffec7b16c7c items=0 ppid=2104 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.931000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:34:48.933000 audit[2241]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:34:48.933000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe6e8b2080 a2=0 a3=7ffe6e8b206c items=0 ppid=2104 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.933000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:34:48.963000 audit[2247]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:34:48.963000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffee11b850 a2=0 a3=7fffee11b83c items=0 ppid=2104 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.963000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:34:48.973000 audit[2247]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:34:48.973000 audit[2247]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fffee11b850 a2=0 a3=7fffee11b83c items=0 ppid=2104 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.973000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:34:48.974000 audit[2253]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.974000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc0a004c40 a2=0 a3=7ffc0a004c2c items=0 ppid=2104 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.974000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:34:48.977000 audit[2255]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.977000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd0f064bf0 a2=0 a3=7ffd0f064bdc items=0 ppid=2104 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.977000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:34:48.981000 audit[2258]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.981000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd9c93a4d0 a2=0 a3=7ffd9c93a4bc items=0 ppid=2104 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.981000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:34:48.982000 audit[2259]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.982000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe59d38980 a2=0 a3=7ffe59d3896c items=0 ppid=2104 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.982000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:34:48.984000 audit[2261]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.984000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe9400f6d0 a2=0 a3=7ffe9400f6bc items=0 ppid=2104 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.984000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:34:48.985000 audit[2262]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.985000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff560472c0 a2=0 a3=7fff560472ac items=0 ppid=2104 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.985000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:34:48.988000 audit[2264]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.988000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffda7a04910 a2=0 a3=7ffda7a048fc items=0 ppid=2104 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.988000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:34:48.992000 audit[2267]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.992000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd3a509730 a2=0 a3=7ffd3a50971c items=0 ppid=2104 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.992000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:34:48.993000 audit[2268]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.993000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff26258cf0 a2=0 a3=7fff26258cdc items=0 ppid=2104 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.993000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:34:48.995000 audit[2270]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.995000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe47423320 a2=0 a3=7ffe4742330c items=0 ppid=2104 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.995000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:34:48.996000 audit[2271]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.996000 audit[2271]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe14f58050 a2=0 a3=7ffe14f5803c items=0 ppid=2104 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.996000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:34:48.999000 audit[2273]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2273 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:48.999000 audit[2273]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe92f933b0 a2=0 a3=7ffe92f9339c items=0 ppid=2104 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:48.999000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:34:49.003000 audit[2276]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.003000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeb7f53070 a2=0 a3=7ffeb7f5305c items=0 ppid=2104 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.003000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:34:49.007000 audit[2279]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2279 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.007000 audit[2279]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc66c49bb0 a2=0 a3=7ffc66c49b9c items=0 ppid=2104 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.007000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:34:49.008000 audit[2280]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.008000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffef7fcffc0 a2=0 a3=7ffef7fcffac items=0 ppid=2104 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.008000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:34:49.011000 audit[2282]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2282 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.011000 audit[2282]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd68e6ee40 a2=0 a3=7ffd68e6ee2c items=0 ppid=2104 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.011000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:34:49.015000 audit[2285]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.015000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe89e46310 a2=0 a3=7ffe89e462fc items=0 ppid=2104 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.015000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:34:49.016000 audit[2286]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.016000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe33874e70 a2=0 a3=7ffe33874e5c items=0 ppid=2104 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.016000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:34:49.018000 audit[2288]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.018000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffee09094b0 a2=0 a3=7ffee090949c items=0 ppid=2104 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.018000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:34:49.019000 audit[2289]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.019000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa78a3570 a2=0 a3=7fffa78a355c items=0 ppid=2104 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:34:49.021000 audit[2291]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.021000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc6df390d0 a2=0 a3=7ffc6df390bc items=0 ppid=2104 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.021000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:34:49.025000 audit[2294]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:34:49.025000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe22bdf0f0 a2=0 a3=7ffe22bdf0dc items=0 ppid=2104 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.025000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:34:49.028000 audit[2296]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:34:49.028000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffcf2a81310 a2=0 a3=7ffcf2a812fc items=0 ppid=2104 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.028000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:34:49.028000 audit[2296]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:34:49.028000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffcf2a81310 a2=0 a3=7ffcf2a812fc items=0 ppid=2104 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:49.028000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:34:49.295590 kubelet[1990]: E1101 00:34:49.294836 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:49.462841 systemd[1]: run-containerd-runc-k8s.io-651850399609b756a48a0696c55bd56c2eff58295f06ebb0bc1f6380f6d7c3f7-runc.jS94oK.mount: Deactivated successfully. Nov 1 00:34:49.882323 kubelet[1990]: E1101 00:34:49.882263 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:49.898852 kubelet[1990]: I1101 00:34:49.898760 1990 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-fk4hd" podStartSLOduration=1.8987379949999998 podStartE2EDuration="1.898737995s" podCreationTimestamp="2025-11-01 00:34:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:34:49.379269174 +0000 UTC m=+6.288315256" watchObservedRunningTime="2025-11-01 00:34:49.898737995 +0000 UTC m=+6.807784057" Nov 1 00:34:50.296194 kubelet[1990]: E1101 00:34:50.296057 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:51.297948 kubelet[1990]: E1101 00:34:51.297894 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:51.523663 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount962824748.mount: Deactivated successfully. Nov 1 00:34:53.058056 kubelet[1990]: E1101 00:34:53.057974 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:53.301830 kubelet[1990]: E1101 00:34:53.301791 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:53.782141 env[1201]: time="2025-11-01T00:34:53.782042557Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:53.853545 env[1201]: time="2025-11-01T00:34:53.853470137Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:53.870175 env[1201]: time="2025-11-01T00:34:53.870104816Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:53.876206 env[1201]: time="2025-11-01T00:34:53.876123341Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:34:53.877133 env[1201]: time="2025-11-01T00:34:53.877086064Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\"" Nov 1 00:34:53.903778 env[1201]: time="2025-11-01T00:34:53.903708830Z" level=info msg="CreateContainer within sandbox \"582c58a074d7026ce8d786fa304f04bf8973ebfec70f1423269e1de221ab9ab4\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:34:53.942604 env[1201]: time="2025-11-01T00:34:53.942511730Z" level=info msg="CreateContainer within sandbox \"582c58a074d7026ce8d786fa304f04bf8973ebfec70f1423269e1de221ab9ab4\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53\"" Nov 1 00:34:53.943238 env[1201]: time="2025-11-01T00:34:53.943186378Z" level=info msg="StartContainer for \"e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53\"" Nov 1 00:34:53.970625 systemd[1]: run-containerd-runc-k8s.io-e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53-runc.EkWOyp.mount: Deactivated successfully. Nov 1 00:34:53.972157 systemd[1]: Started cri-containerd-e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53.scope. Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.988697 kernel: kauditd_printk_skb: 300 callbacks suppressed Nov 1 00:34:53.988761 kernel: audit: type=1400 audit(1761957293.986:873): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.999091 kernel: audit: type=1400 audit(1761957293.986:874): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.004271 kernel: audit: type=1400 audit(1761957293.986:875): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.004323 kernel: audit: type=1400 audit(1761957293.986:876): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.021250 kernel: audit: type=1400 audit(1761957293.986:877): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.021465 kernel: audit: type=1400 audit(1761957293.986:878): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.021505 kernel: audit: type=1400 audit(1761957293.986:879): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.035546 kernel: audit: type=1400 audit(1761957293.986:880): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.035742 kernel: audit: type=1400 audit(1761957293.986:881): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.047801 kernel: audit: type=1400 audit(1761957293.992:882): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.992000 audit: BPF prog-id=114 op=LOAD Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2172 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:53.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373230383838366431353536613164376534326166613661623861 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2172 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:53.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373230383838366431353536613164376534326166613661623861 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.993000 audit: BPF prog-id=115 op=LOAD Nov 1 00:34:53.993000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000212630 items=0 ppid=2172 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:53.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373230383838366431353536613164376534326166613661623861 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:53.998000 audit: BPF prog-id=116 op=LOAD Nov 1 00:34:53.998000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000212678 items=0 ppid=2172 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:53.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373230383838366431353536613164376534326166613661623861 Nov 1 00:34:54.003000 audit: BPF prog-id=116 op=UNLOAD Nov 1 00:34:54.003000 audit: BPF prog-id=115 op=UNLOAD Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:54.003000 audit: BPF prog-id=117 op=LOAD Nov 1 00:34:54.003000 audit[2305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000212a88 items=0 ppid=2172 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:54.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373230383838366431353536613164376534326166613661623861 Nov 1 00:34:54.148250 env[1201]: time="2025-11-01T00:34:54.148168100Z" level=info msg="StartContainer for \"e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53\" returns successfully" Nov 1 00:34:54.306430 kubelet[1990]: E1101 00:34:54.305022 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:34:57.153137 systemd[1]: cri-containerd-e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53.scope: Deactivated successfully. Nov 1 00:34:57.152000 audit: BPF prog-id=114 op=UNLOAD Nov 1 00:34:57.158000 audit: BPF prog-id=117 op=UNLOAD Nov 1 00:34:57.179410 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53-rootfs.mount: Deactivated successfully. Nov 1 00:34:57.394226 env[1201]: time="2025-11-01T00:34:57.394138816Z" level=info msg="shim disconnected" id=e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53 Nov 1 00:34:57.394226 env[1201]: time="2025-11-01T00:34:57.394210194Z" level=warning msg="cleaning up after shim disconnected" id=e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53 namespace=k8s.io Nov 1 00:34:57.394226 env[1201]: time="2025-11-01T00:34:57.394222587Z" level=info msg="cleaning up dead shim" Nov 1 00:34:57.405403 env[1201]: time="2025-11-01T00:34:57.405262125Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:34:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2369 runtime=io.containerd.runc.v2\ntime=\"2025-11-01T00:34:57Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Nov 1 00:34:58.311531 kubelet[1990]: I1101 00:34:58.311466 1990 scope.go:117] "RemoveContainer" containerID="e77208886d1556a1d7e42afa6ab8a3e1fb9a4680426cb4ae31dca0632dea2c53" Nov 1 00:34:58.313343 env[1201]: time="2025-11-01T00:34:58.313284008Z" level=info msg="CreateContainer within sandbox \"582c58a074d7026ce8d786fa304f04bf8973ebfec70f1423269e1de221ab9ab4\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Nov 1 00:34:58.376509 env[1201]: time="2025-11-01T00:34:58.376412615Z" level=info msg="CreateContainer within sandbox \"582c58a074d7026ce8d786fa304f04bf8973ebfec70f1423269e1de221ab9ab4\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"b02c2ba0852f5a3eeb82449ecf825ebd7f050fbbdd2342e816150547249d06e8\"" Nov 1 00:34:58.377125 env[1201]: time="2025-11-01T00:34:58.377094986Z" level=info msg="StartContainer for \"b02c2ba0852f5a3eeb82449ecf825ebd7f050fbbdd2342e816150547249d06e8\"" Nov 1 00:34:58.403122 systemd[1]: Started cri-containerd-b02c2ba0852f5a3eeb82449ecf825ebd7f050fbbdd2342e816150547249d06e8.scope. Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.416000 audit: BPF prog-id=118 op=LOAD Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2172 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:58.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326332626130383532663561336565623832343439656366383235 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2172 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:58.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326332626130383532663561336565623832343439656366383235 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit: BPF prog-id=119 op=LOAD Nov 1 00:34:58.417000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000119c90 items=0 ppid=2172 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:58.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326332626130383532663561336565623832343439656366383235 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit: BPF prog-id=120 op=LOAD Nov 1 00:34:58.417000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000119cd8 items=0 ppid=2172 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:58.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326332626130383532663561336565623832343439656366383235 Nov 1 00:34:58.417000 audit: BPF prog-id=120 op=UNLOAD Nov 1 00:34:58.417000 audit: BPF prog-id=119 op=UNLOAD Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:34:58.417000 audit: BPF prog-id=121 op=LOAD Nov 1 00:34:58.417000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00017a0e8 items=0 ppid=2172 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:34:58.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326332626130383532663561336565623832343439656366383235 Nov 1 00:34:58.435054 env[1201]: time="2025-11-01T00:34:58.434979703Z" level=info msg="StartContainer for \"b02c2ba0852f5a3eeb82449ecf825ebd7f050fbbdd2342e816150547249d06e8\" returns successfully" Nov 1 00:34:59.326813 kubelet[1990]: I1101 00:34:59.326725 1990 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-cd98j" podStartSLOduration=6.328815589 podStartE2EDuration="11.32670323s" podCreationTimestamp="2025-11-01 00:34:48 +0000 UTC" firstStartedPulling="2025-11-01 00:34:48.880798152 +0000 UTC m=+5.789844214" lastFinishedPulling="2025-11-01 00:34:53.878685793 +0000 UTC m=+10.787731855" observedRunningTime="2025-11-01 00:34:54.325082054 +0000 UTC m=+11.234128116" watchObservedRunningTime="2025-11-01 00:34:59.32670323 +0000 UTC m=+16.235749292" Nov 1 00:34:59.367616 systemd[1]: run-containerd-runc-k8s.io-b02c2ba0852f5a3eeb82449ecf825ebd7f050fbbdd2342e816150547249d06e8-runc.6bSQdN.mount: Deactivated successfully. Nov 1 00:35:00.709797 sudo[1338]: pam_unix(sudo:session): session closed for user root Nov 1 00:35:00.708000 audit[1338]: USER_END pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:35:00.711661 kernel: kauditd_printk_skb: 106 callbacks suppressed Nov 1 00:35:00.711744 kernel: audit: type=1106 audit(1761957300.708:911): pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:35:00.709000 audit[1338]: CRED_DISP pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:35:00.724422 kernel: audit: type=1104 audit(1761957300.709:912): pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:35:00.727717 sshd[1335]: pam_unix(sshd:session): session closed for user core Nov 1 00:35:00.728000 audit[1335]: USER_END pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:00.732350 systemd[1]: sshd@6-10.0.0.38:22-10.0.0.1:51644.service: Deactivated successfully. Nov 1 00:35:00.733293 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:35:00.733456 systemd[1]: session-7.scope: Consumed 6.191s CPU time. Nov 1 00:35:00.737035 systemd-logind[1187]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:35:00.740202 kernel: audit: type=1106 audit(1761957300.728:913): pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:00.739752 systemd-logind[1187]: Removed session 7. Nov 1 00:35:00.728000 audit[1335]: CRED_DISP pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:00.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.38:22-10.0.0.1:51644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:00.767522 kernel: audit: type=1104 audit(1761957300.728:914): pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:00.767687 kernel: audit: type=1131 audit(1761957300.731:915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.38:22-10.0.0.1:51644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:03.584000 audit[2459]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:03.584000 audit[2459]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe7f7cbe20 a2=0 a3=7ffe7f7cbe0c items=0 ppid=2104 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:03.599767 kernel: audit: type=1325 audit(1761957303.584:916): table=filter:89 family=2 entries=14 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:03.600001 kernel: audit: type=1300 audit(1761957303.584:916): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe7f7cbe20 a2=0 a3=7ffe7f7cbe0c items=0 ppid=2104 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:03.584000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:03.610012 kernel: audit: type=1327 audit(1761957303.584:916): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:03.610229 kernel: audit: type=1325 audit(1761957303.601:917): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:03.601000 audit[2459]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:03.601000 audit[2459]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe7f7cbe20 a2=0 a3=0 items=0 ppid=2104 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:03.619252 kernel: audit: type=1300 audit(1761957303.601:917): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe7f7cbe20 a2=0 a3=0 items=0 ppid=2104 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:03.601000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:03.626000 audit[2461]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:03.626000 audit[2461]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe361f2aa0 a2=0 a3=7ffe361f2a8c items=0 ppid=2104 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:03.626000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:03.633000 audit[2461]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:03.633000 audit[2461]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe361f2aa0 a2=0 a3=0 items=0 ppid=2104 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:03.633000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:05.503000 audit[2464]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:05.503000 audit[2464]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe0f565120 a2=0 a3=7ffe0f56510c items=0 ppid=2104 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:05.503000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:05.509000 audit[2464]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:05.509000 audit[2464]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe0f565120 a2=0 a3=0 items=0 ppid=2104 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:05.509000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:05.733462 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:35:05.733650 kernel: audit: type=1325 audit(1761957305.725:922): table=filter:95 family=2 entries=19 op=nft_register_rule pid=2466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:05.725000 audit[2466]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=2466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:05.745421 kernel: audit: type=1300 audit(1761957305.725:922): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd6a6116d0 a2=0 a3=7ffd6a6116bc items=0 ppid=2104 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:05.725000 audit[2466]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd6a6116d0 a2=0 a3=7ffd6a6116bc items=0 ppid=2104 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:05.725000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:05.746000 audit[2466]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:05.756131 kernel: audit: type=1327 audit(1761957305.725:922): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:05.756267 kernel: audit: type=1325 audit(1761957305.746:923): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:05.756288 kernel: audit: type=1300 audit(1761957305.746:923): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd6a6116d0 a2=0 a3=0 items=0 ppid=2104 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:05.746000 audit[2466]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd6a6116d0 a2=0 a3=0 items=0 ppid=2104 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:05.746000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:05.772980 kernel: audit: type=1327 audit(1761957305.746:923): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:06.785000 audit[2468]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:06.785000 audit[2468]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffb5ebd7c0 a2=0 a3=7fffb5ebd7ac items=0 ppid=2104 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:06.802487 kernel: audit: type=1325 audit(1761957306.785:924): table=filter:97 family=2 entries=20 op=nft_register_rule pid=2468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:06.802646 kernel: audit: type=1300 audit(1761957306.785:924): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffb5ebd7c0 a2=0 a3=7fffb5ebd7ac items=0 ppid=2104 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:06.802682 kernel: audit: type=1327 audit(1761957306.785:924): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:06.785000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:06.811000 audit[2468]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:06.811000 audit[2468]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffb5ebd7c0 a2=0 a3=0 items=0 ppid=2104 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:06.811000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:06.816995 kernel: audit: type=1325 audit(1761957306.811:925): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:08.153000 audit[2470]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2470 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:08.153000 audit[2470]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffcd4ce9430 a2=0 a3=7ffcd4ce941c items=0 ppid=2104 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.153000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:08.160000 audit[2470]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2470 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:08.160000 audit[2470]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcd4ce9430 a2=0 a3=0 items=0 ppid=2104 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.160000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:08.395086 systemd[1]: Created slice kubepods-besteffort-pod4c36cb8b_813d_48d0_99db_2ea8fe74e635.slice. Nov 1 00:35:08.425711 kubelet[1990]: I1101 00:35:08.425523 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4c36cb8b-813d-48d0-99db-2ea8fe74e635-tigera-ca-bundle\") pod \"calico-typha-d76d9544f-5898k\" (UID: \"4c36cb8b-813d-48d0-99db-2ea8fe74e635\") " pod="calico-system/calico-typha-d76d9544f-5898k" Nov 1 00:35:08.425711 kubelet[1990]: I1101 00:35:08.425581 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kdjpk\" (UniqueName: \"kubernetes.io/projected/4c36cb8b-813d-48d0-99db-2ea8fe74e635-kube-api-access-kdjpk\") pod \"calico-typha-d76d9544f-5898k\" (UID: \"4c36cb8b-813d-48d0-99db-2ea8fe74e635\") " pod="calico-system/calico-typha-d76d9544f-5898k" Nov 1 00:35:08.425711 kubelet[1990]: I1101 00:35:08.425600 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/4c36cb8b-813d-48d0-99db-2ea8fe74e635-typha-certs\") pod \"calico-typha-d76d9544f-5898k\" (UID: \"4c36cb8b-813d-48d0-99db-2ea8fe74e635\") " pod="calico-system/calico-typha-d76d9544f-5898k" Nov 1 00:35:08.464049 systemd[1]: Created slice kubepods-besteffort-pod9b763534_6ca4_4781_9df5_ca347cc1e524.slice. Nov 1 00:35:08.526271 kubelet[1990]: I1101 00:35:08.526217 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-cni-log-dir\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526271 kubelet[1990]: I1101 00:35:08.526262 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-cni-net-dir\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526271 kubelet[1990]: I1101 00:35:08.526276 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9b763534-6ca4-4781-9df5-ca347cc1e524-tigera-ca-bundle\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526531 kubelet[1990]: I1101 00:35:08.526290 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-policysync\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526531 kubelet[1990]: I1101 00:35:08.526304 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-var-lib-calico\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526531 kubelet[1990]: I1101 00:35:08.526316 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-var-run-calico\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526531 kubelet[1990]: I1101 00:35:08.526329 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-xtables-lock\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526531 kubelet[1990]: I1101 00:35:08.526353 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-cni-bin-dir\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526669 kubelet[1990]: I1101 00:35:08.526368 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/9b763534-6ca4-4781-9df5-ca347cc1e524-node-certs\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526669 kubelet[1990]: I1101 00:35:08.526462 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7gsjn\" (UniqueName: \"kubernetes.io/projected/9b763534-6ca4-4781-9df5-ca347cc1e524-kube-api-access-7gsjn\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526727 kubelet[1990]: I1101 00:35:08.526691 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-lib-modules\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.526754 kubelet[1990]: I1101 00:35:08.526734 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/9b763534-6ca4-4781-9df5-ca347cc1e524-flexvol-driver-host\") pod \"calico-node-znsr4\" (UID: \"9b763534-6ca4-4781-9df5-ca347cc1e524\") " pod="calico-system/calico-node-znsr4" Nov 1 00:35:08.569308 kubelet[1990]: E1101 00:35:08.569256 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:08.627735 kubelet[1990]: I1101 00:35:08.627655 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/4910ecde-2ad2-41de-b965-b4403e24ea7b-kubelet-dir\") pod \"csi-node-driver-2k2fp\" (UID: \"4910ecde-2ad2-41de-b965-b4403e24ea7b\") " pod="calico-system/csi-node-driver-2k2fp" Nov 1 00:35:08.627985 kubelet[1990]: I1101 00:35:08.627744 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/4910ecde-2ad2-41de-b965-b4403e24ea7b-socket-dir\") pod \"csi-node-driver-2k2fp\" (UID: \"4910ecde-2ad2-41de-b965-b4403e24ea7b\") " pod="calico-system/csi-node-driver-2k2fp" Nov 1 00:35:08.627985 kubelet[1990]: I1101 00:35:08.627783 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/4910ecde-2ad2-41de-b965-b4403e24ea7b-varrun\") pod \"csi-node-driver-2k2fp\" (UID: \"4910ecde-2ad2-41de-b965-b4403e24ea7b\") " pod="calico-system/csi-node-driver-2k2fp" Nov 1 00:35:08.627985 kubelet[1990]: I1101 00:35:08.627903 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/4910ecde-2ad2-41de-b965-b4403e24ea7b-registration-dir\") pod \"csi-node-driver-2k2fp\" (UID: \"4910ecde-2ad2-41de-b965-b4403e24ea7b\") " pod="calico-system/csi-node-driver-2k2fp" Nov 1 00:35:08.627985 kubelet[1990]: I1101 00:35:08.627954 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hm4dm\" (UniqueName: \"kubernetes.io/projected/4910ecde-2ad2-41de-b965-b4403e24ea7b-kube-api-access-hm4dm\") pod \"csi-node-driver-2k2fp\" (UID: \"4910ecde-2ad2-41de-b965-b4403e24ea7b\") " pod="calico-system/csi-node-driver-2k2fp" Nov 1 00:35:08.630556 kubelet[1990]: E1101 00:35:08.630534 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.630556 kubelet[1990]: W1101 00:35:08.630552 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.631635 kubelet[1990]: E1101 00:35:08.631590 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.631971 kubelet[1990]: E1101 00:35:08.631955 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.631971 kubelet[1990]: W1101 00:35:08.631968 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.632112 kubelet[1990]: E1101 00:35:08.631978 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.637196 kubelet[1990]: E1101 00:35:08.637137 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.637196 kubelet[1990]: W1101 00:35:08.637184 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.637395 kubelet[1990]: E1101 00:35:08.637214 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.644592 kubelet[1990]: E1101 00:35:08.644556 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.644592 kubelet[1990]: W1101 00:35:08.644579 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.644827 kubelet[1990]: E1101 00:35:08.644601 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.699833 kubelet[1990]: E1101 00:35:08.699658 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:08.700687 env[1201]: time="2025-11-01T00:35:08.700639048Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-d76d9544f-5898k,Uid:4c36cb8b-813d-48d0-99db-2ea8fe74e635,Namespace:calico-system,Attempt:0,}" Nov 1 00:35:08.730658 kubelet[1990]: E1101 00:35:08.730581 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.730854 kubelet[1990]: W1101 00:35:08.730706 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.730854 kubelet[1990]: E1101 00:35:08.730737 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.733400 kubelet[1990]: E1101 00:35:08.733342 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.733518 kubelet[1990]: W1101 00:35:08.733396 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.733518 kubelet[1990]: E1101 00:35:08.733439 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.734073 kubelet[1990]: E1101 00:35:08.734038 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.734073 kubelet[1990]: W1101 00:35:08.734064 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.734240 kubelet[1990]: E1101 00:35:08.734079 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.734381 kubelet[1990]: E1101 00:35:08.734347 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.734381 kubelet[1990]: W1101 00:35:08.734368 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.734381 kubelet[1990]: E1101 00:35:08.734379 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.734624 kubelet[1990]: E1101 00:35:08.734557 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.734624 kubelet[1990]: W1101 00:35:08.734564 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.734624 kubelet[1990]: E1101 00:35:08.734572 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.734800 kubelet[1990]: E1101 00:35:08.734736 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.734800 kubelet[1990]: W1101 00:35:08.734744 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.734800 kubelet[1990]: E1101 00:35:08.734752 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.734998 kubelet[1990]: E1101 00:35:08.734916 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.734998 kubelet[1990]: W1101 00:35:08.734934 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.734998 kubelet[1990]: E1101 00:35:08.734942 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.735183 kubelet[1990]: E1101 00:35:08.735120 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.735183 kubelet[1990]: W1101 00:35:08.735128 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.735183 kubelet[1990]: E1101 00:35:08.735135 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.738075 kubelet[1990]: E1101 00:35:08.738032 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.738075 kubelet[1990]: W1101 00:35:08.738060 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.738075 kubelet[1990]: E1101 00:35:08.738078 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.738439 kubelet[1990]: E1101 00:35:08.738409 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.738439 kubelet[1990]: W1101 00:35:08.738430 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.738439 kubelet[1990]: E1101 00:35:08.738441 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.738728 kubelet[1990]: E1101 00:35:08.738697 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.738728 kubelet[1990]: W1101 00:35:08.738716 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.738728 kubelet[1990]: E1101 00:35:08.738727 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.738959 kubelet[1990]: E1101 00:35:08.738899 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.738959 kubelet[1990]: W1101 00:35:08.738909 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.739082 kubelet[1990]: E1101 00:35:08.738977 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.739203 kubelet[1990]: E1101 00:35:08.739174 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.739203 kubelet[1990]: W1101 00:35:08.739191 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.739203 kubelet[1990]: E1101 00:35:08.739201 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.739402 kubelet[1990]: E1101 00:35:08.739390 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.739402 kubelet[1990]: W1101 00:35:08.739399 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.739560 kubelet[1990]: E1101 00:35:08.739409 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.739641 kubelet[1990]: E1101 00:35:08.739594 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.739641 kubelet[1990]: W1101 00:35:08.739605 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.739641 kubelet[1990]: E1101 00:35:08.739627 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.740749 kubelet[1990]: E1101 00:35:08.739886 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.740749 kubelet[1990]: W1101 00:35:08.739905 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.740749 kubelet[1990]: E1101 00:35:08.739930 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.752782 env[1201]: time="2025-11-01T00:35:08.752654129Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:08.753062 env[1201]: time="2025-11-01T00:35:08.752789558Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:08.753062 env[1201]: time="2025-11-01T00:35:08.752861245Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:08.753348 env[1201]: time="2025-11-01T00:35:08.753092558Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2bac883b30de99fa324e01a671fd46797bede0f11a9334e8069ea1de681937de pid=2504 runtime=io.containerd.runc.v2 Nov 1 00:35:08.754425 kubelet[1990]: E1101 00:35:08.754380 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.754425 kubelet[1990]: W1101 00:35:08.754415 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.754605 kubelet[1990]: E1101 00:35:08.754449 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.759071 kubelet[1990]: E1101 00:35:08.759033 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.759071 kubelet[1990]: W1101 00:35:08.759062 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.759256 kubelet[1990]: E1101 00:35:08.759085 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.759510 kubelet[1990]: E1101 00:35:08.759474 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.759510 kubelet[1990]: W1101 00:35:08.759499 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.759652 kubelet[1990]: E1101 00:35:08.759517 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.759770 kubelet[1990]: E1101 00:35:08.759736 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.759770 kubelet[1990]: W1101 00:35:08.759760 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.759900 kubelet[1990]: E1101 00:35:08.759780 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.760095 kubelet[1990]: E1101 00:35:08.760063 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.760095 kubelet[1990]: W1101 00:35:08.760088 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.760225 kubelet[1990]: E1101 00:35:08.760107 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.760368 kubelet[1990]: E1101 00:35:08.760339 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.760368 kubelet[1990]: W1101 00:35:08.760363 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.760500 kubelet[1990]: E1101 00:35:08.760381 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.760712 kubelet[1990]: E1101 00:35:08.760646 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.760712 kubelet[1990]: W1101 00:35:08.760670 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.760712 kubelet[1990]: E1101 00:35:08.760690 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.766971 kubelet[1990]: E1101 00:35:08.760913 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.766971 kubelet[1990]: W1101 00:35:08.760953 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.766971 kubelet[1990]: E1101 00:35:08.760970 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.766971 kubelet[1990]: E1101 00:35:08.761213 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.766971 kubelet[1990]: W1101 00:35:08.761227 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.766971 kubelet[1990]: E1101 00:35:08.761242 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.767494 kubelet[1990]: E1101 00:35:08.767121 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:08.768070 env[1201]: time="2025-11-01T00:35:08.767997315Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-znsr4,Uid:9b763534-6ca4-4781-9df5-ca347cc1e524,Namespace:calico-system,Attempt:0,}" Nov 1 00:35:08.769160 kubelet[1990]: E1101 00:35:08.769128 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:08.769302 kubelet[1990]: W1101 00:35:08.769267 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:08.769381 kubelet[1990]: E1101 00:35:08.769314 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:08.780871 systemd[1]: Started cri-containerd-2bac883b30de99fa324e01a671fd46797bede0f11a9334e8069ea1de681937de.scope. Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.796000 audit: BPF prog-id=122 op=LOAD Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616338383362333064653939666133323465303161363731666434 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616338383362333064653939666133323465303161363731666434 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit: BPF prog-id=123 op=LOAD Nov 1 00:35:08.797000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024830 items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616338383362333064653939666133323465303161363731666434 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.797000 audit: BPF prog-id=124 op=LOAD Nov 1 00:35:08.797000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024878 items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.797000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616338383362333064653939666133323465303161363731666434 Nov 1 00:35:08.797000 audit: BPF prog-id=124 op=UNLOAD Nov 1 00:35:08.798000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.798000 audit: BPF prog-id=125 op=LOAD Nov 1 00:35:08.798000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000024c88 items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616338383362333064653939666133323465303161363731666434 Nov 1 00:35:08.802224 env[1201]: time="2025-11-01T00:35:08.800971830Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:08.802224 env[1201]: time="2025-11-01T00:35:08.801047435Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:08.802224 env[1201]: time="2025-11-01T00:35:08.801061212Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:08.802224 env[1201]: time="2025-11-01T00:35:08.801277145Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1 pid=2544 runtime=io.containerd.runc.v2 Nov 1 00:35:08.817014 systemd[1]: Started cri-containerd-1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1.scope. Nov 1 00:35:08.829946 env[1201]: time="2025-11-01T00:35:08.829875200Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-d76d9544f-5898k,Uid:4c36cb8b-813d-48d0-99db-2ea8fe74e635,Namespace:calico-system,Attempt:0,} returns sandbox id \"2bac883b30de99fa324e01a671fd46797bede0f11a9334e8069ea1de681937de\"" Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.831000 audit: BPF prog-id=126 op=LOAD Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2544 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164306334353931613565646533623364393736613763303362376363 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2544 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164306334353931613565646533623364393736613763303362376363 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit: BPF prog-id=127 op=LOAD Nov 1 00:35:08.832000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00009c640 items=0 ppid=2544 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164306334353931613565646533623364393736613763303362376363 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit: BPF prog-id=128 op=LOAD Nov 1 00:35:08.832000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00009c688 items=0 ppid=2544 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164306334353931613565646533623364393736613763303362376363 Nov 1 00:35:08.832000 audit: BPF prog-id=128 op=UNLOAD Nov 1 00:35:08.832000 audit: BPF prog-id=127 op=UNLOAD Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:08.832000 audit: BPF prog-id=129 op=LOAD Nov 1 00:35:08.832000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00009ca98 items=0 ppid=2544 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:08.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164306334353931613565646533623364393736613763303362376363 Nov 1 00:35:08.835599 kubelet[1990]: E1101 00:35:08.833734 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:08.845518 env[1201]: time="2025-11-01T00:35:08.845468135Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-znsr4,Uid:9b763534-6ca4-4781-9df5-ca347cc1e524,Namespace:calico-system,Attempt:0,} returns sandbox id \"1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1\"" Nov 1 00:35:08.846185 kubelet[1990]: E1101 00:35:08.846149 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:08.864071 env[1201]: time="2025-11-01T00:35:08.864027660Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:35:09.177000 audit[2588]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=2588 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:09.177000 audit[2588]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffcc7d62330 a2=0 a3=7ffcc7d6231c items=0 ppid=2104 pid=2588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:09.177000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:09.183000 audit[2588]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=2588 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:09.183000 audit[2588]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcc7d62330 a2=0 a3=0 items=0 ppid=2104 pid=2588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:09.183000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:10.272589 kubelet[1990]: E1101 00:35:10.272515 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:10.471276 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3994965596.mount: Deactivated successfully. Nov 1 00:35:11.948161 env[1201]: time="2025-11-01T00:35:11.948105746Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:11.950943 env[1201]: time="2025-11-01T00:35:11.950875887Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:11.957449 env[1201]: time="2025-11-01T00:35:11.957387277Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:11.959779 env[1201]: time="2025-11-01T00:35:11.958906644Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:11.959779 env[1201]: time="2025-11-01T00:35:11.959615741Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958\"" Nov 1 00:35:11.962438 env[1201]: time="2025-11-01T00:35:11.962405389Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:35:11.991967 env[1201]: time="2025-11-01T00:35:11.991895080Z" level=info msg="CreateContainer within sandbox \"2bac883b30de99fa324e01a671fd46797bede0f11a9334e8069ea1de681937de\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:35:12.013178 env[1201]: time="2025-11-01T00:35:12.013097988Z" level=info msg="CreateContainer within sandbox \"2bac883b30de99fa324e01a671fd46797bede0f11a9334e8069ea1de681937de\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"12e376060f5a251521ac24311f9804478649b940e174b14626738b004b5c2f59\"" Nov 1 00:35:12.013888 env[1201]: time="2025-11-01T00:35:12.013824989Z" level=info msg="StartContainer for \"12e376060f5a251521ac24311f9804478649b940e174b14626738b004b5c2f59\"" Nov 1 00:35:12.038813 systemd[1]: Started cri-containerd-12e376060f5a251521ac24311f9804478649b940e174b14626738b004b5c2f59.scope. Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.060676 kernel: kauditd_printk_skb: 128 callbacks suppressed Nov 1 00:35:12.060758 kernel: audit: type=1400 audit(1761957312.058:966): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072714 kernel: audit: type=1400 audit(1761957312.058:967): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.084977 kernel: audit: type=1400 audit(1761957312.058:968): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.085055 kernel: audit: type=1400 audit(1761957312.058:969): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.099332 kernel: audit: type=1400 audit(1761957312.058:970): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.099447 kernel: audit: type=1400 audit(1761957312.058:971): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.105612 kernel: audit: type=1400 audit(1761957312.058:972): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.112193 kernel: audit: type=1400 audit(1761957312.058:973): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.112257 kernel: audit: type=1400 audit(1761957312.058:974): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.125525 kernel: audit: type=1400 audit(1761957312.065:975): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.065000 audit: BPF prog-id=130 op=LOAD Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2504 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:12.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653337363036306635613235313532316163323433313166393830 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2504 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:12.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653337363036306635613235313532316163323433313166393830 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.066000 audit: BPF prog-id=131 op=LOAD Nov 1 00:35:12.066000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00033fd40 items=0 ppid=2504 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:12.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653337363036306635613235313532316163323433313166393830 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.071000 audit: BPF prog-id=132 op=LOAD Nov 1 00:35:12.071000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00033fd88 items=0 ppid=2504 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:12.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653337363036306635613235313532316163323433313166393830 Nov 1 00:35:12.071000 audit: BPF prog-id=132 op=UNLOAD Nov 1 00:35:12.071000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:12.072000 audit: BPF prog-id=133 op=LOAD Nov 1 00:35:12.072000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003a8198 items=0 ppid=2504 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:12.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132653337363036306635613235313532316163323433313166393830 Nov 1 00:35:12.136584 env[1201]: time="2025-11-01T00:35:12.136528589Z" level=info msg="StartContainer for \"12e376060f5a251521ac24311f9804478649b940e174b14626738b004b5c2f59\" returns successfully" Nov 1 00:35:12.273607 kubelet[1990]: E1101 00:35:12.273425 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:12.358154 kubelet[1990]: E1101 00:35:12.358085 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:12.450990 kubelet[1990]: E1101 00:35:12.450912 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.450990 kubelet[1990]: W1101 00:35:12.450961 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.477242 kubelet[1990]: E1101 00:35:12.477168 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.477624 kubelet[1990]: E1101 00:35:12.477600 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.477624 kubelet[1990]: W1101 00:35:12.477619 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.477748 kubelet[1990]: E1101 00:35:12.477645 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.477864 kubelet[1990]: E1101 00:35:12.477844 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.477864 kubelet[1990]: W1101 00:35:12.477854 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.477955 kubelet[1990]: E1101 00:35:12.477863 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.478117 kubelet[1990]: E1101 00:35:12.478103 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.478117 kubelet[1990]: W1101 00:35:12.478113 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.478227 kubelet[1990]: E1101 00:35:12.478122 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.478342 kubelet[1990]: E1101 00:35:12.478313 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.478342 kubelet[1990]: W1101 00:35:12.478339 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.478453 kubelet[1990]: E1101 00:35:12.478349 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.478572 kubelet[1990]: E1101 00:35:12.478551 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.478572 kubelet[1990]: W1101 00:35:12.478565 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.478785 kubelet[1990]: E1101 00:35:12.478585 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.478843 kubelet[1990]: E1101 00:35:12.478815 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.478843 kubelet[1990]: W1101 00:35:12.478826 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.478843 kubelet[1990]: E1101 00:35:12.478837 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.479045 kubelet[1990]: E1101 00:35:12.479027 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.479045 kubelet[1990]: W1101 00:35:12.479039 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.479153 kubelet[1990]: E1101 00:35:12.479056 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.479287 kubelet[1990]: E1101 00:35:12.479268 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.479287 kubelet[1990]: W1101 00:35:12.479280 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.479393 kubelet[1990]: E1101 00:35:12.479296 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.479473 kubelet[1990]: E1101 00:35:12.479458 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.479473 kubelet[1990]: W1101 00:35:12.479470 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.479558 kubelet[1990]: E1101 00:35:12.479481 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.479694 kubelet[1990]: E1101 00:35:12.479676 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.479694 kubelet[1990]: W1101 00:35:12.479688 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.479775 kubelet[1990]: E1101 00:35:12.479699 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.479892 kubelet[1990]: E1101 00:35:12.479877 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.479892 kubelet[1990]: W1101 00:35:12.479889 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.480008 kubelet[1990]: E1101 00:35:12.479898 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.480078 kubelet[1990]: E1101 00:35:12.480064 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.480078 kubelet[1990]: W1101 00:35:12.480074 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.480179 kubelet[1990]: E1101 00:35:12.480083 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.480261 kubelet[1990]: E1101 00:35:12.480247 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.480261 kubelet[1990]: W1101 00:35:12.480258 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.480335 kubelet[1990]: E1101 00:35:12.480267 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.480435 kubelet[1990]: E1101 00:35:12.480423 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.480435 kubelet[1990]: W1101 00:35:12.480432 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.480490 kubelet[1990]: E1101 00:35:12.480444 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.480774 kubelet[1990]: E1101 00:35:12.480756 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.480774 kubelet[1990]: W1101 00:35:12.480771 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.480869 kubelet[1990]: E1101 00:35:12.480782 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.481002 kubelet[1990]: E1101 00:35:12.480990 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.481029 kubelet[1990]: W1101 00:35:12.481003 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.481029 kubelet[1990]: E1101 00:35:12.481013 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.481237 kubelet[1990]: E1101 00:35:12.481224 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.481237 kubelet[1990]: W1101 00:35:12.481236 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.481325 kubelet[1990]: E1101 00:35:12.481246 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.481436 kubelet[1990]: E1101 00:35:12.481424 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.481462 kubelet[1990]: W1101 00:35:12.481435 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.481462 kubelet[1990]: E1101 00:35:12.481445 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.481624 kubelet[1990]: E1101 00:35:12.481612 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.481662 kubelet[1990]: W1101 00:35:12.481625 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.481662 kubelet[1990]: E1101 00:35:12.481636 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.481850 kubelet[1990]: E1101 00:35:12.481836 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.481850 kubelet[1990]: W1101 00:35:12.481848 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.481960 kubelet[1990]: E1101 00:35:12.481858 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.482124 kubelet[1990]: E1101 00:35:12.482107 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.482124 kubelet[1990]: W1101 00:35:12.482120 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.482193 kubelet[1990]: E1101 00:35:12.482131 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.482317 kubelet[1990]: E1101 00:35:12.482304 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.482347 kubelet[1990]: W1101 00:35:12.482315 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.482347 kubelet[1990]: E1101 00:35:12.482326 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.482500 kubelet[1990]: E1101 00:35:12.482487 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.482500 kubelet[1990]: W1101 00:35:12.482496 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.482581 kubelet[1990]: E1101 00:35:12.482505 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.482699 kubelet[1990]: E1101 00:35:12.482685 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.482699 kubelet[1990]: W1101 00:35:12.482696 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.482751 kubelet[1990]: E1101 00:35:12.482706 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.482898 kubelet[1990]: E1101 00:35:12.482889 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.482933 kubelet[1990]: W1101 00:35:12.482898 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.482933 kubelet[1990]: E1101 00:35:12.482907 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.483192 kubelet[1990]: E1101 00:35:12.483171 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.483192 kubelet[1990]: W1101 00:35:12.483186 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.483249 kubelet[1990]: E1101 00:35:12.483197 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.483404 kubelet[1990]: E1101 00:35:12.483386 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.483404 kubelet[1990]: W1101 00:35:12.483399 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.483454 kubelet[1990]: E1101 00:35:12.483408 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.483596 kubelet[1990]: E1101 00:35:12.483585 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.483620 kubelet[1990]: W1101 00:35:12.483596 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.483620 kubelet[1990]: E1101 00:35:12.483605 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.483798 kubelet[1990]: E1101 00:35:12.483786 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.483798 kubelet[1990]: W1101 00:35:12.483796 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.483866 kubelet[1990]: E1101 00:35:12.483805 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.484054 kubelet[1990]: E1101 00:35:12.484039 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.484054 kubelet[1990]: W1101 00:35:12.484051 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.484135 kubelet[1990]: E1101 00:35:12.484061 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.484347 kubelet[1990]: E1101 00:35:12.484328 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.484347 kubelet[1990]: W1101 00:35:12.484345 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.484417 kubelet[1990]: E1101 00:35:12.484356 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.484548 kubelet[1990]: E1101 00:35:12.484535 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:12.484548 kubelet[1990]: W1101 00:35:12.484544 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:12.484622 kubelet[1990]: E1101 00:35:12.484552 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:12.519897 kubelet[1990]: I1101 00:35:12.519798 1990 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-d76d9544f-5898k" podStartSLOduration=1.392167212 podStartE2EDuration="4.519772162s" podCreationTimestamp="2025-11-01 00:35:08 +0000 UTC" firstStartedPulling="2025-11-01 00:35:08.834686832 +0000 UTC m=+25.743732894" lastFinishedPulling="2025-11-01 00:35:11.962291792 +0000 UTC m=+28.871337844" observedRunningTime="2025-11-01 00:35:12.516718099 +0000 UTC m=+29.425764181" watchObservedRunningTime="2025-11-01 00:35:12.519772162 +0000 UTC m=+29.428818224" Nov 1 00:35:13.346132 kubelet[1990]: I1101 00:35:13.346075 1990 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:35:13.346687 kubelet[1990]: E1101 00:35:13.346585 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:13.388848 kubelet[1990]: E1101 00:35:13.388754 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.389162 kubelet[1990]: W1101 00:35:13.388830 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.389162 kubelet[1990]: E1101 00:35:13.388974 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.389580 kubelet[1990]: E1101 00:35:13.389545 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.389580 kubelet[1990]: W1101 00:35:13.389569 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.389728 kubelet[1990]: E1101 00:35:13.389583 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.389947 kubelet[1990]: E1101 00:35:13.389883 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.389947 kubelet[1990]: W1101 00:35:13.389902 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.390046 kubelet[1990]: E1101 00:35:13.389953 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.390226 kubelet[1990]: E1101 00:35:13.390188 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.390226 kubelet[1990]: W1101 00:35:13.390213 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.390226 kubelet[1990]: E1101 00:35:13.390227 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.392077 kubelet[1990]: E1101 00:35:13.392056 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.392077 kubelet[1990]: W1101 00:35:13.392072 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.392153 kubelet[1990]: E1101 00:35:13.392083 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.392381 kubelet[1990]: E1101 00:35:13.392363 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.392381 kubelet[1990]: W1101 00:35:13.392373 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.392475 kubelet[1990]: E1101 00:35:13.392382 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.392588 kubelet[1990]: E1101 00:35:13.392572 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.392588 kubelet[1990]: W1101 00:35:13.392582 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.392680 kubelet[1990]: E1101 00:35:13.392591 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.392833 kubelet[1990]: E1101 00:35:13.392803 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.392833 kubelet[1990]: W1101 00:35:13.392828 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.393022 kubelet[1990]: E1101 00:35:13.392840 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.393200 kubelet[1990]: E1101 00:35:13.393177 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.393200 kubelet[1990]: W1101 00:35:13.393189 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.393200 kubelet[1990]: E1101 00:35:13.393198 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.393467 kubelet[1990]: E1101 00:35:13.393450 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.393525 kubelet[1990]: W1101 00:35:13.393467 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.393525 kubelet[1990]: E1101 00:35:13.393484 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.393799 kubelet[1990]: E1101 00:35:13.393764 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.393799 kubelet[1990]: W1101 00:35:13.393786 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.393964 kubelet[1990]: E1101 00:35:13.393803 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.394157 kubelet[1990]: E1101 00:35:13.394140 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.394157 kubelet[1990]: W1101 00:35:13.394153 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.394222 kubelet[1990]: E1101 00:35:13.394163 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.394416 kubelet[1990]: E1101 00:35:13.394388 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.394416 kubelet[1990]: W1101 00:35:13.394400 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.394416 kubelet[1990]: E1101 00:35:13.394413 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.394677 kubelet[1990]: E1101 00:35:13.394646 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.394677 kubelet[1990]: W1101 00:35:13.394670 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.394792 kubelet[1990]: E1101 00:35:13.394683 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.395059 kubelet[1990]: E1101 00:35:13.395031 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.395059 kubelet[1990]: W1101 00:35:13.395049 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.395173 kubelet[1990]: E1101 00:35:13.395074 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.395481 kubelet[1990]: E1101 00:35:13.395450 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.395481 kubelet[1990]: W1101 00:35:13.395469 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.395481 kubelet[1990]: E1101 00:35:13.395479 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.395832 kubelet[1990]: E1101 00:35:13.395800 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.395832 kubelet[1990]: W1101 00:35:13.395824 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.396050 kubelet[1990]: E1101 00:35:13.395850 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.396443 kubelet[1990]: E1101 00:35:13.396384 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.396443 kubelet[1990]: W1101 00:35:13.396427 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.396539 kubelet[1990]: E1101 00:35:13.396452 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.396736 kubelet[1990]: E1101 00:35:13.396709 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.396736 kubelet[1990]: W1101 00:35:13.396721 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.396736 kubelet[1990]: E1101 00:35:13.396733 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.396988 kubelet[1990]: E1101 00:35:13.396972 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.396988 kubelet[1990]: W1101 00:35:13.396986 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.397076 kubelet[1990]: E1101 00:35:13.397005 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.397312 kubelet[1990]: E1101 00:35:13.397294 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.397312 kubelet[1990]: W1101 00:35:13.397305 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.397312 kubelet[1990]: E1101 00:35:13.397313 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.397516 kubelet[1990]: E1101 00:35:13.397499 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.397516 kubelet[1990]: W1101 00:35:13.397509 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.397516 kubelet[1990]: E1101 00:35:13.397516 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.397780 kubelet[1990]: E1101 00:35:13.397751 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.397780 kubelet[1990]: W1101 00:35:13.397768 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.397886 kubelet[1990]: E1101 00:35:13.397780 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.398108 kubelet[1990]: E1101 00:35:13.398070 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.398108 kubelet[1990]: W1101 00:35:13.398096 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.398187 kubelet[1990]: E1101 00:35:13.398114 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.398352 kubelet[1990]: E1101 00:35:13.398336 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.398352 kubelet[1990]: W1101 00:35:13.398349 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.398409 kubelet[1990]: E1101 00:35:13.398360 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.398668 kubelet[1990]: E1101 00:35:13.398628 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.398668 kubelet[1990]: W1101 00:35:13.398642 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.398776 kubelet[1990]: E1101 00:35:13.398679 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.399342 kubelet[1990]: E1101 00:35:13.399293 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.399477 kubelet[1990]: W1101 00:35:13.399341 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.399477 kubelet[1990]: E1101 00:35:13.399431 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.400145 kubelet[1990]: E1101 00:35:13.400114 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.400145 kubelet[1990]: W1101 00:35:13.400143 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.400307 kubelet[1990]: E1101 00:35:13.400158 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.400798 kubelet[1990]: E1101 00:35:13.400767 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.400798 kubelet[1990]: W1101 00:35:13.400798 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.400942 kubelet[1990]: E1101 00:35:13.400821 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.401169 kubelet[1990]: E1101 00:35:13.401148 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.401169 kubelet[1990]: W1101 00:35:13.401163 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.401263 kubelet[1990]: E1101 00:35:13.401176 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.401584 kubelet[1990]: E1101 00:35:13.401553 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.401584 kubelet[1990]: W1101 00:35:13.401582 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.401754 kubelet[1990]: E1101 00:35:13.401618 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.401993 kubelet[1990]: E1101 00:35:13.401975 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.401993 kubelet[1990]: W1101 00:35:13.401988 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.402082 kubelet[1990]: E1101 00:35:13.401999 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:13.402648 kubelet[1990]: E1101 00:35:13.402616 1990 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:35:13.402648 kubelet[1990]: W1101 00:35:13.402635 1990 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:35:13.402823 kubelet[1990]: E1101 00:35:13.402675 1990 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:35:14.282185 kubelet[1990]: E1101 00:35:14.282010 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:14.734523 env[1201]: time="2025-11-01T00:35:14.734435359Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:14.737560 env[1201]: time="2025-11-01T00:35:14.737462651Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:14.739082 env[1201]: time="2025-11-01T00:35:14.739020692Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:14.741031 env[1201]: time="2025-11-01T00:35:14.740977609Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:14.741543 env[1201]: time="2025-11-01T00:35:14.741473381Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5\"" Nov 1 00:35:14.747495 env[1201]: time="2025-11-01T00:35:14.747441397Z" level=info msg="CreateContainer within sandbox \"1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:35:14.764305 env[1201]: time="2025-11-01T00:35:14.764245006Z" level=info msg="CreateContainer within sandbox \"1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"061b0ccfc547856469c6fc50d95d7c44aadb141822a47e42433a7ac8debbb1e2\"" Nov 1 00:35:14.764671 env[1201]: time="2025-11-01T00:35:14.764624354Z" level=info msg="StartContainer for \"061b0ccfc547856469c6fc50d95d7c44aadb141822a47e42433a7ac8debbb1e2\"" Nov 1 00:35:14.785760 systemd[1]: Started cri-containerd-061b0ccfc547856469c6fc50d95d7c44aadb141822a47e42433a7ac8debbb1e2.scope. Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f700c9752f8 items=0 ppid=2544 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:14.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036316230636366633534373835363436396336666335306439356437 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit: BPF prog-id=134 op=LOAD Nov 1 00:35:14.815000 audit[2709]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024ef8 items=0 ppid=2544 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:14.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036316230636366633534373835363436396336666335306439356437 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.815000 audit: BPF prog-id=135 op=LOAD Nov 1 00:35:14.815000 audit[2709]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024f48 items=0 ppid=2544 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:14.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036316230636366633534373835363436396336666335306439356437 Nov 1 00:35:14.816000 audit: BPF prog-id=135 op=UNLOAD Nov 1 00:35:14.816000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { perfmon } for pid=2709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit[2709]: AVC avc: denied { bpf } for pid=2709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:14.816000 audit: BPF prog-id=136 op=LOAD Nov 1 00:35:14.816000 audit[2709]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000024fd8 items=0 ppid=2544 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:14.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036316230636366633534373835363436396336666335306439356437 Nov 1 00:35:14.833585 env[1201]: time="2025-11-01T00:35:14.833515546Z" level=info msg="StartContainer for \"061b0ccfc547856469c6fc50d95d7c44aadb141822a47e42433a7ac8debbb1e2\" returns successfully" Nov 1 00:35:14.842115 systemd[1]: cri-containerd-061b0ccfc547856469c6fc50d95d7c44aadb141822a47e42433a7ac8debbb1e2.scope: Deactivated successfully. Nov 1 00:35:14.848000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:35:14.865534 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-061b0ccfc547856469c6fc50d95d7c44aadb141822a47e42433a7ac8debbb1e2-rootfs.mount: Deactivated successfully. Nov 1 00:35:15.348892 env[1201]: time="2025-11-01T00:35:15.348818695Z" level=info msg="shim disconnected" id=061b0ccfc547856469c6fc50d95d7c44aadb141822a47e42433a7ac8debbb1e2 Nov 1 00:35:15.349363 env[1201]: time="2025-11-01T00:35:15.349336098Z" level=warning msg="cleaning up after shim disconnected" id=061b0ccfc547856469c6fc50d95d7c44aadb141822a47e42433a7ac8debbb1e2 namespace=k8s.io Nov 1 00:35:15.349460 env[1201]: time="2025-11-01T00:35:15.349437383Z" level=info msg="cleaning up dead shim" Nov 1 00:35:15.353735 kubelet[1990]: E1101 00:35:15.353673 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:15.359709 env[1201]: time="2025-11-01T00:35:15.359634906Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:35:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2748 runtime=io.containerd.runc.v2\n" Nov 1 00:35:16.271901 kubelet[1990]: E1101 00:35:16.271813 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:16.356412 kubelet[1990]: E1101 00:35:16.356377 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:16.357267 env[1201]: time="2025-11-01T00:35:16.357230569Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:35:18.272271 kubelet[1990]: E1101 00:35:18.272184 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:20.271473 kubelet[1990]: E1101 00:35:20.271393 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:21.315681 env[1201]: time="2025-11-01T00:35:21.315604938Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:21.319353 env[1201]: time="2025-11-01T00:35:21.319295376Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:21.321998 env[1201]: time="2025-11-01T00:35:21.321939797Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:21.325320 env[1201]: time="2025-11-01T00:35:21.325272247Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:21.325890 env[1201]: time="2025-11-01T00:35:21.325855556Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd\"" Nov 1 00:35:21.331747 env[1201]: time="2025-11-01T00:35:21.331683241Z" level=info msg="CreateContainer within sandbox \"1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:35:21.353445 env[1201]: time="2025-11-01T00:35:21.353367847Z" level=info msg="CreateContainer within sandbox \"1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"b17e57d87892b93c588ff6317e0f038e29ddf211421ed64c07123a9568cd0c68\"" Nov 1 00:35:21.354115 env[1201]: time="2025-11-01T00:35:21.354075644Z" level=info msg="StartContainer for \"b17e57d87892b93c588ff6317e0f038e29ddf211421ed64c07123a9568cd0c68\"" Nov 1 00:35:21.376444 systemd[1]: Started cri-containerd-b17e57d87892b93c588ff6317e0f038e29ddf211421ed64c07123a9568cd0c68.scope. Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.416858 kernel: kauditd_printk_skb: 91 callbacks suppressed Nov 1 00:35:21.416948 kernel: audit: type=1400 audit(1761957321.413:991): avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fca203c4198 items=0 ppid=2544 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:21.430558 kernel: audit: type=1300 audit(1761957321.413:991): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fca203c4198 items=0 ppid=2544 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:21.430664 kernel: audit: type=1327 audit(1761957321.413:991): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376535376438373839326239336335383866663633313765306630 Nov 1 00:35:21.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376535376438373839326239336335383866663633313765306630 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.442612 kernel: audit: type=1400 audit(1761957321.413:992): avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.442714 kernel: audit: type=1400 audit(1761957321.413:992): avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.447447 kernel: audit: type=1400 audit(1761957321.413:992): avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.457371 kernel: audit: type=1400 audit(1761957321.413:992): avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.457536 kernel: audit: type=1400 audit(1761957321.413:992): avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.468456 kernel: audit: type=1400 audit(1761957321.413:992): avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.468574 kernel: audit: type=1400 audit(1761957321.413:992): avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.413000 audit: BPF prog-id=137 op=LOAD Nov 1 00:35:21.413000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003a66a8 items=0 ppid=2544 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:21.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376535376438373839326239336335383866663633313765306630 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.420000 audit: BPF prog-id=138 op=LOAD Nov 1 00:35:21.420000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003a66f8 items=0 ppid=2544 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:21.420000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376535376438373839326239336335383866663633313765306630 Nov 1 00:35:21.435000 audit: BPF prog-id=138 op=UNLOAD Nov 1 00:35:21.435000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { perfmon } for pid=2775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit[2775]: AVC avc: denied { bpf } for pid=2775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:21.435000 audit: BPF prog-id=139 op=LOAD Nov 1 00:35:21.435000 audit[2775]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003a6788 items=0 ppid=2544 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:21.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376535376438373839326239336335383866663633313765306630 Nov 1 00:35:21.699030 env[1201]: time="2025-11-01T00:35:21.698836217Z" level=info msg="StartContainer for \"b17e57d87892b93c588ff6317e0f038e29ddf211421ed64c07123a9568cd0c68\" returns successfully" Nov 1 00:35:22.272238 kubelet[1990]: E1101 00:35:22.272145 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:22.373724 kubelet[1990]: E1101 00:35:22.373663 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:22.939545 env[1201]: time="2025-11-01T00:35:22.939471245Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: failed to load CNI config list file /etc/cni/net.d/10-calico.conflist: error parsing configuration list: unexpected end of JSON input: invalid cni config: failed to load cni config" Nov 1 00:35:22.941405 systemd[1]: cri-containerd-b17e57d87892b93c588ff6317e0f038e29ddf211421ed64c07123a9568cd0c68.scope: Deactivated successfully. Nov 1 00:35:22.945000 audit: BPF prog-id=139 op=UNLOAD Nov 1 00:35:22.959722 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b17e57d87892b93c588ff6317e0f038e29ddf211421ed64c07123a9568cd0c68-rootfs.mount: Deactivated successfully. Nov 1 00:35:22.961420 kubelet[1990]: I1101 00:35:22.961373 1990 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:35:22.968617 env[1201]: time="2025-11-01T00:35:22.968521187Z" level=info msg="shim disconnected" id=b17e57d87892b93c588ff6317e0f038e29ddf211421ed64c07123a9568cd0c68 Nov 1 00:35:22.968617 env[1201]: time="2025-11-01T00:35:22.968577014Z" level=warning msg="cleaning up after shim disconnected" id=b17e57d87892b93c588ff6317e0f038e29ddf211421ed64c07123a9568cd0c68 namespace=k8s.io Nov 1 00:35:22.968617 env[1201]: time="2025-11-01T00:35:22.968589618Z" level=info msg="cleaning up dead shim" Nov 1 00:35:22.978212 env[1201]: time="2025-11-01T00:35:22.978150981Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:35:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2819 runtime=io.containerd.runc.v2\n" Nov 1 00:35:23.006748 systemd[1]: Created slice kubepods-besteffort-pod886fc838_29d7_4a3c_9b62_9bab283716d9.slice. Nov 1 00:35:23.014788 systemd[1]: Created slice kubepods-burstable-pod44b8ae81_c16e_4f90_a959_8cda2ee7202f.slice. Nov 1 00:35:23.030729 systemd[1]: Created slice kubepods-besteffort-podc022fb38_382d_4e47_adc4_89eca47cf7eb.slice. Nov 1 00:35:23.039364 systemd[1]: Created slice kubepods-burstable-podafdfe9f8_2e62_4702_90af_61701ab5a832.slice. Nov 1 00:35:23.043078 systemd[1]: Created slice kubepods-besteffort-pod3c5c0a3b_621a_4eab_add8_e3f35847a66f.slice. Nov 1 00:35:23.048164 systemd[1]: Created slice kubepods-besteffort-podabb7cbbb_33fe_47c2_8aa3_e67f4da6073e.slice. Nov 1 00:35:23.054885 systemd[1]: Created slice kubepods-besteffort-pod6be34926_dcd9_40d6_b861_04b1dc9bc2fa.slice. Nov 1 00:35:23.068685 kubelet[1990]: I1101 00:35:23.068626 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cmgnn\" (UniqueName: \"kubernetes.io/projected/c022fb38-382d-4e47-adc4-89eca47cf7eb-kube-api-access-cmgnn\") pod \"calico-apiserver-6f9f45dfb7-ztpvq\" (UID: \"c022fb38-382d-4e47-adc4-89eca47cf7eb\") " pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" Nov 1 00:35:23.068685 kubelet[1990]: I1101 00:35:23.068673 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-whisker-ca-bundle\") pod \"whisker-75755c6cf7-5c66s\" (UID: \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\") " pod="calico-system/whisker-75755c6cf7-5c66s" Nov 1 00:35:23.068685 kubelet[1990]: I1101 00:35:23.068696 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zsrg6\" (UniqueName: \"kubernetes.io/projected/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-kube-api-access-zsrg6\") pod \"whisker-75755c6cf7-5c66s\" (UID: \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\") " pod="calico-system/whisker-75755c6cf7-5c66s" Nov 1 00:35:23.069150 kubelet[1990]: I1101 00:35:23.068717 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/3c5c0a3b-621a-4eab-add8-e3f35847a66f-calico-apiserver-certs\") pod \"calico-apiserver-6f9f45dfb7-swg79\" (UID: \"3c5c0a3b-621a-4eab-add8-e3f35847a66f\") " pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" Nov 1 00:35:23.069150 kubelet[1990]: I1101 00:35:23.068736 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cnxmb\" (UniqueName: \"kubernetes.io/projected/afdfe9f8-2e62-4702-90af-61701ab5a832-kube-api-access-cnxmb\") pod \"coredns-674b8bbfcf-cdp8g\" (UID: \"afdfe9f8-2e62-4702-90af-61701ab5a832\") " pod="kube-system/coredns-674b8bbfcf-cdp8g" Nov 1 00:35:23.069150 kubelet[1990]: I1101 00:35:23.068760 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/44b8ae81-c16e-4f90-a959-8cda2ee7202f-config-volume\") pod \"coredns-674b8bbfcf-76w7h\" (UID: \"44b8ae81-c16e-4f90-a959-8cda2ee7202f\") " pod="kube-system/coredns-674b8bbfcf-76w7h" Nov 1 00:35:23.069150 kubelet[1990]: I1101 00:35:23.068783 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lcrqp\" (UniqueName: \"kubernetes.io/projected/44b8ae81-c16e-4f90-a959-8cda2ee7202f-kube-api-access-lcrqp\") pod \"coredns-674b8bbfcf-76w7h\" (UID: \"44b8ae81-c16e-4f90-a959-8cda2ee7202f\") " pod="kube-system/coredns-674b8bbfcf-76w7h" Nov 1 00:35:23.069150 kubelet[1990]: I1101 00:35:23.068815 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-whisker-backend-key-pair\") pod \"whisker-75755c6cf7-5c66s\" (UID: \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\") " pod="calico-system/whisker-75755c6cf7-5c66s" Nov 1 00:35:23.069418 kubelet[1990]: I1101 00:35:23.068836 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gxdl6\" (UniqueName: \"kubernetes.io/projected/3c5c0a3b-621a-4eab-add8-e3f35847a66f-kube-api-access-gxdl6\") pod \"calico-apiserver-6f9f45dfb7-swg79\" (UID: \"3c5c0a3b-621a-4eab-add8-e3f35847a66f\") " pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" Nov 1 00:35:23.069418 kubelet[1990]: I1101 00:35:23.068854 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6be34926-dcd9-40d6-b861-04b1dc9bc2fa-goldmane-ca-bundle\") pod \"goldmane-666569f655-r67dj\" (UID: \"6be34926-dcd9-40d6-b861-04b1dc9bc2fa\") " pod="calico-system/goldmane-666569f655-r67dj" Nov 1 00:35:23.069418 kubelet[1990]: I1101 00:35:23.068873 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c022fb38-382d-4e47-adc4-89eca47cf7eb-calico-apiserver-certs\") pod \"calico-apiserver-6f9f45dfb7-ztpvq\" (UID: \"c022fb38-382d-4e47-adc4-89eca47cf7eb\") " pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" Nov 1 00:35:23.069418 kubelet[1990]: I1101 00:35:23.068896 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/886fc838-29d7-4a3c-9b62-9bab283716d9-tigera-ca-bundle\") pod \"calico-kube-controllers-5dcb8b9f76-sszbv\" (UID: \"886fc838-29d7-4a3c-9b62-9bab283716d9\") " pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" Nov 1 00:35:23.069418 kubelet[1990]: I1101 00:35:23.068933 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t2tjv\" (UniqueName: \"kubernetes.io/projected/886fc838-29d7-4a3c-9b62-9bab283716d9-kube-api-access-t2tjv\") pod \"calico-kube-controllers-5dcb8b9f76-sszbv\" (UID: \"886fc838-29d7-4a3c-9b62-9bab283716d9\") " pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" Nov 1 00:35:23.069591 kubelet[1990]: I1101 00:35:23.068953 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/afdfe9f8-2e62-4702-90af-61701ab5a832-config-volume\") pod \"coredns-674b8bbfcf-cdp8g\" (UID: \"afdfe9f8-2e62-4702-90af-61701ab5a832\") " pod="kube-system/coredns-674b8bbfcf-cdp8g" Nov 1 00:35:23.069591 kubelet[1990]: I1101 00:35:23.068975 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/6be34926-dcd9-40d6-b861-04b1dc9bc2fa-goldmane-key-pair\") pod \"goldmane-666569f655-r67dj\" (UID: \"6be34926-dcd9-40d6-b861-04b1dc9bc2fa\") " pod="calico-system/goldmane-666569f655-r67dj" Nov 1 00:35:23.069591 kubelet[1990]: I1101 00:35:23.068996 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/6be34926-dcd9-40d6-b861-04b1dc9bc2fa-config\") pod \"goldmane-666569f655-r67dj\" (UID: \"6be34926-dcd9-40d6-b861-04b1dc9bc2fa\") " pod="calico-system/goldmane-666569f655-r67dj" Nov 1 00:35:23.069591 kubelet[1990]: I1101 00:35:23.069018 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7bjpr\" (UniqueName: \"kubernetes.io/projected/6be34926-dcd9-40d6-b861-04b1dc9bc2fa-kube-api-access-7bjpr\") pod \"goldmane-666569f655-r67dj\" (UID: \"6be34926-dcd9-40d6-b861-04b1dc9bc2fa\") " pod="calico-system/goldmane-666569f655-r67dj" Nov 1 00:35:23.311537 env[1201]: time="2025-11-01T00:35:23.311487868Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5dcb8b9f76-sszbv,Uid:886fc838-29d7-4a3c-9b62-9bab283716d9,Namespace:calico-system,Attempt:0,}" Nov 1 00:35:23.322975 kubelet[1990]: E1101 00:35:23.322895 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:23.323560 env[1201]: time="2025-11-01T00:35:23.323514625Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-76w7h,Uid:44b8ae81-c16e-4f90-a959-8cda2ee7202f,Namespace:kube-system,Attempt:0,}" Nov 1 00:35:23.335880 env[1201]: time="2025-11-01T00:35:23.335821831Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f9f45dfb7-ztpvq,Uid:c022fb38-382d-4e47-adc4-89eca47cf7eb,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:35:23.342198 kubelet[1990]: E1101 00:35:23.342156 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:23.342771 env[1201]: time="2025-11-01T00:35:23.342696181Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-cdp8g,Uid:afdfe9f8-2e62-4702-90af-61701ab5a832,Namespace:kube-system,Attempt:0,}" Nov 1 00:35:23.345911 env[1201]: time="2025-11-01T00:35:23.345848955Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f9f45dfb7-swg79,Uid:3c5c0a3b-621a-4eab-add8-e3f35847a66f,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:35:23.353319 env[1201]: time="2025-11-01T00:35:23.353292015Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-75755c6cf7-5c66s,Uid:abb7cbbb-33fe-47c2-8aa3-e67f4da6073e,Namespace:calico-system,Attempt:0,}" Nov 1 00:35:23.358958 env[1201]: time="2025-11-01T00:35:23.358897923Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-r67dj,Uid:6be34926-dcd9-40d6-b861-04b1dc9bc2fa,Namespace:calico-system,Attempt:0,}" Nov 1 00:35:23.377949 kubelet[1990]: E1101 00:35:23.376953 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:23.378122 env[1201]: time="2025-11-01T00:35:23.377619065Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:35:23.759732 kubelet[1990]: I1101 00:35:23.759604 1990 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:35:23.760096 kubelet[1990]: E1101 00:35:23.760069 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:23.771609 env[1201]: time="2025-11-01T00:35:23.771412724Z" level=error msg="Failed to destroy network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.772012 env[1201]: time="2025-11-01T00:35:23.771982196Z" level=error msg="encountered an error cleaning up failed sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.772088 env[1201]: time="2025-11-01T00:35:23.772038895Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f9f45dfb7-ztpvq,Uid:c022fb38-382d-4e47-adc4-89eca47cf7eb,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.772202 env[1201]: time="2025-11-01T00:35:23.772177811Z" level=error msg="Failed to destroy network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.772453 env[1201]: time="2025-11-01T00:35:23.772426107Z" level=error msg="encountered an error cleaning up failed sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.772501 env[1201]: time="2025-11-01T00:35:23.772465111Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f9f45dfb7-swg79,Uid:3c5c0a3b-621a-4eab-add8-e3f35847a66f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.772684 kubelet[1990]: E1101 00:35:23.772639 1990 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.772755 kubelet[1990]: E1101 00:35:23.772674 1990 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.772755 kubelet[1990]: E1101 00:35:23.772717 1990 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" Nov 1 00:35:23.772755 kubelet[1990]: E1101 00:35:23.772742 1990 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" Nov 1 00:35:23.772877 kubelet[1990]: E1101 00:35:23.772764 1990 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" Nov 1 00:35:23.772877 kubelet[1990]: E1101 00:35:23.772792 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6f9f45dfb7-swg79_calico-apiserver(3c5c0a3b-621a-4eab-add8-e3f35847a66f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6f9f45dfb7-swg79_calico-apiserver(3c5c0a3b-621a-4eab-add8-e3f35847a66f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:35:23.772877 kubelet[1990]: E1101 00:35:23.772798 1990 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" Nov 1 00:35:23.773035 kubelet[1990]: E1101 00:35:23.772849 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6f9f45dfb7-ztpvq_calico-apiserver(c022fb38-382d-4e47-adc4-89eca47cf7eb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6f9f45dfb7-ztpvq_calico-apiserver(c022fb38-382d-4e47-adc4-89eca47cf7eb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:35:23.791744 env[1201]: time="2025-11-01T00:35:23.790169565Z" level=error msg="Failed to destroy network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.790000 audit[3048]: NETFILTER_CFG table=filter:103 family=2 entries=21 op=nft_register_rule pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:23.790000 audit[3048]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe9537b270 a2=0 a3=7ffe9537b25c items=0 ppid=2104 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:23.790000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:23.793075 env[1201]: time="2025-11-01T00:35:23.793032965Z" level=error msg="encountered an error cleaning up failed sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.793211 env[1201]: time="2025-11-01T00:35:23.793172643Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5dcb8b9f76-sszbv,Uid:886fc838-29d7-4a3c-9b62-9bab283716d9,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.793885 kubelet[1990]: E1101 00:35:23.793669 1990 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.793885 kubelet[1990]: E1101 00:35:23.793733 1990 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" Nov 1 00:35:23.793885 kubelet[1990]: E1101 00:35:23.793757 1990 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" Nov 1 00:35:23.794236 kubelet[1990]: E1101 00:35:23.793828 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5dcb8b9f76-sszbv_calico-system(886fc838-29d7-4a3c-9b62-9bab283716d9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5dcb8b9f76-sszbv_calico-system(886fc838-29d7-4a3c-9b62-9bab283716d9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:35:23.794000 audit[3048]: NETFILTER_CFG table=nat:104 family=2 entries=19 op=nft_register_chain pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:23.794000 audit[3048]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe9537b270 a2=0 a3=7ffe9537b25c items=0 ppid=2104 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:23.794000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:23.821296 env[1201]: time="2025-11-01T00:35:23.821193525Z" level=error msg="Failed to destroy network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.821681 env[1201]: time="2025-11-01T00:35:23.821645612Z" level=error msg="encountered an error cleaning up failed sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.821780 env[1201]: time="2025-11-01T00:35:23.821704074Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-76w7h,Uid:44b8ae81-c16e-4f90-a959-8cda2ee7202f,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.822100 kubelet[1990]: E1101 00:35:23.822015 1990 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.822188 kubelet[1990]: E1101 00:35:23.822119 1990 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-76w7h" Nov 1 00:35:23.822188 kubelet[1990]: E1101 00:35:23.822154 1990 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-76w7h" Nov 1 00:35:23.822279 kubelet[1990]: E1101 00:35:23.822216 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-76w7h_kube-system(44b8ae81-c16e-4f90-a959-8cda2ee7202f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-76w7h_kube-system(44b8ae81-c16e-4f90-a959-8cda2ee7202f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-76w7h" podUID="44b8ae81-c16e-4f90-a959-8cda2ee7202f" Nov 1 00:35:23.822756 env[1201]: time="2025-11-01T00:35:23.822710544Z" level=error msg="Failed to destroy network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.823798 env[1201]: time="2025-11-01T00:35:23.823759845Z" level=error msg="encountered an error cleaning up failed sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.823995 env[1201]: time="2025-11-01T00:35:23.823955580Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-cdp8g,Uid:afdfe9f8-2e62-4702-90af-61701ab5a832,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.824469 kubelet[1990]: E1101 00:35:23.824280 1990 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.824469 kubelet[1990]: E1101 00:35:23.824340 1990 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-cdp8g" Nov 1 00:35:23.824469 kubelet[1990]: E1101 00:35:23.824362 1990 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-cdp8g" Nov 1 00:35:23.824661 kubelet[1990]: E1101 00:35:23.824411 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-cdp8g_kube-system(afdfe9f8-2e62-4702-90af-61701ab5a832)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-cdp8g_kube-system(afdfe9f8-2e62-4702-90af-61701ab5a832)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-cdp8g" podUID="afdfe9f8-2e62-4702-90af-61701ab5a832" Nov 1 00:35:23.826629 env[1201]: time="2025-11-01T00:35:23.826574962Z" level=error msg="Failed to destroy network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.827059 env[1201]: time="2025-11-01T00:35:23.827019064Z" level=error msg="encountered an error cleaning up failed sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.827151 env[1201]: time="2025-11-01T00:35:23.827085331Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-75755c6cf7-5c66s,Uid:abb7cbbb-33fe-47c2-8aa3-e67f4da6073e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.827444 kubelet[1990]: E1101 00:35:23.827400 1990 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.827535 kubelet[1990]: E1101 00:35:23.827473 1990 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-75755c6cf7-5c66s" Nov 1 00:35:23.827535 kubelet[1990]: E1101 00:35:23.827504 1990 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-75755c6cf7-5c66s" Nov 1 00:35:23.827623 kubelet[1990]: E1101 00:35:23.827569 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-75755c6cf7-5c66s_calico-system(abb7cbbb-33fe-47c2-8aa3-e67f4da6073e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-75755c6cf7-5c66s_calico-system(abb7cbbb-33fe-47c2-8aa3-e67f4da6073e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-75755c6cf7-5c66s" podUID="abb7cbbb-33fe-47c2-8aa3-e67f4da6073e" Nov 1 00:35:23.835188 env[1201]: time="2025-11-01T00:35:23.835087934Z" level=error msg="Failed to destroy network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.835730 env[1201]: time="2025-11-01T00:35:23.835684407Z" level=error msg="encountered an error cleaning up failed sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.835788 env[1201]: time="2025-11-01T00:35:23.835763669Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-r67dj,Uid:6be34926-dcd9-40d6-b861-04b1dc9bc2fa,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.836093 kubelet[1990]: E1101 00:35:23.836037 1990 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:23.836186 kubelet[1990]: E1101 00:35:23.836142 1990 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-r67dj" Nov 1 00:35:23.836186 kubelet[1990]: E1101 00:35:23.836166 1990 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-r67dj" Nov 1 00:35:23.836304 kubelet[1990]: E1101 00:35:23.836221 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-r67dj_calico-system(6be34926-dcd9-40d6-b861-04b1dc9bc2fa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-r67dj_calico-system(6be34926-dcd9-40d6-b861-04b1dc9bc2fa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:35:24.276883 systemd[1]: Created slice kubepods-besteffort-pod4910ecde_2ad2_41de_b965_b4403e24ea7b.slice. Nov 1 00:35:24.279386 env[1201]: time="2025-11-01T00:35:24.279307153Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2k2fp,Uid:4910ecde-2ad2-41de-b965-b4403e24ea7b,Namespace:calico-system,Attempt:0,}" Nov 1 00:35:24.386801 kubelet[1990]: I1101 00:35:24.386769 1990 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:24.387607 env[1201]: time="2025-11-01T00:35:24.387568228Z" level=info msg="StopPodSandbox for \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\"" Nov 1 00:35:24.391872 kubelet[1990]: I1101 00:35:24.391805 1990 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:24.392436 env[1201]: time="2025-11-01T00:35:24.392392917Z" level=info msg="StopPodSandbox for \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\"" Nov 1 00:35:24.395780 kubelet[1990]: I1101 00:35:24.395016 1990 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:24.396208 env[1201]: time="2025-11-01T00:35:24.396170758Z" level=info msg="StopPodSandbox for \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\"" Nov 1 00:35:24.405959 kubelet[1990]: I1101 00:35:24.405331 1990 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:24.406268 env[1201]: time="2025-11-01T00:35:24.406215624Z" level=info msg="StopPodSandbox for \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\"" Nov 1 00:35:24.406974 kubelet[1990]: I1101 00:35:24.406491 1990 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:24.407209 env[1201]: time="2025-11-01T00:35:24.407074290Z" level=info msg="StopPodSandbox for \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\"" Nov 1 00:35:24.411344 kubelet[1990]: I1101 00:35:24.410800 1990 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:24.411703 env[1201]: time="2025-11-01T00:35:24.411663248Z" level=info msg="StopPodSandbox for \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\"" Nov 1 00:35:24.416262 kubelet[1990]: I1101 00:35:24.415789 1990 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:24.416932 kubelet[1990]: E1101 00:35:24.416894 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:24.417960 env[1201]: time="2025-11-01T00:35:24.417905825Z" level=info msg="StopPodSandbox for \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\"" Nov 1 00:35:24.439835 env[1201]: time="2025-11-01T00:35:24.439729881Z" level=error msg="StopPodSandbox for \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\" failed" error="failed to destroy network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.440149 kubelet[1990]: E1101 00:35:24.440093 1990 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:24.440254 kubelet[1990]: E1101 00:35:24.440183 1990 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520"} Nov 1 00:35:24.440301 kubelet[1990]: E1101 00:35:24.440272 1990 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"886fc838-29d7-4a3c-9b62-9bab283716d9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:35:24.440389 kubelet[1990]: E1101 00:35:24.440310 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"886fc838-29d7-4a3c-9b62-9bab283716d9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:35:24.487123 env[1201]: time="2025-11-01T00:35:24.487026248Z" level=error msg="StopPodSandbox for \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\" failed" error="failed to destroy network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.487678 kubelet[1990]: E1101 00:35:24.487611 1990 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:24.487758 kubelet[1990]: E1101 00:35:24.487683 1990 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40"} Nov 1 00:35:24.487758 kubelet[1990]: E1101 00:35:24.487728 1990 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:35:24.487890 kubelet[1990]: E1101 00:35:24.487763 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-75755c6cf7-5c66s" podUID="abb7cbbb-33fe-47c2-8aa3-e67f4da6073e" Nov 1 00:35:24.506238 env[1201]: time="2025-11-01T00:35:24.506153504Z" level=error msg="StopPodSandbox for \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\" failed" error="failed to destroy network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.506654 env[1201]: time="2025-11-01T00:35:24.506372393Z" level=error msg="StopPodSandbox for \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\" failed" error="failed to destroy network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.506710 kubelet[1990]: E1101 00:35:24.506550 1990 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:24.506710 kubelet[1990]: E1101 00:35:24.506626 1990 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c"} Nov 1 00:35:24.506710 kubelet[1990]: E1101 00:35:24.506677 1990 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6be34926-dcd9-40d6-b861-04b1dc9bc2fa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:35:24.506907 kubelet[1990]: E1101 00:35:24.506712 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6be34926-dcd9-40d6-b861-04b1dc9bc2fa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:35:24.506907 kubelet[1990]: E1101 00:35:24.506759 1990 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:24.506907 kubelet[1990]: E1101 00:35:24.506787 1990 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c"} Nov 1 00:35:24.506907 kubelet[1990]: E1101 00:35:24.506828 1990 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c022fb38-382d-4e47-adc4-89eca47cf7eb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:35:24.507199 kubelet[1990]: E1101 00:35:24.506859 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c022fb38-382d-4e47-adc4-89eca47cf7eb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:35:24.513983 env[1201]: time="2025-11-01T00:35:24.513892840Z" level=error msg="StopPodSandbox for \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\" failed" error="failed to destroy network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.514465 kubelet[1990]: E1101 00:35:24.514251 1990 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:24.514465 kubelet[1990]: E1101 00:35:24.514331 1990 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591"} Nov 1 00:35:24.514465 kubelet[1990]: E1101 00:35:24.514382 1990 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"afdfe9f8-2e62-4702-90af-61701ab5a832\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:35:24.514465 kubelet[1990]: E1101 00:35:24.514419 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"afdfe9f8-2e62-4702-90af-61701ab5a832\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-cdp8g" podUID="afdfe9f8-2e62-4702-90af-61701ab5a832" Nov 1 00:35:24.515378 env[1201]: time="2025-11-01T00:35:24.515335115Z" level=error msg="Failed to destroy network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.515851 env[1201]: time="2025-11-01T00:35:24.515797140Z" level=error msg="encountered an error cleaning up failed sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.516018 env[1201]: time="2025-11-01T00:35:24.515980051Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2k2fp,Uid:4910ecde-2ad2-41de-b965-b4403e24ea7b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.517418 kubelet[1990]: E1101 00:35:24.516221 1990 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.517418 kubelet[1990]: E1101 00:35:24.516267 1990 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-2k2fp" Nov 1 00:35:24.517418 kubelet[1990]: E1101 00:35:24.516289 1990 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-2k2fp" Nov 1 00:35:24.517566 kubelet[1990]: E1101 00:35:24.516344 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-2k2fp_calico-system(4910ecde-2ad2-41de-b965-b4403e24ea7b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-2k2fp_calico-system(4910ecde-2ad2-41de-b965-b4403e24ea7b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:24.518522 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b-shm.mount: Deactivated successfully. Nov 1 00:35:24.527571 env[1201]: time="2025-11-01T00:35:24.527421234Z" level=error msg="StopPodSandbox for \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\" failed" error="failed to destroy network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.528203 kubelet[1990]: E1101 00:35:24.528005 1990 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:24.528203 kubelet[1990]: E1101 00:35:24.528084 1990 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8"} Nov 1 00:35:24.528203 kubelet[1990]: E1101 00:35:24.528127 1990 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"44b8ae81-c16e-4f90-a959-8cda2ee7202f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:35:24.528203 kubelet[1990]: E1101 00:35:24.528160 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"44b8ae81-c16e-4f90-a959-8cda2ee7202f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-76w7h" podUID="44b8ae81-c16e-4f90-a959-8cda2ee7202f" Nov 1 00:35:24.535211 env[1201]: time="2025-11-01T00:35:24.535143206Z" level=error msg="StopPodSandbox for \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\" failed" error="failed to destroy network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:24.535469 kubelet[1990]: E1101 00:35:24.535416 1990 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:24.535535 kubelet[1990]: E1101 00:35:24.535483 1990 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79"} Nov 1 00:35:24.535535 kubelet[1990]: E1101 00:35:24.535526 1990 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3c5c0a3b-621a-4eab-add8-e3f35847a66f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:35:24.535639 kubelet[1990]: E1101 00:35:24.535555 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3c5c0a3b-621a-4eab-add8-e3f35847a66f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:35:25.418413 kubelet[1990]: I1101 00:35:25.418374 1990 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:25.419606 env[1201]: time="2025-11-01T00:35:25.419549373Z" level=info msg="StopPodSandbox for \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\"" Nov 1 00:35:25.453333 env[1201]: time="2025-11-01T00:35:25.453233617Z" level=error msg="StopPodSandbox for \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\" failed" error="failed to destroy network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:35:25.463904 kubelet[1990]: E1101 00:35:25.453692 1990 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:25.463904 kubelet[1990]: E1101 00:35:25.453767 1990 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b"} Nov 1 00:35:25.463904 kubelet[1990]: E1101 00:35:25.453805 1990 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4910ecde-2ad2-41de-b965-b4403e24ea7b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:35:25.463904 kubelet[1990]: E1101 00:35:25.453839 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4910ecde-2ad2-41de-b965-b4403e24ea7b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:29.876113 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4021139460.mount: Deactivated successfully. Nov 1 00:35:31.882552 env[1201]: time="2025-11-01T00:35:31.882448411Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:31.885098 env[1201]: time="2025-11-01T00:35:31.885011460Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:31.886974 env[1201]: time="2025-11-01T00:35:31.886911801Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:31.888823 env[1201]: time="2025-11-01T00:35:31.888789417Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:35:31.889380 env[1201]: time="2025-11-01T00:35:31.889310585Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9\"" Nov 1 00:35:31.902376 env[1201]: time="2025-11-01T00:35:31.902319444Z" level=info msg="CreateContainer within sandbox \"1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:35:31.922774 env[1201]: time="2025-11-01T00:35:31.922710664Z" level=info msg="CreateContainer within sandbox \"1d0c4591a5ede3b3d976a7c03b7ccf1cda507e2db67e7c56d54b4883afe8b6c1\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"ec828fa9345c67b54221cf9ba8741969f282c96b0b999e470fa81425a12269f1\"" Nov 1 00:35:31.923498 env[1201]: time="2025-11-01T00:35:31.923465170Z" level=info msg="StartContainer for \"ec828fa9345c67b54221cf9ba8741969f282c96b0b999e470fa81425a12269f1\"" Nov 1 00:35:31.945601 systemd[1]: Started cri-containerd-ec828fa9345c67b54221cf9ba8741969f282c96b0b999e470fa81425a12269f1.scope. Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.967461 kernel: kauditd_printk_skb: 40 callbacks suppressed Nov 1 00:35:31.967547 kernel: audit: type=1400 audit(1761957331.964:1000): avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f8e0c02f7b8 items=0 ppid=2544 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:31.983578 kernel: audit: type=1300 audit(1761957331.964:1000): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f8e0c02f7b8 items=0 ppid=2544 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:31.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563383238666139333435633637623534323231636639626138373431 Nov 1 00:35:31.992110 kernel: audit: type=1327 audit(1761957331.964:1000): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563383238666139333435633637623534323231636639626138373431 Nov 1 00:35:31.992324 kernel: audit: type=1400 audit(1761957331.964:1001): avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:32.004944 kernel: audit: type=1400 audit(1761957331.964:1001): avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:32.011636 kernel: audit: type=1400 audit(1761957331.964:1001): avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:32.011755 kernel: audit: type=1400 audit(1761957331.964:1001): avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:32.019810 env[1201]: time="2025-11-01T00:35:32.019744862Z" level=info msg="StartContainer for \"ec828fa9345c67b54221cf9ba8741969f282c96b0b999e470fa81425a12269f1\" returns successfully" Nov 1 00:35:32.024421 kernel: audit: type=1400 audit(1761957331.964:1001): avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:32.024536 kernel: audit: type=1400 audit(1761957331.964:1001): avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:32.035292 kernel: audit: type=1400 audit(1761957331.964:1001): avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.964000 audit: BPF prog-id=140 op=LOAD Nov 1 00:35:31.964000 audit[3269]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003cc018 items=0 ppid=2544 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:31.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563383238666139333435633637623534323231636639626138373431 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.972000 audit: BPF prog-id=141 op=LOAD Nov 1 00:35:31.972000 audit[3269]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0003cc068 items=0 ppid=2544 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:31.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563383238666139333435633637623534323231636639626138373431 Nov 1 00:35:31.982000 audit: BPF prog-id=141 op=UNLOAD Nov 1 00:35:31.982000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { perfmon } for pid=3269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit[3269]: AVC avc: denied { bpf } for pid=3269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:31.982000 audit: BPF prog-id=142 op=LOAD Nov 1 00:35:31.982000 audit[3269]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003cc0f8 items=0 ppid=2544 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:31.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563383238666139333435633637623534323231636639626138373431 Nov 1 00:35:32.133198 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:35:32.133433 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:35:32.327055 env[1201]: time="2025-11-01T00:35:32.327009518Z" level=info msg="StopPodSandbox for \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\"" Nov 1 00:35:32.441008 kubelet[1990]: E1101 00:35:32.440961 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.549 [INFO][3330] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.549 [INFO][3330] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" iface="eth0" netns="/var/run/netns/cni-bf11783f-e485-b066-6655-0b495234fe76" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.550 [INFO][3330] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" iface="eth0" netns="/var/run/netns/cni-bf11783f-e485-b066-6655-0b495234fe76" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.550 [INFO][3330] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" iface="eth0" netns="/var/run/netns/cni-bf11783f-e485-b066-6655-0b495234fe76" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.550 [INFO][3330] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.550 [INFO][3330] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.625 [INFO][3339] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.625 [INFO][3339] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.626 [INFO][3339] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.633 [WARNING][3339] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.633 [INFO][3339] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.634 [INFO][3339] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:32.638569 env[1201]: 2025-11-01 00:35:32.636 [INFO][3330] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:32.639239 env[1201]: time="2025-11-01T00:35:32.638639154Z" level=info msg="TearDown network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\" successfully" Nov 1 00:35:32.639239 env[1201]: time="2025-11-01T00:35:32.638692506Z" level=info msg="StopPodSandbox for \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\" returns successfully" Nov 1 00:35:32.745836 kubelet[1990]: I1101 00:35:32.745756 1990 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-whisker-ca-bundle\") pod \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\" (UID: \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\") " Nov 1 00:35:32.745836 kubelet[1990]: I1101 00:35:32.745812 1990 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-zsrg6\" (UniqueName: \"kubernetes.io/projected/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-kube-api-access-zsrg6\") pod \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\" (UID: \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\") " Nov 1 00:35:32.745836 kubelet[1990]: I1101 00:35:32.745849 1990 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-whisker-backend-key-pair\") pod \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\" (UID: \"abb7cbbb-33fe-47c2-8aa3-e67f4da6073e\") " Nov 1 00:35:32.746376 kubelet[1990]: I1101 00:35:32.746336 1990 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "abb7cbbb-33fe-47c2-8aa3-e67f4da6073e" (UID: "abb7cbbb-33fe-47c2-8aa3-e67f4da6073e"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:35:32.750492 kubelet[1990]: I1101 00:35:32.750443 1990 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "abb7cbbb-33fe-47c2-8aa3-e67f4da6073e" (UID: "abb7cbbb-33fe-47c2-8aa3-e67f4da6073e"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:35:32.750854 kubelet[1990]: I1101 00:35:32.750535 1990 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-kube-api-access-zsrg6" (OuterVolumeSpecName: "kube-api-access-zsrg6") pod "abb7cbbb-33fe-47c2-8aa3-e67f4da6073e" (UID: "abb7cbbb-33fe-47c2-8aa3-e67f4da6073e"). InnerVolumeSpecName "kube-api-access-zsrg6". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:35:32.847109 kubelet[1990]: I1101 00:35:32.847026 1990 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Nov 1 00:35:32.847109 kubelet[1990]: I1101 00:35:32.847076 1990 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-zsrg6\" (UniqueName: \"kubernetes.io/projected/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-kube-api-access-zsrg6\") on node \"localhost\" DevicePath \"\"" Nov 1 00:35:32.847109 kubelet[1990]: I1101 00:35:32.847093 1990 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Nov 1 00:35:32.896975 systemd[1]: run-netns-cni\x2dbf11783f\x2de485\x2db066\x2d6655\x2d0b495234fe76.mount: Deactivated successfully. Nov 1 00:35:32.897107 systemd[1]: var-lib-kubelet-pods-abb7cbbb\x2d33fe\x2d47c2\x2d8aa3\x2de67f4da6073e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dzsrg6.mount: Deactivated successfully. Nov 1 00:35:32.897196 systemd[1]: var-lib-kubelet-pods-abb7cbbb\x2d33fe\x2d47c2\x2d8aa3\x2de67f4da6073e-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:35:33.278548 systemd[1]: Removed slice kubepods-besteffort-podabb7cbbb_33fe_47c2_8aa3_e67f4da6073e.slice. Nov 1 00:35:33.337761 systemd[1]: run-containerd-runc-k8s.io-ec828fa9345c67b54221cf9ba8741969f282c96b0b999e470fa81425a12269f1-runc.1C5zST.mount: Deactivated successfully. Nov 1 00:35:33.443397 kubelet[1990]: E1101 00:35:33.443335 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:33.458840 kubelet[1990]: I1101 00:35:33.458761 1990 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-znsr4" podStartSLOduration=2.415032051 podStartE2EDuration="25.458744193s" podCreationTimestamp="2025-11-01 00:35:08 +0000 UTC" firstStartedPulling="2025-11-01 00:35:08.846641962 +0000 UTC m=+25.755688024" lastFinishedPulling="2025-11-01 00:35:31.890354104 +0000 UTC m=+48.799400166" observedRunningTime="2025-11-01 00:35:32.562663876 +0000 UTC m=+49.471709938" watchObservedRunningTime="2025-11-01 00:35:33.458744193 +0000 UTC m=+50.367790255" Nov 1 00:35:33.506564 systemd[1]: Created slice kubepods-besteffort-podad4dfbd7_6d22_4478_98d5_f9dedf24c2a7.slice. Nov 1 00:35:33.552237 kubelet[1990]: I1101 00:35:33.552019 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7-whisker-ca-bundle\") pod \"whisker-fdfb546bf-7b46l\" (UID: \"ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7\") " pod="calico-system/whisker-fdfb546bf-7b46l" Nov 1 00:35:33.552237 kubelet[1990]: I1101 00:35:33.552099 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r2vs8\" (UniqueName: \"kubernetes.io/projected/ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7-kube-api-access-r2vs8\") pod \"whisker-fdfb546bf-7b46l\" (UID: \"ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7\") " pod="calico-system/whisker-fdfb546bf-7b46l" Nov 1 00:35:33.552237 kubelet[1990]: I1101 00:35:33.552191 1990 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7-whisker-backend-key-pair\") pod \"whisker-fdfb546bf-7b46l\" (UID: \"ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7\") " pod="calico-system/whisker-fdfb546bf-7b46l" Nov 1 00:35:33.677000 audit[3477]: AVC avc: denied { write } for pid=3477 comm="tee" name="fd" dev="proc" ino=26216 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:35:33.678000 audit[3480]: AVC avc: denied { write } for pid=3480 comm="tee" name="fd" dev="proc" ino=26706 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:35:33.678000 audit[3480]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffb09cb7ed a2=241 a3=1b6 items=1 ppid=3434 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.678000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:35:33.678000 audit: PATH item=0 name="/dev/fd/63" inode=26699 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:35:33.678000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:35:33.677000 audit[3477]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffecf3d07dd a2=241 a3=1b6 items=1 ppid=3433 pid=3477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.677000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:35:33.677000 audit: PATH item=0 name="/dev/fd/63" inode=26206 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:35:33.677000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:35:33.688000 audit[3501]: AVC avc: denied { write } for pid=3501 comm="tee" name="fd" dev="proc" ino=24308 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:35:33.688000 audit[3501]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc9e7767de a2=241 a3=1b6 items=1 ppid=3445 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.688000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:35:33.688000 audit: PATH item=0 name="/dev/fd/63" inode=26223 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:35:33.688000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:35:33.690000 audit[3503]: AVC avc: denied { write } for pid=3503 comm="tee" name="fd" dev="proc" ino=26231 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:35:33.690000 audit[3503]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc7acbd7ed a2=241 a3=1b6 items=1 ppid=3446 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.690000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:35:33.690000 audit: PATH item=0 name="/dev/fd/63" inode=26224 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:35:33.690000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:35:33.701000 audit[3512]: AVC avc: denied { write } for pid=3512 comm="tee" name="fd" dev="proc" ino=26710 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:35:33.701000 audit[3512]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd774257ef a2=241 a3=1b6 items=1 ppid=3441 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.701000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:35:33.701000 audit: PATH item=0 name="/dev/fd/63" inode=24311 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:35:33.701000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:35:33.720000 audit[3506]: AVC avc: denied { write } for pid=3506 comm="tee" name="fd" dev="proc" ino=25200 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:35:33.720000 audit[3506]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff31ce27ee a2=241 a3=1b6 items=1 ppid=3443 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.720000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:35:33.720000 audit: PATH item=0 name="/dev/fd/63" inode=26228 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:35:33.720000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:35:33.742000 audit[3518]: AVC avc: denied { write } for pid=3518 comm="tee" name="fd" dev="proc" ino=26717 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:35:33.742000 audit[3518]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcc3e3a7ed a2=241 a3=1b6 items=1 ppid=3437 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.742000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:35:33.742000 audit: PATH item=0 name="/dev/fd/63" inode=24312 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:35:33.742000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:35:33.809741 env[1201]: time="2025-11-01T00:35:33.809688928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-fdfb546bf-7b46l,Uid:ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7,Namespace:calico-system,Attempt:0,}" Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.911000 audit: BPF prog-id=143 op=LOAD Nov 1 00:35:33.911000 audit[3555]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf1ec5060 a2=98 a3=1fffffffffffffff items=0 ppid=3436 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.911000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:35:33.912000 audit: BPF prog-id=143 op=UNLOAD Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit: BPF prog-id=144 op=LOAD Nov 1 00:35:33.912000 audit[3555]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf1ec4f40 a2=94 a3=3 items=0 ppid=3436 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.912000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:35:33.912000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { bpf } for pid=3555 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit: BPF prog-id=145 op=LOAD Nov 1 00:35:33.912000 audit[3555]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf1ec4f80 a2=94 a3=7ffcf1ec5160 items=0 ppid=3436 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.912000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:35:33.912000 audit: BPF prog-id=145 op=UNLOAD Nov 1 00:35:33.912000 audit[3555]: AVC avc: denied { perfmon } for pid=3555 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.912000 audit[3555]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffcf1ec5050 a2=50 a3=a000000085 items=0 ppid=3436 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.912000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit: BPF prog-id=146 op=LOAD Nov 1 00:35:33.913000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff66baa80 a2=98 a3=3 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.913000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:33.913000 audit: BPF prog-id=146 op=UNLOAD Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.913000 audit: BPF prog-id=147 op=LOAD Nov 1 00:35:33.913000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffff66ba870 a2=94 a3=54428f items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.913000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:33.914000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:33.914000 audit: BPF prog-id=148 op=LOAD Nov 1 00:35:33.914000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffff66ba8a0 a2=94 a3=2 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:33.914000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:33.914000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit: BPF prog-id=149 op=LOAD Nov 1 00:35:34.030000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffff66ba760 a2=94 a3=1 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.030000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.030000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:35:34.030000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.030000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffff66ba830 a2=50 a3=7ffff66ba910 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.030000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffff66ba770 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffff66ba7a0 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffff66ba6b0 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffff66ba7c0 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffff66ba7a0 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffff66ba790 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffff66ba7c0 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffff66ba7a0 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffff66ba7c0 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffff66ba790 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffff66ba800 a2=28 a3=0 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffff66ba5b0 a2=50 a3=1 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit: BPF prog-id=150 op=LOAD Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffff66ba5b0 a2=94 a3=5 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffff66ba660 a2=50 a3=1 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.038000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.038000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffff66ba780 a2=4 a3=38 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.038000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { confidentiality } for pid=3556 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:35:34.039000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffff66ba7d0 a2=94 a3=6 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.039000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { confidentiality } for pid=3556 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:35:34.039000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffff66b9f80 a2=94 a3=88 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.039000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.039000 audit[3556]: AVC avc: denied { confidentiality } for pid=3556 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:35:34.039000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffff66b9f80 a2=94 a3=88 items=0 ppid=3436 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.039000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit: BPF prog-id=151 op=LOAD Nov 1 00:35:34.046000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd604e61e0 a2=98 a3=1999999999999999 items=0 ppid=3436 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.046000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:35:34.046000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit: BPF prog-id=152 op=LOAD Nov 1 00:35:34.046000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd604e60c0 a2=94 a3=ffff items=0 ppid=3436 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.046000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:35:34.046000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.046000 audit: BPF prog-id=153 op=LOAD Nov 1 00:35:34.046000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd604e6100 a2=94 a3=7ffd604e62e0 items=0 ppid=3436 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.046000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:35:34.046000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:35:34.157000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:34.157000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:34.157000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001917be0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:35:34.157000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:35:34.157000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00139d020 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:35:34.157000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:35:34.179615 systemd-networkd[1032]: vxlan.calico: Link UP Nov 1 00:35:34.179624 systemd-networkd[1032]: vxlan.calico: Gained carrier Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.209000 audit: BPF prog-id=154 op=LOAD Nov 1 00:35:34.209000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2c09be90 a2=98 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.209000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.209000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit: BPF prog-id=155 op=LOAD Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2c09bca0 a2=94 a3=54428f items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit: BPF prog-id=156 op=LOAD Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2c09bcd0 a2=94 a3=2 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2c09bba0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2c09bbd0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2c09bae0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2c09bbf0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2c09bbd0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2c09bbc0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2c09bbf0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2c09bbd0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2c09bbf0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff2c09bbc0 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff2c09bc30 a2=28 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.210000 audit: BPF prog-id=157 op=LOAD Nov 1 00:35:34.210000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff2c09baa0 a2=94 a3=0 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.210000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.210000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff2c09ba90 a2=50 a3=2800 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.211000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff2c09ba90 a2=50 a3=2800 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.211000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit: BPF prog-id=158 op=LOAD Nov 1 00:35:34.211000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff2c09b2b0 a2=94 a3=2 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.211000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.211000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { perfmon } for pid=3584 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit[3584]: AVC avc: denied { bpf } for pid=3584 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.211000 audit: BPF prog-id=159 op=LOAD Nov 1 00:35:34.211000 audit[3584]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff2c09b3b0 a2=94 a3=30 items=0 ppid=3436 pid=3584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.211000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.215000 audit: BPF prog-id=160 op=LOAD Nov 1 00:35:34.215000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdd774a210 a2=98 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.215000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.215000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit: BPF prog-id=161 op=LOAD Nov 1 00:35:34.216000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdd774a000 a2=94 a3=54428f items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.216000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.216000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.216000 audit: BPF prog-id=162 op=LOAD Nov 1 00:35:34.216000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdd774a030 a2=94 a3=2 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.216000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.216000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit: BPF prog-id=163 op=LOAD Nov 1 00:35:34.379000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdd7749ef0 a2=94 a3=1 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.379000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.379000 audit: BPF prog-id=163 op=UNLOAD Nov 1 00:35:34.379000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.379000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdd7749fc0 a2=50 a3=7ffdd774a0a0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.379000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdd7749f00 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdd7749f30 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdd7749e40 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdd7749f50 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdd7749f30 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdd7749f20 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdd7749f50 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdd7749f30 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdd7749f50 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdd7749f20 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdd7749f90 a2=28 a3=0 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdd7749d40 a2=50 a3=1 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit: BPF prog-id=164 op=LOAD Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdd7749d40 a2=94 a3=5 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdd7749df0 a2=50 a3=1 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdd7749f10 a2=4 a3=38 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.388000 audit[3587]: AVC avc: denied { confidentiality } for pid=3587 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:35:34.388000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdd7749f60 a2=94 a3=6 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.388000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { confidentiality } for pid=3587 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:35:34.389000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdd7749710 a2=94 a3=88 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.389000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { perfmon } for pid=3587 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { confidentiality } for pid=3587 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:35:34.389000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdd7749710 a2=94 a3=88 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.389000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.389000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.389000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdd774b140 a2=10 a3=208 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.389000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.390000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.390000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdd774afe0 a2=10 a3=3 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.390000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.391000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.391000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdd774af80 a2=10 a3=3 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.391000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.391000 audit[3587]: AVC avc: denied { bpf } for pid=3587 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.391000 audit[3587]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdd774af80 a2=10 a3=7 items=0 ppid=3436 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.391000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:35:34.399000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:35:34.399000 audit[1013]: SYSCALL arch=c000003e syscall=46 success=yes exit=188 a0=3 a1=7ffc52daf0f0 a2=0 a3=2 items=0 ppid=1 pid=1013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-udevd" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.399000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-udevd" Nov 1 00:35:34.445569 kubelet[1990]: E1101 00:35:34.445437 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:34.456000 audit[3635]: NETFILTER_CFG table=raw:105 family=2 entries=21 op=nft_register_chain pid=3635 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:34.456000 audit[3635]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffcc3feda80 a2=0 a3=7ffcc3feda6c items=0 ppid=3436 pid=3635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.456000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:34.459000 audit[3646]: NETFILTER_CFG table=mangle:106 family=2 entries=16 op=nft_register_chain pid=3646 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:34.459000 audit[3646]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffea02d5c60 a2=0 a3=7ffea02d5c4c items=0 ppid=3436 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.459000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:34.465000 audit[3645]: NETFILTER_CFG table=nat:107 family=2 entries=15 op=nft_register_chain pid=3645 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:34.465000 audit[3645]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff811ed1e0 a2=0 a3=7fff811ed1cc items=0 ppid=3436 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.465000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:34.466000 audit[3652]: NETFILTER_CFG table=filter:108 family=2 entries=39 op=nft_register_chain pid=3652 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:34.466000 audit[3652]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7fff35fdd170 a2=0 a3=7fff35fdd15c items=0 ppid=3436 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.466000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:34.472499 systemd[1]: run-containerd-runc-k8s.io-ec828fa9345c67b54221cf9ba8741969f282c96b0b999e470fa81425a12269f1-runc.9j0OU8.mount: Deactivated successfully. Nov 1 00:35:34.807769 systemd-networkd[1032]: califa689a78e19: Link UP Nov 1 00:35:34.810531 systemd-networkd[1032]: califa689a78e19: Gained carrier Nov 1 00:35:34.811233 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califa689a78e19: link becomes ready Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.370 [INFO][3596] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--fdfb546bf--7b46l-eth0 whisker-fdfb546bf- calico-system ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7 1023 0 2025-11-01 00:35:33 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:fdfb546bf projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-fdfb546bf-7b46l eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] califa689a78e19 [] [] }} ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Namespace="calico-system" Pod="whisker-fdfb546bf-7b46l" WorkloadEndpoint="localhost-k8s-whisker--fdfb546bf--7b46l-" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.370 [INFO][3596] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Namespace="calico-system" Pod="whisker-fdfb546bf-7b46l" WorkloadEndpoint="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.402 [INFO][3610] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" HandleID="k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Workload="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.403 [INFO][3610] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" HandleID="k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Workload="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001a45e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-fdfb546bf-7b46l", "timestamp":"2025-11-01 00:35:34.40265257 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.403 [INFO][3610] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.403 [INFO][3610] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.403 [INFO][3610] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.411 [INFO][3610] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.545 [INFO][3610] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.704 [INFO][3610] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.706 [INFO][3610] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.708 [INFO][3610] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.708 [INFO][3610] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.710 [INFO][3610] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.744 [INFO][3610] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.791 [INFO][3610] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.791 [INFO][3610] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" host="localhost" Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.791 [INFO][3610] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:34.890671 env[1201]: 2025-11-01 00:35:34.791 [INFO][3610] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" HandleID="k8s-pod-network.b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Workload="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" Nov 1 00:35:34.891590 env[1201]: 2025-11-01 00:35:34.794 [INFO][3596] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Namespace="calico-system" Pod="whisker-fdfb546bf-7b46l" WorkloadEndpoint="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--fdfb546bf--7b46l-eth0", GenerateName:"whisker-fdfb546bf-", Namespace:"calico-system", SelfLink:"", UID:"ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"fdfb546bf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-fdfb546bf-7b46l", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"califa689a78e19", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:34.891590 env[1201]: 2025-11-01 00:35:34.794 [INFO][3596] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Namespace="calico-system" Pod="whisker-fdfb546bf-7b46l" WorkloadEndpoint="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" Nov 1 00:35:34.891590 env[1201]: 2025-11-01 00:35:34.794 [INFO][3596] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to califa689a78e19 ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Namespace="calico-system" Pod="whisker-fdfb546bf-7b46l" WorkloadEndpoint="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" Nov 1 00:35:34.891590 env[1201]: 2025-11-01 00:35:34.811 [INFO][3596] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Namespace="calico-system" Pod="whisker-fdfb546bf-7b46l" WorkloadEndpoint="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" Nov 1 00:35:34.891590 env[1201]: 2025-11-01 00:35:34.812 [INFO][3596] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Namespace="calico-system" Pod="whisker-fdfb546bf-7b46l" WorkloadEndpoint="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--fdfb546bf--7b46l-eth0", GenerateName:"whisker-fdfb546bf-", Namespace:"calico-system", SelfLink:"", UID:"ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"fdfb546bf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b", Pod:"whisker-fdfb546bf-7b46l", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"califa689a78e19", MAC:"a2:a3:fe:70:f4:22", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:34.891590 env[1201]: 2025-11-01 00:35:34.888 [INFO][3596] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b" Namespace="calico-system" Pod="whisker-fdfb546bf-7b46l" WorkloadEndpoint="localhost-k8s-whisker--fdfb546bf--7b46l-eth0" Nov 1 00:35:34.956179 env[1201]: time="2025-11-01T00:35:34.956083564Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:34.956179 env[1201]: time="2025-11-01T00:35:34.956121767Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:34.956179 env[1201]: time="2025-11-01T00:35:34.956134972Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:34.956405 env[1201]: time="2025-11-01T00:35:34.956307723Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b pid=3691 runtime=io.containerd.runc.v2 Nov 1 00:35:34.947000 audit[3682]: NETFILTER_CFG table=filter:109 family=2 entries=59 op=nft_register_chain pid=3682 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:34.947000 audit[3682]: SYSCALL arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffe4a2266f0 a2=0 a3=7ffe4a2266dc items=0 ppid=3436 pid=3682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.947000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:34.978636 systemd[1]: run-containerd-runc-k8s.io-b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b-runc.BOHtgV.mount: Deactivated successfully. Nov 1 00:35:34.982080 systemd[1]: Started cri-containerd-b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b.scope. Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit: BPF prog-id=165 op=LOAD Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=3691 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633935616366353661616438333363613931633930646434333633 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=c items=0 ppid=3691 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633935616366353661616438333363613931633930646434333633 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit: BPF prog-id=166 op=LOAD Nov 1 00:35:34.995000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c0002e7e00 items=0 ppid=3691 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633935616366353661616438333363613931633930646434333633 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit: BPF prog-id=167 op=LOAD Nov 1 00:35:34.995000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c0002e7e48 items=0 ppid=3691 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633935616366353661616438333363613931633930646434333633 Nov 1 00:35:34.995000 audit: BPF prog-id=167 op=UNLOAD Nov 1 00:35:34.995000 audit: BPF prog-id=166 op=UNLOAD Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:34.995000 audit: BPF prog-id=168 op=LOAD Nov 1 00:35:34.995000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c0003e6258 items=0 ppid=3691 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:34.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231633935616366353661616438333363613931633930646434333633 Nov 1 00:35:34.999708 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:35:35.029206 env[1201]: time="2025-11-01T00:35:35.029134130Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-fdfb546bf-7b46l,Uid:ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7,Namespace:calico-system,Attempt:0,} returns sandbox id \"b1c95acf56aad833ca91c90dd4363143917fd9673279e8948fc1f18903c3412b\"" Nov 1 00:35:35.031015 env[1201]: time="2025-11-01T00:35:35.030980586Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:35:35.116000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:35.116000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:35.116000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:35.116000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00233dc60 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:35:35.116000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0079e8180 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:35:35.116000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:35:35.116000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:35:35.116000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:35.116000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0079e83f0 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:35:35.116000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:35:35.116000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c009ce1980 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:35:35.116000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:35:35.121000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:35.121000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:35.121000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00789a5a0 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:35:35.121000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:35:35.121000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00a534f30 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:35:35.121000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:35:35.272890 env[1201]: time="2025-11-01T00:35:35.272836076Z" level=info msg="StopPodSandbox for \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\"" Nov 1 00:35:35.274719 kubelet[1990]: I1101 00:35:35.274682 1990 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="abb7cbbb-33fe-47c2-8aa3-e67f4da6073e" path="/var/lib/kubelet/pods/abb7cbbb-33fe-47c2-8aa3-e67f4da6073e/volumes" Nov 1 00:35:35.363836 env[1201]: time="2025-11-01T00:35:35.363751502Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:35.445640 env[1201]: time="2025-11-01T00:35:35.445353146Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:35:35.451412 kubelet[1990]: E1101 00:35:35.450897 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:35:35.451875 kubelet[1990]: E1101 00:35:35.451436 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:35:35.451965 kubelet[1990]: E1101 00:35:35.451616 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6902f7d9d27b4bd7b9bbb315bb5ea18c,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-r2vs8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fdfb546bf-7b46l_calico-system(ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:35.454300 env[1201]: time="2025-11-01T00:35:35.453605357Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.399 [INFO][3742] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.399 [INFO][3742] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" iface="eth0" netns="/var/run/netns/cni-90741756-9218-7c91-3ded-5b7072fe03e8" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.399 [INFO][3742] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" iface="eth0" netns="/var/run/netns/cni-90741756-9218-7c91-3ded-5b7072fe03e8" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.399 [INFO][3742] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" iface="eth0" netns="/var/run/netns/cni-90741756-9218-7c91-3ded-5b7072fe03e8" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.400 [INFO][3742] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.400 [INFO][3742] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.429 [INFO][3751] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.429 [INFO][3751] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.429 [INFO][3751] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.467 [WARNING][3751] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.467 [INFO][3751] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.471 [INFO][3751] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:35.477603 env[1201]: 2025-11-01 00:35:35.473 [INFO][3742] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:35.480795 systemd[1]: run-netns-cni\x2d90741756\x2d9218\x2d7c91\x2d3ded\x2d5b7072fe03e8.mount: Deactivated successfully. Nov 1 00:35:35.481931 env[1201]: time="2025-11-01T00:35:35.481860340Z" level=info msg="TearDown network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\" successfully" Nov 1 00:35:35.482027 env[1201]: time="2025-11-01T00:35:35.481911117Z" level=info msg="StopPodSandbox for \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\" returns successfully" Nov 1 00:35:35.482403 kubelet[1990]: E1101 00:35:35.482370 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:35.483463 env[1201]: time="2025-11-01T00:35:35.483413695Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-76w7h,Uid:44b8ae81-c16e-4f90-a959-8cda2ee7202f,Namespace:kube-system,Attempt:1,}" Nov 1 00:35:35.543913 systemd[1]: Started sshd@7-10.0.0.38:22-10.0.0.1:51938.service. Nov 1 00:35:35.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.38:22-10.0.0.1:51938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:35.591000 audit[3774]: USER_ACCT pid=3774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:35.593772 sshd[3774]: Accepted publickey for core from 10.0.0.1 port 51938 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:35:35.593000 audit[3774]: CRED_ACQ pid=3774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:35.593000 audit[3774]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5e6a4140 a2=3 a3=0 items=0 ppid=1 pid=3774 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.593000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:35.594735 sshd[3774]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:35:35.601085 systemd-logind[1187]: New session 8 of user core. Nov 1 00:35:35.601859 systemd[1]: Started session-8.scope. Nov 1 00:35:35.608000 audit[3774]: USER_START pid=3774 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:35.610000 audit[3784]: CRED_ACQ pid=3784 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:35.623878 systemd-networkd[1032]: cali87c7ec8acd7: Link UP Nov 1 00:35:35.629459 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:35:35.629729 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali87c7ec8acd7: link becomes ready Nov 1 00:35:35.630341 systemd-networkd[1032]: cali87c7ec8acd7: Gained carrier Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.538 [INFO][3759] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--76w7h-eth0 coredns-674b8bbfcf- kube-system 44b8ae81-c16e-4f90-a959-8cda2ee7202f 1065 0 2025-11-01 00:34:48 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-76w7h eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali87c7ec8acd7 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Namespace="kube-system" Pod="coredns-674b8bbfcf-76w7h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--76w7h-" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.538 [INFO][3759] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Namespace="kube-system" Pod="coredns-674b8bbfcf-76w7h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.577 [INFO][3776] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" HandleID="k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.577 [INFO][3776] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" HandleID="k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00035f590), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-76w7h", "timestamp":"2025-11-01 00:35:35.577330448 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.577 [INFO][3776] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.577 [INFO][3776] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.577 [INFO][3776] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.584 [INFO][3776] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.589 [INFO][3776] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.593 [INFO][3776] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.595 [INFO][3776] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.599 [INFO][3776] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.599 [INFO][3776] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.602 [INFO][3776] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177 Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.608 [INFO][3776] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.617 [INFO][3776] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.617 [INFO][3776] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" host="localhost" Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.617 [INFO][3776] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:35.646798 env[1201]: 2025-11-01 00:35:35.617 [INFO][3776] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" HandleID="k8s-pod-network.933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.647480 env[1201]: 2025-11-01 00:35:35.620 [INFO][3759] cni-plugin/k8s.go 418: Populated endpoint ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Namespace="kube-system" Pod="coredns-674b8bbfcf-76w7h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--76w7h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"44b8ae81-c16e-4f90-a959-8cda2ee7202f", ResourceVersion:"1065", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 34, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-76w7h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali87c7ec8acd7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:35.647480 env[1201]: 2025-11-01 00:35:35.620 [INFO][3759] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Namespace="kube-system" Pod="coredns-674b8bbfcf-76w7h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.647480 env[1201]: 2025-11-01 00:35:35.620 [INFO][3759] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali87c7ec8acd7 ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Namespace="kube-system" Pod="coredns-674b8bbfcf-76w7h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.647480 env[1201]: 2025-11-01 00:35:35.630 [INFO][3759] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Namespace="kube-system" Pod="coredns-674b8bbfcf-76w7h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.647480 env[1201]: 2025-11-01 00:35:35.631 [INFO][3759] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Namespace="kube-system" Pod="coredns-674b8bbfcf-76w7h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--76w7h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"44b8ae81-c16e-4f90-a959-8cda2ee7202f", ResourceVersion:"1065", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 34, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177", Pod:"coredns-674b8bbfcf-76w7h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali87c7ec8acd7", MAC:"82:b2:29:68:4e:be", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:35.647480 env[1201]: 2025-11-01 00:35:35.640 [INFO][3759] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177" Namespace="kube-system" Pod="coredns-674b8bbfcf-76w7h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:35.659000 audit[3796]: NETFILTER_CFG table=filter:110 family=2 entries=42 op=nft_register_chain pid=3796 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:35.659000 audit[3796]: SYSCALL arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7ffd09022ad0 a2=0 a3=7ffd09022abc items=0 ppid=3436 pid=3796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.659000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:35.667233 env[1201]: time="2025-11-01T00:35:35.667100132Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:35.667233 env[1201]: time="2025-11-01T00:35:35.667243375Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:35.667425 env[1201]: time="2025-11-01T00:35:35.667299914Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:35.667631 env[1201]: time="2025-11-01T00:35:35.667574911Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177 pid=3811 runtime=io.containerd.runc.v2 Nov 1 00:35:35.682066 systemd[1]: Started cri-containerd-933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177.scope. Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.698000 audit: BPF prog-id=169 op=LOAD Nov 1 00:35:35.699000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.699000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3811 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933336139363437333961373164353166633939356561326335306631 Nov 1 00:35:35.699000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.699000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3811 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933336139363437333961373164353166633939356561326335306631 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.700000 audit: BPF prog-id=170 op=LOAD Nov 1 00:35:35.700000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000f3e90 items=0 ppid=3811 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933336139363437333961373164353166633939356561326335306631 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.701000 audit: BPF prog-id=171 op=LOAD Nov 1 00:35:35.701000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000f3ed8 items=0 ppid=3811 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933336139363437333961373164353166633939356561326335306631 Nov 1 00:35:35.701000 audit: BPF prog-id=171 op=UNLOAD Nov 1 00:35:35.701000 audit: BPF prog-id=170 op=UNLOAD Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.702000 audit: BPF prog-id=172 op=LOAD Nov 1 00:35:35.702000 audit[3820]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003662e8 items=0 ppid=3811 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933336139363437333961373164353166633939356561326335306631 Nov 1 00:35:35.704494 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:35:35.732381 env[1201]: time="2025-11-01T00:35:35.732322181Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-76w7h,Uid:44b8ae81-c16e-4f90-a959-8cda2ee7202f,Namespace:kube-system,Attempt:1,} returns sandbox id \"933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177\"" Nov 1 00:35:35.733296 kubelet[1990]: E1101 00:35:35.733117 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:35.740241 env[1201]: time="2025-11-01T00:35:35.740209903Z" level=info msg="CreateContainer within sandbox \"933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:35:35.760302 sshd[3774]: pam_unix(sshd:session): session closed for user core Nov 1 00:35:35.760000 audit[3774]: USER_END pid=3774 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:35.761647 env[1201]: time="2025-11-01T00:35:35.761518506Z" level=info msg="CreateContainer within sandbox \"933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"a8b30649f1bea35c3ecd4e0faa4fe65905576c38ca56112f40e2bdc6ddbe75e7\"" Nov 1 00:35:35.760000 audit[3774]: CRED_DISP pid=3774 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:35.762246 env[1201]: time="2025-11-01T00:35:35.762221562Z" level=info msg="StartContainer for \"a8b30649f1bea35c3ecd4e0faa4fe65905576c38ca56112f40e2bdc6ddbe75e7\"" Nov 1 00:35:35.763691 systemd[1]: sshd@7-10.0.0.38:22-10.0.0.1:51938.service: Deactivated successfully. Nov 1 00:35:35.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.38:22-10.0.0.1:51938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:35.764458 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:35:35.765621 systemd-logind[1187]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:35:35.766405 systemd-logind[1187]: Removed session 8. Nov 1 00:35:35.777967 systemd[1]: Started cri-containerd-a8b30649f1bea35c3ecd4e0faa4fe65905576c38ca56112f40e2bdc6ddbe75e7.scope. Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit: BPF prog-id=173 op=LOAD Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3811 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623330363439663162656133356333656364346530666161346665 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3811 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623330363439663162656133356333656364346530666161346665 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.792000 audit: BPF prog-id=174 op=LOAD Nov 1 00:35:35.792000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000e3d50 items=0 ppid=3811 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623330363439663162656133356333656364346530666161346665 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit: BPF prog-id=175 op=LOAD Nov 1 00:35:35.793000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000e3d98 items=0 ppid=3811 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623330363439663162656133356333656364346530666161346665 Nov 1 00:35:35.793000 audit: BPF prog-id=175 op=UNLOAD Nov 1 00:35:35.793000 audit: BPF prog-id=174 op=UNLOAD Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { perfmon } for pid=3860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit[3860]: AVC avc: denied { bpf } for pid=3860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:35.793000 audit: BPF prog-id=176 op=LOAD Nov 1 00:35:35.793000 audit[3860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ae1a8 items=0 ppid=3811 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:35.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623330363439663162656133356333656364346530666161346665 Nov 1 00:35:35.806697 env[1201]: time="2025-11-01T00:35:35.806653893Z" level=info msg="StartContainer for \"a8b30649f1bea35c3ecd4e0faa4fe65905576c38ca56112f40e2bdc6ddbe75e7\" returns successfully" Nov 1 00:35:35.919084 env[1201]: time="2025-11-01T00:35:35.918985938Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:35.920783 env[1201]: time="2025-11-01T00:35:35.920716061Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:35:35.921377 kubelet[1990]: E1101 00:35:35.921308 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:35:35.921532 kubelet[1990]: E1101 00:35:35.921398 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:35:35.921650 kubelet[1990]: E1101 00:35:35.921590 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-r2vs8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fdfb546bf-7b46l_calico-system(ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:35.922887 kubelet[1990]: E1101 00:35:35.922822 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fdfb546bf-7b46l" podUID="ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7" Nov 1 00:35:35.956000 audit[3871]: AVC avc: denied { getattr } for pid=3871 comm="coredns" path="cgroup:[4026532759]" dev="nsfs" ino=4026532759 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c795 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:35:35.956000 audit[3871]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000148210 a2=c0005d22a8 a3=0 items=0 ppid=3811 pid=3871 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c795 key=(null) Nov 1 00:35:35.956000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:35:36.093130 systemd-networkd[1032]: vxlan.calico: Gained IPv6LL Nov 1 00:35:36.221104 systemd-networkd[1032]: califa689a78e19: Gained IPv6LL Nov 1 00:35:36.272990 env[1201]: time="2025-11-01T00:35:36.272902872Z" level=info msg="StopPodSandbox for \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\"" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.322 [INFO][3903] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.322 [INFO][3903] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" iface="eth0" netns="/var/run/netns/cni-9e2812e7-3a49-7903-c0de-d6f331381726" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.322 [INFO][3903] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" iface="eth0" netns="/var/run/netns/cni-9e2812e7-3a49-7903-c0de-d6f331381726" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.322 [INFO][3903] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" iface="eth0" netns="/var/run/netns/cni-9e2812e7-3a49-7903-c0de-d6f331381726" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.323 [INFO][3903] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.323 [INFO][3903] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.348 [INFO][3912] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.348 [INFO][3912] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.348 [INFO][3912] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.356 [WARNING][3912] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.357 [INFO][3912] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.358 [INFO][3912] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:36.362020 env[1201]: 2025-11-01 00:35:36.360 [INFO][3903] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:36.365466 env[1201]: time="2025-11-01T00:35:36.362186541Z" level=info msg="TearDown network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\" successfully" Nov 1 00:35:36.365466 env[1201]: time="2025-11-01T00:35:36.362222440Z" level=info msg="StopPodSandbox for \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\" returns successfully" Nov 1 00:35:36.365466 env[1201]: time="2025-11-01T00:35:36.363008394Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-r67dj,Uid:6be34926-dcd9-40d6-b861-04b1dc9bc2fa,Namespace:calico-system,Attempt:1,}" Nov 1 00:35:36.364474 systemd[1]: run-netns-cni\x2d9e2812e7\x2d3a49\x2d7903\x2dc0de\x2dd6f331381726.mount: Deactivated successfully. Nov 1 00:35:36.460588 kubelet[1990]: E1101 00:35:36.460537 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:36.464325 kubelet[1990]: E1101 00:35:36.463387 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fdfb546bf-7b46l" podUID="ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7" Nov 1 00:35:36.487000 audit[3945]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=3945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:36.487000 audit[3945]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc8b780f80 a2=0 a3=7ffc8b780f6c items=0 ppid=2104 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.487000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:36.492001 kubelet[1990]: I1101 00:35:36.491867 1990 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-76w7h" podStartSLOduration=48.491844863 podStartE2EDuration="48.491844863s" podCreationTimestamp="2025-11-01 00:34:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:35:36.475049765 +0000 UTC m=+53.384096007" watchObservedRunningTime="2025-11-01 00:35:36.491844863 +0000 UTC m=+53.400890955" Nov 1 00:35:36.495000 audit[3945]: NETFILTER_CFG table=nat:112 family=2 entries=14 op=nft_register_rule pid=3945 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:36.495000 audit[3945]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc8b780f80 a2=0 a3=0 items=0 ppid=2104 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.495000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:36.518044 systemd-networkd[1032]: caliced6c52d0ff: Link UP Nov 1 00:35:36.521151 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliced6c52d0ff: link becomes ready Nov 1 00:35:36.520840 systemd-networkd[1032]: caliced6c52d0ff: Gained carrier Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.417 [INFO][3920] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--666569f655--r67dj-eth0 goldmane-666569f655- calico-system 6be34926-dcd9-40d6-b861-04b1dc9bc2fa 1087 0 2025-11-01 00:35:05 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-666569f655-r67dj eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] caliced6c52d0ff [] [] }} ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Namespace="calico-system" Pod="goldmane-666569f655-r67dj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--r67dj-" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.417 [INFO][3920] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Namespace="calico-system" Pod="goldmane-666569f655-r67dj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.444 [INFO][3936] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" HandleID="k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.444 [INFO][3936] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" HandleID="k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001355e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-666569f655-r67dj", "timestamp":"2025-11-01 00:35:36.444239674 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.444 [INFO][3936] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.444 [INFO][3936] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.444 [INFO][3936] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.452 [INFO][3936] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.457 [INFO][3936] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.473 [INFO][3936] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.492 [INFO][3936] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.496 [INFO][3936] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.496 [INFO][3936] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.498 [INFO][3936] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.502 [INFO][3936] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.514 [INFO][3936] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.514 [INFO][3936] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" host="localhost" Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.514 [INFO][3936] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:36.533749 env[1201]: 2025-11-01 00:35:36.514 [INFO][3936] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" HandleID="k8s-pod-network.7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.534613 env[1201]: 2025-11-01 00:35:36.516 [INFO][3920] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Namespace="calico-system" Pod="goldmane-666569f655-r67dj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--r67dj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--r67dj-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"6be34926-dcd9-40d6-b861-04b1dc9bc2fa", ResourceVersion:"1087", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-666569f655-r67dj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliced6c52d0ff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:36.534613 env[1201]: 2025-11-01 00:35:36.516 [INFO][3920] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Namespace="calico-system" Pod="goldmane-666569f655-r67dj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.534613 env[1201]: 2025-11-01 00:35:36.516 [INFO][3920] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliced6c52d0ff ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Namespace="calico-system" Pod="goldmane-666569f655-r67dj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.534613 env[1201]: 2025-11-01 00:35:36.521 [INFO][3920] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Namespace="calico-system" Pod="goldmane-666569f655-r67dj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.534613 env[1201]: 2025-11-01 00:35:36.521 [INFO][3920] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Namespace="calico-system" Pod="goldmane-666569f655-r67dj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--r67dj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--r67dj-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"6be34926-dcd9-40d6-b861-04b1dc9bc2fa", ResourceVersion:"1087", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b", Pod:"goldmane-666569f655-r67dj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliced6c52d0ff", MAC:"f2:f2:4c:9d:2a:28", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:36.534613 env[1201]: 2025-11-01 00:35:36.531 [INFO][3920] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b" Namespace="calico-system" Pod="goldmane-666569f655-r67dj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:36.534000 audit[3949]: NETFILTER_CFG table=filter:113 family=2 entries=17 op=nft_register_rule pid=3949 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:36.534000 audit[3949]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffc7542800 a2=0 a3=7fffc75427ec items=0 ppid=2104 pid=3949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.534000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:36.541000 audit[3949]: NETFILTER_CFG table=nat:114 family=2 entries=35 op=nft_register_chain pid=3949 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:36.541000 audit[3949]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffc7542800 a2=0 a3=7fffc75427ec items=0 ppid=2104 pid=3949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.541000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:36.546914 env[1201]: time="2025-11-01T00:35:36.546820863Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:36.547063 env[1201]: time="2025-11-01T00:35:36.546887169Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:36.547063 env[1201]: time="2025-11-01T00:35:36.546901006Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:36.547219 env[1201]: time="2025-11-01T00:35:36.547181173Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b pid=3966 runtime=io.containerd.runc.v2 Nov 1 00:35:36.554000 audit[3977]: NETFILTER_CFG table=filter:115 family=2 entries=48 op=nft_register_chain pid=3977 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:36.554000 audit[3977]: SYSCALL arch=c000003e syscall=46 success=yes exit=26368 a0=3 a1=7fffd549a500 a2=0 a3=7fffd549a4ec items=0 ppid=3436 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.554000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:36.564883 systemd[1]: Started cri-containerd-7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b.scope. Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.577000 audit: BPF prog-id=177 op=LOAD Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3966 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343266333834316362643961343263373631343065373763306264 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3966 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343266333834316362643961343263373631343065373763306264 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit: BPF prog-id=178 op=LOAD Nov 1 00:35:36.578000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000323a60 items=0 ppid=3966 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343266333834316362643961343263373631343065373763306264 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit: BPF prog-id=179 op=LOAD Nov 1 00:35:36.578000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000323aa8 items=0 ppid=3966 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343266333834316362643961343263373631343065373763306264 Nov 1 00:35:36.578000 audit: BPF prog-id=179 op=UNLOAD Nov 1 00:35:36.578000 audit: BPF prog-id=178 op=UNLOAD Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:36.578000 audit: BPF prog-id=180 op=LOAD Nov 1 00:35:36.578000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000323eb8 items=0 ppid=3966 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:36.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343266333834316362643961343263373631343065373763306264 Nov 1 00:35:36.580341 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:35:36.602832 env[1201]: time="2025-11-01T00:35:36.602769325Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-r67dj,Uid:6be34926-dcd9-40d6-b861-04b1dc9bc2fa,Namespace:calico-system,Attempt:1,} returns sandbox id \"7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b\"" Nov 1 00:35:36.604156 env[1201]: time="2025-11-01T00:35:36.604132264Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:35:36.733139 systemd-networkd[1032]: cali87c7ec8acd7: Gained IPv6LL Nov 1 00:35:36.943140 env[1201]: time="2025-11-01T00:35:36.943054596Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:37.008563 env[1201]: time="2025-11-01T00:35:37.008461778Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:35:37.008867 kubelet[1990]: E1101 00:35:37.008816 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:35:37.008951 kubelet[1990]: E1101 00:35:37.008875 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:35:37.009116 kubelet[1990]: E1101 00:35:37.009063 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7bjpr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-r67dj_calico-system(6be34926-dcd9-40d6-b861-04b1dc9bc2fa): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:37.010293 kubelet[1990]: E1101 00:35:37.010256 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:35:37.272888 env[1201]: time="2025-11-01T00:35:37.272720532Z" level=info msg="StopPodSandbox for \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\"" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.349 [INFO][4011] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.350 [INFO][4011] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" iface="eth0" netns="/var/run/netns/cni-333ea080-a8ca-77bb-63e2-f7566267ce78" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.350 [INFO][4011] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" iface="eth0" netns="/var/run/netns/cni-333ea080-a8ca-77bb-63e2-f7566267ce78" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.350 [INFO][4011] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" iface="eth0" netns="/var/run/netns/cni-333ea080-a8ca-77bb-63e2-f7566267ce78" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.351 [INFO][4011] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.351 [INFO][4011] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.375 [INFO][4020] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.375 [INFO][4020] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.375 [INFO][4020] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.383 [WARNING][4020] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.383 [INFO][4020] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.385 [INFO][4020] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:37.389035 env[1201]: 2025-11-01 00:35:37.387 [INFO][4011] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:37.389884 env[1201]: time="2025-11-01T00:35:37.389809649Z" level=info msg="TearDown network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\" successfully" Nov 1 00:35:37.389884 env[1201]: time="2025-11-01T00:35:37.389870426Z" level=info msg="StopPodSandbox for \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\" returns successfully" Nov 1 00:35:37.391377 env[1201]: time="2025-11-01T00:35:37.391309671Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f9f45dfb7-swg79,Uid:3c5c0a3b-621a-4eab-add8-e3f35847a66f,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:35:37.393067 systemd[1]: run-netns-cni\x2d333ea080\x2da8ca\x2d77bb\x2d63e2\x2df7566267ce78.mount: Deactivated successfully. Nov 1 00:35:37.465097 kubelet[1990]: E1101 00:35:37.465044 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:37.466777 kubelet[1990]: E1101 00:35:37.466705 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:35:37.493000 audit[4051]: NETFILTER_CFG table=filter:116 family=2 entries=14 op=nft_register_rule pid=4051 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:37.496560 kernel: kauditd_printk_skb: 879 callbacks suppressed Nov 1 00:35:37.496635 kernel: audit: type=1325 audit(1761957337.493:1212): table=filter:116 family=2 entries=14 op=nft_register_rule pid=4051 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:37.493000 audit[4051]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd2d09e9c0 a2=0 a3=7ffd2d09e9ac items=0 ppid=2104 pid=4051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.512351 kernel: audit: type=1300 audit(1761957337.493:1212): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd2d09e9c0 a2=0 a3=7ffd2d09e9ac items=0 ppid=2104 pid=4051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.493000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:37.517589 kernel: audit: type=1327 audit(1761957337.493:1212): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:37.525130 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:35:37.525272 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie5b5f4b7340: link becomes ready Nov 1 00:35:37.525585 systemd-networkd[1032]: calie5b5f4b7340: Link UP Nov 1 00:35:37.526724 systemd-networkd[1032]: calie5b5f4b7340: Gained carrier Nov 1 00:35:37.525000 audit[4051]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=4051 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:37.541226 kernel: audit: type=1325 audit(1761957337.525:1213): table=nat:117 family=2 entries=20 op=nft_register_rule pid=4051 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:37.541381 kernel: audit: type=1300 audit(1761957337.525:1213): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd2d09e9c0 a2=0 a3=7ffd2d09e9ac items=0 ppid=2104 pid=4051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.525000 audit[4051]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd2d09e9c0 a2=0 a3=7ffd2d09e9ac items=0 ppid=2104 pid=4051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.525000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:37.545847 kernel: audit: type=1327 audit(1761957337.525:1213): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.442 [INFO][4029] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0 calico-apiserver-6f9f45dfb7- calico-apiserver 3c5c0a3b-621a-4eab-add8-e3f35847a66f 1123 0 2025-11-01 00:35:03 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6f9f45dfb7 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6f9f45dfb7-swg79 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie5b5f4b7340 [] [] }} ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-swg79" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.442 [INFO][4029] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-swg79" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.470 [INFO][4043] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" HandleID="k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.470 [INFO][4043] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" HandleID="k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003ba080), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6f9f45dfb7-swg79", "timestamp":"2025-11-01 00:35:37.470152837 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.470 [INFO][4043] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.470 [INFO][4043] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.470 [INFO][4043] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.481 [INFO][4043] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.489 [INFO][4043] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.494 [INFO][4043] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.496 [INFO][4043] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.499 [INFO][4043] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.499 [INFO][4043] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.505 [INFO][4043] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538 Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.509 [INFO][4043] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.516 [INFO][4043] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.516 [INFO][4043] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" host="localhost" Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.516 [INFO][4043] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:37.550847 env[1201]: 2025-11-01 00:35:37.516 [INFO][4043] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" HandleID="k8s-pod-network.8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.552355 env[1201]: 2025-11-01 00:35:37.518 [INFO][4029] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-swg79" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0", GenerateName:"calico-apiserver-6f9f45dfb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"3c5c0a3b-621a-4eab-add8-e3f35847a66f", ResourceVersion:"1123", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f9f45dfb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6f9f45dfb7-swg79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie5b5f4b7340", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:37.552355 env[1201]: 2025-11-01 00:35:37.518 [INFO][4029] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-swg79" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.552355 env[1201]: 2025-11-01 00:35:37.518 [INFO][4029] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie5b5f4b7340 ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-swg79" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.552355 env[1201]: 2025-11-01 00:35:37.526 [INFO][4029] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-swg79" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.552355 env[1201]: 2025-11-01 00:35:37.536 [INFO][4029] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-swg79" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0", GenerateName:"calico-apiserver-6f9f45dfb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"3c5c0a3b-621a-4eab-add8-e3f35847a66f", ResourceVersion:"1123", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f9f45dfb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538", Pod:"calico-apiserver-6f9f45dfb7-swg79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie5b5f4b7340", MAC:"1a:fd:7f:58:31:19", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:37.552355 env[1201]: 2025-11-01 00:35:37.548 [INFO][4029] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-swg79" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:37.562000 audit[4061]: NETFILTER_CFG table=filter:118 family=2 entries=58 op=nft_register_chain pid=4061 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:37.568868 env[1201]: time="2025-11-01T00:35:37.568782153Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:37.568868 env[1201]: time="2025-11-01T00:35:37.568834483Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:37.568868 env[1201]: time="2025-11-01T00:35:37.568844211Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:37.569059 kernel: audit: type=1325 audit(1761957337.562:1214): table=filter:118 family=2 entries=58 op=nft_register_chain pid=4061 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:37.569389 env[1201]: time="2025-11-01T00:35:37.569310795Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538 pid=4068 runtime=io.containerd.runc.v2 Nov 1 00:35:37.562000 audit[4061]: SYSCALL arch=c000003e syscall=46 success=yes exit=30584 a0=3 a1=7ffc58cc6a50 a2=0 a3=7ffc58cc6a3c items=0 ppid=3436 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.562000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:37.582362 kernel: audit: type=1300 audit(1761957337.562:1214): arch=c000003e syscall=46 success=yes exit=30584 a0=3 a1=7ffc58cc6a50 a2=0 a3=7ffc58cc6a3c items=0 ppid=3436 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.582515 kernel: audit: type=1327 audit(1761957337.562:1214): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:37.588243 systemd[1]: Started cri-containerd-8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538.scope. Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.604000 audit: BPF prog-id=181 op=LOAD Nov 1 00:35:37.605953 kernel: audit: type=1400 audit(1761957337.598:1215): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.604000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.604000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343431663664643237386437313765373436643834633339313366 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343431663664643237386437313765373436643834633339313366 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit: BPF prog-id=182 op=LOAD Nov 1 00:35:37.605000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000ddce0 items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343431663664643237386437313765373436643834633339313366 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit: BPF prog-id=183 op=LOAD Nov 1 00:35:37.605000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000ddd28 items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343431663664643237386437313765373436643834633339313366 Nov 1 00:35:37.605000 audit: BPF prog-id=183 op=UNLOAD Nov 1 00:35:37.605000 audit: BPF prog-id=182 op=UNLOAD Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:37.605000 audit: BPF prog-id=184 op=LOAD Nov 1 00:35:37.605000 audit[4077]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e2138 items=0 ppid=4068 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:37.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343431663664643237386437313765373436643834633339313366 Nov 1 00:35:37.607220 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:35:37.629409 env[1201]: time="2025-11-01T00:35:37.629355912Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f9f45dfb7-swg79,Uid:3c5c0a3b-621a-4eab-add8-e3f35847a66f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538\"" Nov 1 00:35:37.631013 env[1201]: time="2025-11-01T00:35:37.630853609Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:35:37.885212 systemd-networkd[1032]: caliced6c52d0ff: Gained IPv6LL Nov 1 00:35:37.944291 env[1201]: time="2025-11-01T00:35:37.944159495Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:37.945735 env[1201]: time="2025-11-01T00:35:37.945676429Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:35:37.946069 kubelet[1990]: E1101 00:35:37.946019 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:35:37.946397 kubelet[1990]: E1101 00:35:37.946084 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:35:37.946397 kubelet[1990]: E1101 00:35:37.946245 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gxdl6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6f9f45dfb7-swg79_calico-apiserver(3c5c0a3b-621a-4eab-add8-e3f35847a66f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:37.947462 kubelet[1990]: E1101 00:35:37.947414 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:35:38.272529 env[1201]: time="2025-11-01T00:35:38.272397556Z" level=info msg="StopPodSandbox for \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\"" Nov 1 00:35:38.272851 env[1201]: time="2025-11-01T00:35:38.272479724Z" level=info msg="StopPodSandbox for \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\"" Nov 1 00:35:38.467684 kubelet[1990]: E1101 00:35:38.467645 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:38.468381 kubelet[1990]: E1101 00:35:38.468357 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:35:38.468517 kubelet[1990]: E1101 00:35:38.468447 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:35:38.781184 systemd-networkd[1032]: calie5b5f4b7340: Gained IPv6LL Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.397 [INFO][4126] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.397 [INFO][4126] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" iface="eth0" netns="/var/run/netns/cni-a63325d7-0e18-2b5e-4374-611dcdfb5676" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.398 [INFO][4126] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" iface="eth0" netns="/var/run/netns/cni-a63325d7-0e18-2b5e-4374-611dcdfb5676" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.398 [INFO][4126] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" iface="eth0" netns="/var/run/netns/cni-a63325d7-0e18-2b5e-4374-611dcdfb5676" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.398 [INFO][4126] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.398 [INFO][4126] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.418 [INFO][4142] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.418 [INFO][4142] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.418 [INFO][4142] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.581 [WARNING][4142] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.581 [INFO][4142] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.921 [INFO][4142] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:38.932952 env[1201]: 2025-11-01 00:35:38.923 [INFO][4126] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:38.932952 env[1201]: time="2025-11-01T00:35:38.926166982Z" level=info msg="TearDown network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\" successfully" Nov 1 00:35:38.932952 env[1201]: time="2025-11-01T00:35:38.926230102Z" level=info msg="StopPodSandbox for \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\" returns successfully" Nov 1 00:35:38.932952 env[1201]: time="2025-11-01T00:35:38.928507472Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-cdp8g,Uid:afdfe9f8-2e62-4702-90af-61701ab5a832,Namespace:kube-system,Attempt:1,}" Nov 1 00:35:38.929458 systemd[1]: run-netns-cni\x2da63325d7\x2d0e18\x2d2b5e\x2d4374\x2d611dcdfb5676.mount: Deactivated successfully. Nov 1 00:35:38.933783 kubelet[1990]: E1101 00:35:38.927104 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.581 [INFO][4125] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.581 [INFO][4125] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" iface="eth0" netns="/var/run/netns/cni-c5a808a5-ec8a-6fc8-3cd5-22d256792143" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.582 [INFO][4125] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" iface="eth0" netns="/var/run/netns/cni-c5a808a5-ec8a-6fc8-3cd5-22d256792143" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.582 [INFO][4125] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" iface="eth0" netns="/var/run/netns/cni-c5a808a5-ec8a-6fc8-3cd5-22d256792143" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.582 [INFO][4125] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.582 [INFO][4125] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.602 [INFO][4151] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.602 [INFO][4151] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.921 [INFO][4151] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.983 [WARNING][4151] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.983 [INFO][4151] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.986 [INFO][4151] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:38.991466 env[1201]: 2025-11-01 00:35:38.989 [INFO][4125] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:38.994000 audit[4160]: NETFILTER_CFG table=filter:119 family=2 entries=14 op=nft_register_rule pid=4160 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:38.994000 audit[4160]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff53fe6c20 a2=0 a3=7fff53fe6c0c items=0 ppid=2104 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:38.994000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:38.995365 systemd[1]: run-netns-cni\x2dc5a808a5\x2dec8a\x2d6fc8\x2d3cd5\x2d22d256792143.mount: Deactivated successfully. Nov 1 00:35:38.997624 env[1201]: time="2025-11-01T00:35:38.997560784Z" level=info msg="TearDown network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\" successfully" Nov 1 00:35:38.997719 env[1201]: time="2025-11-01T00:35:38.997620629Z" level=info msg="StopPodSandbox for \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\" returns successfully" Nov 1 00:35:38.998468 env[1201]: time="2025-11-01T00:35:38.998437552Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5dcb8b9f76-sszbv,Uid:886fc838-29d7-4a3c-9b62-9bab283716d9,Namespace:calico-system,Attempt:1,}" Nov 1 00:35:39.000000 audit[4160]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4160 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:39.000000 audit[4160]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff53fe6c20 a2=0 a3=7fff53fe6c0c items=0 ppid=2104 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.000000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:39.211741 systemd-networkd[1032]: cali37e95a20ac9: Link UP Nov 1 00:35:39.217829 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:35:39.219142 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali37e95a20ac9: link becomes ready Nov 1 00:35:39.218128 systemd-networkd[1032]: cali37e95a20ac9: Gained carrier Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.070 [INFO][4161] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0 coredns-674b8bbfcf- kube-system afdfe9f8-2e62-4702-90af-61701ab5a832 1139 0 2025-11-01 00:34:48 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-cdp8g eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali37e95a20ac9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Namespace="kube-system" Pod="coredns-674b8bbfcf-cdp8g" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--cdp8g-" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.076 [INFO][4161] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Namespace="kube-system" Pod="coredns-674b8bbfcf-cdp8g" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.130 [INFO][4191] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" HandleID="k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.130 [INFO][4191] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" HandleID="k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003b4100), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-cdp8g", "timestamp":"2025-11-01 00:35:39.130548741 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.131 [INFO][4191] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.131 [INFO][4191] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.131 [INFO][4191] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.140 [INFO][4191] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.145 [INFO][4191] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.149 [INFO][4191] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.150 [INFO][4191] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.153 [INFO][4191] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.153 [INFO][4191] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.154 [INFO][4191] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24 Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.184 [INFO][4191] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.206 [INFO][4191] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.206 [INFO][4191] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" host="localhost" Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.207 [INFO][4191] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:39.235204 env[1201]: 2025-11-01 00:35:39.207 [INFO][4191] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" HandleID="k8s-pod-network.83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:39.236854 env[1201]: 2025-11-01 00:35:39.209 [INFO][4161] cni-plugin/k8s.go 418: Populated endpoint ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Namespace="kube-system" Pod="coredns-674b8bbfcf-cdp8g" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"afdfe9f8-2e62-4702-90af-61701ab5a832", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 34, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-cdp8g", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali37e95a20ac9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:39.236854 env[1201]: 2025-11-01 00:35:39.209 [INFO][4161] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Namespace="kube-system" Pod="coredns-674b8bbfcf-cdp8g" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:39.236854 env[1201]: 2025-11-01 00:35:39.209 [INFO][4161] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali37e95a20ac9 ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Namespace="kube-system" Pod="coredns-674b8bbfcf-cdp8g" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:39.236854 env[1201]: 2025-11-01 00:35:39.218 [INFO][4161] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Namespace="kube-system" Pod="coredns-674b8bbfcf-cdp8g" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:39.236854 env[1201]: 2025-11-01 00:35:39.222 [INFO][4161] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Namespace="kube-system" Pod="coredns-674b8bbfcf-cdp8g" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"afdfe9f8-2e62-4702-90af-61701ab5a832", ResourceVersion:"1139", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 34, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24", Pod:"coredns-674b8bbfcf-cdp8g", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali37e95a20ac9", MAC:"c2:b6:a5:0c:0a:25", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:39.236854 env[1201]: 2025-11-01 00:35:39.233 [INFO][4161] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24" Namespace="kube-system" Pod="coredns-674b8bbfcf-cdp8g" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:39.249000 audit[4229]: NETFILTER_CFG table=filter:121 family=2 entries=44 op=nft_register_chain pid=4229 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:39.250680 env[1201]: time="2025-11-01T00:35:39.249125902Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:39.250680 env[1201]: time="2025-11-01T00:35:39.249187421Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:39.250680 env[1201]: time="2025-11-01T00:35:39.249203521Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:39.250680 env[1201]: time="2025-11-01T00:35:39.250198616Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24 pid=4225 runtime=io.containerd.runc.v2 Nov 1 00:35:39.249000 audit[4229]: SYSCALL arch=c000003e syscall=46 success=yes exit=21532 a0=3 a1=7ffcd2825710 a2=0 a3=7ffcd28256fc items=0 ppid=3436 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.249000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:39.265725 systemd[1]: Started cri-containerd-83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24.scope. Nov 1 00:35:39.275935 env[1201]: time="2025-11-01T00:35:39.272751687Z" level=info msg="StopPodSandbox for \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\"" Nov 1 00:35:39.284074 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid6c2d04ba11: link becomes ready Nov 1 00:35:39.282409 systemd-networkd[1032]: calid6c2d04ba11: Link UP Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.287000 audit: BPF prog-id=185 op=LOAD Nov 1 00:35:39.289000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.289000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4225 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833323636663432633137336137363935616661386665663732373236 Nov 1 00:35:39.290000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.290000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4225 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833323636663432633137336137363935616661386665663732373236 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit: BPF prog-id=186 op=LOAD Nov 1 00:35:39.291000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000222c70 items=0 ppid=4225 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833323636663432633137336137363935616661386665663732373236 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit: BPF prog-id=187 op=LOAD Nov 1 00:35:39.291000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000222cb8 items=0 ppid=4225 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833323636663432633137336137363935616661386665663732373236 Nov 1 00:35:39.291000 audit: BPF prog-id=187 op=UNLOAD Nov 1 00:35:39.291000 audit: BPF prog-id=186 op=UNLOAD Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.291000 audit: BPF prog-id=188 op=LOAD Nov 1 00:35:39.291000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002230c8 items=0 ppid=4225 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833323636663432633137336137363935616661386665663732373236 Nov 1 00:35:39.294018 env[1201]: time="2025-11-01T00:35:39.290855982Z" level=info msg="StopPodSandbox for \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\"" Nov 1 00:35:39.284752 systemd-networkd[1032]: calid6c2d04ba11: Gained carrier Nov 1 00:35:39.296247 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.085 [INFO][4172] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0 calico-kube-controllers-5dcb8b9f76- calico-system 886fc838-29d7-4a3c-9b62-9bab283716d9 1140 0 2025-11-01 00:35:08 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5dcb8b9f76 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-5dcb8b9f76-sszbv eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calid6c2d04ba11 [] [] }} ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Namespace="calico-system" Pod="calico-kube-controllers-5dcb8b9f76-sszbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.086 [INFO][4172] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Namespace="calico-system" Pod="calico-kube-controllers-5dcb8b9f76-sszbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.153 [INFO][4198] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" HandleID="k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.154 [INFO][4198] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" HandleID="k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004e6e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-5dcb8b9f76-sszbv", "timestamp":"2025-11-01 00:35:39.153807944 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.154 [INFO][4198] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.207 [INFO][4198] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.208 [INFO][4198] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.241 [INFO][4198] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.246 [INFO][4198] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.252 [INFO][4198] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.255 [INFO][4198] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.258 [INFO][4198] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.258 [INFO][4198] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.260 [INFO][4198] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9 Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.265 [INFO][4198] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.272 [INFO][4198] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.272 [INFO][4198] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" host="localhost" Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.272 [INFO][4198] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:39.299011 env[1201]: 2025-11-01 00:35:39.272 [INFO][4198] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" HandleID="k8s-pod-network.a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:39.299872 env[1201]: 2025-11-01 00:35:39.278 [INFO][4172] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Namespace="calico-system" Pod="calico-kube-controllers-5dcb8b9f76-sszbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0", GenerateName:"calico-kube-controllers-5dcb8b9f76-", Namespace:"calico-system", SelfLink:"", UID:"886fc838-29d7-4a3c-9b62-9bab283716d9", ResourceVersion:"1140", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5dcb8b9f76", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-5dcb8b9f76-sszbv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid6c2d04ba11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:39.299872 env[1201]: 2025-11-01 00:35:39.278 [INFO][4172] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Namespace="calico-system" Pod="calico-kube-controllers-5dcb8b9f76-sszbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:39.299872 env[1201]: 2025-11-01 00:35:39.278 [INFO][4172] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid6c2d04ba11 ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Namespace="calico-system" Pod="calico-kube-controllers-5dcb8b9f76-sszbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:39.299872 env[1201]: 2025-11-01 00:35:39.283 [INFO][4172] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Namespace="calico-system" Pod="calico-kube-controllers-5dcb8b9f76-sszbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:39.299872 env[1201]: 2025-11-01 00:35:39.283 [INFO][4172] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Namespace="calico-system" Pod="calico-kube-controllers-5dcb8b9f76-sszbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0", GenerateName:"calico-kube-controllers-5dcb8b9f76-", Namespace:"calico-system", SelfLink:"", UID:"886fc838-29d7-4a3c-9b62-9bab283716d9", ResourceVersion:"1140", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5dcb8b9f76", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9", Pod:"calico-kube-controllers-5dcb8b9f76-sszbv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid6c2d04ba11", MAC:"c2:ac:75:07:28:1c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:39.299872 env[1201]: 2025-11-01 00:35:39.296 [INFO][4172] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9" Namespace="calico-system" Pod="calico-kube-controllers-5dcb8b9f76-sszbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:39.315000 audit[4283]: NETFILTER_CFG table=filter:122 family=2 entries=52 op=nft_register_chain pid=4283 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:39.315000 audit[4283]: SYSCALL arch=c000003e syscall=46 success=yes exit=24328 a0=3 a1=7ffdd9efbe50 a2=0 a3=7ffdd9efbe3c items=0 ppid=3436 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.315000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:39.326782 env[1201]: time="2025-11-01T00:35:39.326678715Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:39.327032 env[1201]: time="2025-11-01T00:35:39.326788144Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:39.327032 env[1201]: time="2025-11-01T00:35:39.326847678Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:39.327125 env[1201]: time="2025-11-01T00:35:39.327036700Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9 pid=4307 runtime=io.containerd.runc.v2 Nov 1 00:35:39.342549 systemd[1]: Started cri-containerd-a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9.scope. Nov 1 00:35:39.348551 env[1201]: time="2025-11-01T00:35:39.348494384Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-cdp8g,Uid:afdfe9f8-2e62-4702-90af-61701ab5a832,Namespace:kube-system,Attempt:1,} returns sandbox id \"83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24\"" Nov 1 00:35:39.349895 kubelet[1990]: E1101 00:35:39.349416 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:39.357444 env[1201]: time="2025-11-01T00:35:39.357388820Z" level=info msg="CreateContainer within sandbox \"83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.361000 audit: BPF prog-id=189 op=LOAD Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4307 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135313761666362363161363839623830306137333662643236376632 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4307 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135313761666362363161363839623830306137333662643236376632 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit: BPF prog-id=190 op=LOAD Nov 1 00:35:39.362000 audit[4316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00025ddf0 items=0 ppid=4307 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135313761666362363161363839623830306137333662643236376632 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit: BPF prog-id=191 op=LOAD Nov 1 00:35:39.362000 audit[4316]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00025de38 items=0 ppid=4307 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135313761666362363161363839623830306137333662643236376632 Nov 1 00:35:39.362000 audit: BPF prog-id=191 op=UNLOAD Nov 1 00:35:39.362000 audit: BPF prog-id=190 op=UNLOAD Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.362000 audit: BPF prog-id=192 op=LOAD Nov 1 00:35:39.362000 audit[4316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c2248 items=0 ppid=4307 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135313761666362363161363839623830306137333662643236376632 Nov 1 00:35:39.364767 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:35:39.395269 env[1201]: time="2025-11-01T00:35:39.395200620Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5dcb8b9f76-sszbv,Uid:886fc838-29d7-4a3c-9b62-9bab283716d9,Namespace:calico-system,Attempt:1,} returns sandbox id \"a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9\"" Nov 1 00:35:39.400338 env[1201]: time="2025-11-01T00:35:39.400292486Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:35:39.405313 env[1201]: time="2025-11-01T00:35:39.405238594Z" level=info msg="CreateContainer within sandbox \"83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"27f6faa1ea992c6d9c254d04e6c7e92d38fcab6c99d6819278fc222f45736dbd\"" Nov 1 00:35:39.407232 env[1201]: time="2025-11-01T00:35:39.407186924Z" level=info msg="StartContainer for \"27f6faa1ea992c6d9c254d04e6c7e92d38fcab6c99d6819278fc222f45736dbd\"" Nov 1 00:35:39.432728 systemd[1]: Started cri-containerd-27f6faa1ea992c6d9c254d04e6c7e92d38fcab6c99d6819278fc222f45736dbd.scope. Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.453000 audit: BPF prog-id=193 op=LOAD Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4225 pid=4367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237663666616131656139393263366439633235346430346536633765 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4225 pid=4367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237663666616131656139393263366439633235346430346536633765 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit: BPF prog-id=194 op=LOAD Nov 1 00:35:39.454000 audit[4367]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00023c940 items=0 ppid=4225 pid=4367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237663666616131656139393263366439633235346430346536633765 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit: BPF prog-id=195 op=LOAD Nov 1 00:35:39.454000 audit[4367]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00023c988 items=0 ppid=4225 pid=4367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237663666616131656139393263366439633235346430346536633765 Nov 1 00:35:39.454000 audit: BPF prog-id=195 op=UNLOAD Nov 1 00:35:39.454000 audit: BPF prog-id=194 op=UNLOAD Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { perfmon } for pid=4367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit[4367]: AVC avc: denied { bpf } for pid=4367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.454000 audit: BPF prog-id=196 op=LOAD Nov 1 00:35:39.454000 audit[4367]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00023cd98 items=0 ppid=4225 pid=4367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237663666616131656139393263366439633235346430346536633765 Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.411 [INFO][4292] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.411 [INFO][4292] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" iface="eth0" netns="/var/run/netns/cni-dc784bf1-9a35-34f6-5c8a-71d60a09d1d8" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.411 [INFO][4292] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" iface="eth0" netns="/var/run/netns/cni-dc784bf1-9a35-34f6-5c8a-71d60a09d1d8" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.414 [INFO][4292] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" iface="eth0" netns="/var/run/netns/cni-dc784bf1-9a35-34f6-5c8a-71d60a09d1d8" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.414 [INFO][4292] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.414 [INFO][4292] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.448 [INFO][4366] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.448 [INFO][4366] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.448 [INFO][4366] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.458 [WARNING][4366] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.458 [INFO][4366] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.462 [INFO][4366] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:39.467100 env[1201]: 2025-11-01 00:35:39.464 [INFO][4292] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:39.467801 env[1201]: time="2025-11-01T00:35:39.467760113Z" level=info msg="TearDown network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\" successfully" Nov 1 00:35:39.467901 env[1201]: time="2025-11-01T00:35:39.467875494Z" level=info msg="StopPodSandbox for \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\" returns successfully" Nov 1 00:35:39.470623 env[1201]: time="2025-11-01T00:35:39.470538482Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2k2fp,Uid:4910ecde-2ad2-41de-b965-b4403e24ea7b,Namespace:calico-system,Attempt:1,}" Nov 1 00:35:39.475304 kubelet[1990]: E1101 00:35:39.475262 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:35:39.492548 env[1201]: time="2025-11-01T00:35:39.492480874Z" level=info msg="StartContainer for \"27f6faa1ea992c6d9c254d04e6c7e92d38fcab6c99d6819278fc222f45736dbd\" returns successfully" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.390 [INFO][4268] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.390 [INFO][4268] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" iface="eth0" netns="/var/run/netns/cni-dc692b7a-b081-c5ae-ab1b-2f52e4a3051e" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.391 [INFO][4268] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" iface="eth0" netns="/var/run/netns/cni-dc692b7a-b081-c5ae-ab1b-2f52e4a3051e" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.391 [INFO][4268] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" iface="eth0" netns="/var/run/netns/cni-dc692b7a-b081-c5ae-ab1b-2f52e4a3051e" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.391 [INFO][4268] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.391 [INFO][4268] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.453 [INFO][4347] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.454 [INFO][4347] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.462 [INFO][4347] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.471 [WARNING][4347] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.471 [INFO][4347] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.476 [INFO][4347] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:39.494975 env[1201]: 2025-11-01 00:35:39.490 [INFO][4268] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:39.495451 env[1201]: time="2025-11-01T00:35:39.495295803Z" level=info msg="TearDown network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\" successfully" Nov 1 00:35:39.495451 env[1201]: time="2025-11-01T00:35:39.495347993Z" level=info msg="StopPodSandbox for \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\" returns successfully" Nov 1 00:35:39.496170 env[1201]: time="2025-11-01T00:35:39.496132303Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f9f45dfb7-ztpvq,Uid:c022fb38-382d-4e47-adc4-89eca47cf7eb,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:35:39.496000 audit[4382]: AVC avc: denied { getattr } for pid=4382 comm="coredns" path="cgroup:[4026532539]" dev="nsfs" ino=4026532539 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c277 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:35:39.496000 audit[4382]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0001ccc30 a2=c000521968 a3=0 items=0 ppid=4225 pid=4382 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c277 key=(null) Nov 1 00:35:39.496000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:35:39.657208 systemd-networkd[1032]: calie80e04269bd: Link UP Nov 1 00:35:39.660752 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie80e04269bd: link becomes ready Nov 1 00:35:39.660537 systemd-networkd[1032]: calie80e04269bd: Gained carrier Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.570 [INFO][4423] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0 calico-apiserver-6f9f45dfb7- calico-apiserver c022fb38-382d-4e47-adc4-89eca47cf7eb 1168 0 2025-11-01 00:35:03 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6f9f45dfb7 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6f9f45dfb7-ztpvq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie80e04269bd [] [] }} ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-ztpvq" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.570 [INFO][4423] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-ztpvq" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.601 [INFO][4442] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" HandleID="k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.601 [INFO][4442] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" HandleID="k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c91f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6f9f45dfb7-ztpvq", "timestamp":"2025-11-01 00:35:39.601222107 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.601 [INFO][4442] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.601 [INFO][4442] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.601 [INFO][4442] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.610 [INFO][4442] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.615 [INFO][4442] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.620 [INFO][4442] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.624 [INFO][4442] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.626 [INFO][4442] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.626 [INFO][4442] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.628 [INFO][4442] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53 Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.635 [INFO][4442] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.647 [INFO][4442] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.647 [INFO][4442] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" host="localhost" Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.648 [INFO][4442] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:39.740943 env[1201]: 2025-11-01 00:35:39.648 [INFO][4442] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" HandleID="k8s-pod-network.aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.743361 env[1201]: 2025-11-01 00:35:39.650 [INFO][4423] cni-plugin/k8s.go 418: Populated endpoint ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-ztpvq" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0", GenerateName:"calico-apiserver-6f9f45dfb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"c022fb38-382d-4e47-adc4-89eca47cf7eb", ResourceVersion:"1168", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f9f45dfb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6f9f45dfb7-ztpvq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie80e04269bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:39.743361 env[1201]: 2025-11-01 00:35:39.651 [INFO][4423] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-ztpvq" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.743361 env[1201]: 2025-11-01 00:35:39.651 [INFO][4423] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie80e04269bd ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-ztpvq" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.743361 env[1201]: 2025-11-01 00:35:39.661 [INFO][4423] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-ztpvq" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.743361 env[1201]: 2025-11-01 00:35:39.661 [INFO][4423] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-ztpvq" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0", GenerateName:"calico-apiserver-6f9f45dfb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"c022fb38-382d-4e47-adc4-89eca47cf7eb", ResourceVersion:"1168", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f9f45dfb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53", Pod:"calico-apiserver-6f9f45dfb7-ztpvq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie80e04269bd", MAC:"26:61:43:16:72:d0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:39.743361 env[1201]: 2025-11-01 00:35:39.738 [INFO][4423] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53" Namespace="calico-apiserver" Pod="calico-apiserver-6f9f45dfb7-ztpvq" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:39.747425 env[1201]: time="2025-11-01T00:35:39.747364444Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:39.748692 env[1201]: time="2025-11-01T00:35:39.748615638Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:35:39.749610 kubelet[1990]: E1101 00:35:39.749078 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:35:39.749610 kubelet[1990]: E1101 00:35:39.749136 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:35:39.749610 kubelet[1990]: E1101 00:35:39.749287 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-t2tjv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5dcb8b9f76-sszbv_calico-system(886fc838-29d7-4a3c-9b62-9bab283716d9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:39.750730 kubelet[1990]: E1101 00:35:39.750652 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:35:39.757266 env[1201]: time="2025-11-01T00:35:39.757163301Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:39.757266 env[1201]: time="2025-11-01T00:35:39.757229518Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:39.757266 env[1201]: time="2025-11-01T00:35:39.757244035Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:39.757000 audit[4473]: NETFILTER_CFG table=filter:123 family=2 entries=63 op=nft_register_chain pid=4473 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:39.757000 audit[4473]: SYSCALL arch=c000003e syscall=46 success=yes exit=30680 a0=3 a1=7ffc6ac646a0 a2=0 a3=7ffc6ac6468c items=0 ppid=3436 pid=4473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.757000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:39.761853 env[1201]: time="2025-11-01T00:35:39.759228624Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53 pid=4475 runtime=io.containerd.runc.v2 Nov 1 00:35:39.778021 systemd[1]: Started cri-containerd-aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53.scope. Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.793000 audit: BPF prog-id=197 op=LOAD Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4475 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161393962326666333263646465613131343038653166373739393539 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4475 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161393962326666333263646465613131343038653166373739393539 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit: BPF prog-id=198 op=LOAD Nov 1 00:35:39.794000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00009b090 items=0 ppid=4475 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161393962326666333263646465613131343038653166373739393539 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit: BPF prog-id=199 op=LOAD Nov 1 00:35:39.794000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00009b0d8 items=0 ppid=4475 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161393962326666333263646465613131343038653166373739393539 Nov 1 00:35:39.794000 audit: BPF prog-id=199 op=UNLOAD Nov 1 00:35:39.794000 audit: BPF prog-id=198 op=UNLOAD Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.794000 audit: BPF prog-id=200 op=LOAD Nov 1 00:35:39.794000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00009b4e8 items=0 ppid=4475 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161393962326666333263646465613131343038653166373739393539 Nov 1 00:35:39.797389 systemd-networkd[1032]: cali615a234eb58: Link UP Nov 1 00:35:39.798014 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:35:39.799950 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali615a234eb58: link becomes ready Nov 1 00:35:39.800146 systemd-networkd[1032]: cali615a234eb58: Gained carrier Nov 1 00:35:39.821717 env[1201]: time="2025-11-01T00:35:39.821667014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f9f45dfb7-ztpvq,Uid:c022fb38-382d-4e47-adc4-89eca47cf7eb,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53\"" Nov 1 00:35:39.823356 env[1201]: time="2025-11-01T00:35:39.823322803Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.573 [INFO][4413] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--2k2fp-eth0 csi-node-driver- calico-system 4910ecde-2ad2-41de-b965-b4403e24ea7b 1171 0 2025-11-01 00:35:08 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-2k2fp eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali615a234eb58 [] [] }} ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Namespace="calico-system" Pod="csi-node-driver-2k2fp" WorkloadEndpoint="localhost-k8s-csi--node--driver--2k2fp-" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.573 [INFO][4413] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Namespace="calico-system" Pod="csi-node-driver-2k2fp" WorkloadEndpoint="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.607 [INFO][4448] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" HandleID="k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.607 [INFO][4448] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" HandleID="k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9250), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-2k2fp", "timestamp":"2025-11-01 00:35:39.607217684 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.608 [INFO][4448] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.647 [INFO][4448] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.647 [INFO][4448] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.711 [INFO][4448] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.744 [INFO][4448] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.751 [INFO][4448] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.755 [INFO][4448] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.760 [INFO][4448] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.760 [INFO][4448] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.765 [INFO][4448] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42 Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.782 [INFO][4448] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.791 [INFO][4448] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.791 [INFO][4448] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" host="localhost" Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.792 [INFO][4448] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:39.846708 env[1201]: 2025-11-01 00:35:39.792 [INFO][4448] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" HandleID="k8s-pod-network.4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.847382 env[1201]: 2025-11-01 00:35:39.795 [INFO][4413] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Namespace="calico-system" Pod="csi-node-driver-2k2fp" WorkloadEndpoint="localhost-k8s-csi--node--driver--2k2fp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2k2fp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4910ecde-2ad2-41de-b965-b4403e24ea7b", ResourceVersion:"1171", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-2k2fp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali615a234eb58", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:39.847382 env[1201]: 2025-11-01 00:35:39.795 [INFO][4413] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Namespace="calico-system" Pod="csi-node-driver-2k2fp" WorkloadEndpoint="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.847382 env[1201]: 2025-11-01 00:35:39.795 [INFO][4413] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali615a234eb58 ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Namespace="calico-system" Pod="csi-node-driver-2k2fp" WorkloadEndpoint="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.847382 env[1201]: 2025-11-01 00:35:39.800 [INFO][4413] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Namespace="calico-system" Pod="csi-node-driver-2k2fp" WorkloadEndpoint="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.847382 env[1201]: 2025-11-01 00:35:39.801 [INFO][4413] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Namespace="calico-system" Pod="csi-node-driver-2k2fp" WorkloadEndpoint="localhost-k8s-csi--node--driver--2k2fp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2k2fp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4910ecde-2ad2-41de-b965-b4403e24ea7b", ResourceVersion:"1171", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42", Pod:"csi-node-driver-2k2fp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali615a234eb58", MAC:"aa:6c:24:b3:31:e6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:39.847382 env[1201]: 2025-11-01 00:35:39.843 [INFO][4413] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42" Namespace="calico-system" Pod="csi-node-driver-2k2fp" WorkloadEndpoint="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:39.855000 audit[4518]: NETFILTER_CFG table=filter:124 family=2 entries=56 op=nft_register_chain pid=4518 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:35:39.855000 audit[4518]: SYSCALL arch=c000003e syscall=46 success=yes exit=25500 a0=3 a1=7fff243fe880 a2=0 a3=7fff243fe86c items=0 ppid=3436 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.855000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:35:39.870771 env[1201]: time="2025-11-01T00:35:39.870675366Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:35:39.870771 env[1201]: time="2025-11-01T00:35:39.870738978Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:35:39.870771 env[1201]: time="2025-11-01T00:35:39.870751882Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:35:39.871083 env[1201]: time="2025-11-01T00:35:39.870956945Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42 pid=4526 runtime=io.containerd.runc.v2 Nov 1 00:35:39.882111 systemd[1]: Started cri-containerd-4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42.scope. Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit: BPF prog-id=201 op=LOAD Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323235663532333933393166393534663331303533623862363235 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323235663532333933393166393534663331303533623862363235 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit: BPF prog-id=202 op=LOAD Nov 1 00:35:39.894000 audit[4535]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d6ab0 items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323235663532333933393166393534663331303533623862363235 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit: BPF prog-id=203 op=LOAD Nov 1 00:35:39.894000 audit[4535]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d6af8 items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323235663532333933393166393534663331303533623862363235 Nov 1 00:35:39.894000 audit: BPF prog-id=203 op=UNLOAD Nov 1 00:35:39.894000 audit: BPF prog-id=202 op=UNLOAD Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { perfmon } for pid=4535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit[4535]: AVC avc: denied { bpf } for pid=4535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:35:39.894000 audit: BPF prog-id=204 op=LOAD Nov 1 00:35:39.894000 audit[4535]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d6f08 items=0 ppid=4526 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:39.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323235663532333933393166393534663331303533623862363235 Nov 1 00:35:39.896468 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:35:39.907694 env[1201]: time="2025-11-01T00:35:39.907628573Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2k2fp,Uid:4910ecde-2ad2-41de-b965-b4403e24ea7b,Namespace:calico-system,Attempt:1,} returns sandbox id \"4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42\"" Nov 1 00:35:40.003105 systemd[1]: run-netns-cni\x2ddc784bf1\x2d9a35\x2d34f6\x2d5c8a\x2d71d60a09d1d8.mount: Deactivated successfully. Nov 1 00:35:40.003204 systemd[1]: run-netns-cni\x2ddc692b7a\x2db081\x2dc5ae\x2dab1b\x2d2f52e4a3051e.mount: Deactivated successfully. Nov 1 00:35:40.152655 env[1201]: time="2025-11-01T00:35:40.152557635Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:40.206766 env[1201]: time="2025-11-01T00:35:40.206656404Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:35:40.207395 kubelet[1990]: E1101 00:35:40.206900 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:35:40.207395 kubelet[1990]: E1101 00:35:40.207150 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:35:40.207655 kubelet[1990]: E1101 00:35:40.207466 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmgnn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6f9f45dfb7-ztpvq_calico-apiserver(c022fb38-382d-4e47-adc4-89eca47cf7eb): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:40.207960 env[1201]: time="2025-11-01T00:35:40.207900064Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:35:40.209071 kubelet[1990]: E1101 00:35:40.209034 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:35:40.381179 systemd-networkd[1032]: cali37e95a20ac9: Gained IPv6LL Nov 1 00:35:40.480206 kubelet[1990]: E1101 00:35:40.480142 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:35:40.482429 kubelet[1990]: E1101 00:35:40.482310 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:40.484199 kubelet[1990]: E1101 00:35:40.484150 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:35:40.510000 audit[4562]: NETFILTER_CFG table=filter:125 family=2 entries=14 op=nft_register_rule pid=4562 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:40.510000 audit[4562]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff1bda19a0 a2=0 a3=7fff1bda198c items=0 ppid=2104 pid=4562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:40.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:40.518000 audit[4562]: NETFILTER_CFG table=nat:126 family=2 entries=20 op=nft_register_rule pid=4562 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:40.518000 audit[4562]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff1bda19a0 a2=0 a3=7fff1bda198c items=0 ppid=2104 pid=4562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:40.518000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:40.529776 kubelet[1990]: I1101 00:35:40.529690 1990 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-cdp8g" podStartSLOduration=52.529663881 podStartE2EDuration="52.529663881s" podCreationTimestamp="2025-11-01 00:34:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:35:40.529078872 +0000 UTC m=+57.438124944" watchObservedRunningTime="2025-11-01 00:35:40.529663881 +0000 UTC m=+57.438709943" Nov 1 00:35:40.547000 audit[4564]: NETFILTER_CFG table=filter:127 family=2 entries=14 op=nft_register_rule pid=4564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:40.547000 audit[4564]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd3f028590 a2=0 a3=7ffd3f02857c items=0 ppid=2104 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:40.547000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:40.562000 audit[4564]: NETFILTER_CFG table=nat:128 family=2 entries=56 op=nft_register_chain pid=4564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:35:40.562000 audit[4564]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd3f028590 a2=0 a3=7ffd3f02857c items=0 ppid=2104 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:40.562000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:35:40.570531 env[1201]: time="2025-11-01T00:35:40.570464195Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:40.571831 env[1201]: time="2025-11-01T00:35:40.571790554Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:35:40.572217 kubelet[1990]: E1101 00:35:40.572178 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:35:40.572389 kubelet[1990]: E1101 00:35:40.572363 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:35:40.572734 kubelet[1990]: E1101 00:35:40.572678 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hm4dm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-2k2fp_calico-system(4910ecde-2ad2-41de-b965-b4403e24ea7b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:40.576046 env[1201]: time="2025-11-01T00:35:40.576006855Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:35:40.766278 systemd-networkd[1032]: calie80e04269bd: Gained IPv6LL Nov 1 00:35:40.767945 systemd[1]: Started sshd@8-10.0.0.38:22-10.0.0.1:53298.service. Nov 1 00:35:40.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.38:22-10.0.0.1:53298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:40.814000 audit[4567]: USER_ACCT pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:40.815948 sshd[4567]: Accepted publickey for core from 10.0.0.1 port 53298 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:35:40.816000 audit[4567]: CRED_ACQ pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:40.816000 audit[4567]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe480fc810 a2=3 a3=0 items=0 ppid=1 pid=4567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:40.816000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:40.817457 sshd[4567]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:35:40.821956 systemd-logind[1187]: New session 9 of user core. Nov 1 00:35:40.823256 systemd[1]: Started session-9.scope. Nov 1 00:35:40.827000 audit[4567]: USER_START pid=4567 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:40.829000 audit[4569]: CRED_ACQ pid=4569 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:40.905472 env[1201]: time="2025-11-01T00:35:40.905400555Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:40.907120 env[1201]: time="2025-11-01T00:35:40.907075952Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:35:40.907572 kubelet[1990]: E1101 00:35:40.907509 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:35:40.907572 kubelet[1990]: E1101 00:35:40.907576 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:35:40.907825 kubelet[1990]: E1101 00:35:40.907748 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hm4dm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-2k2fp_calico-system(4910ecde-2ad2-41de-b965-b4403e24ea7b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:40.909689 kubelet[1990]: E1101 00:35:40.909632 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:40.947961 sshd[4567]: pam_unix(sshd:session): session closed for user core Nov 1 00:35:40.948000 audit[4567]: USER_END pid=4567 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:40.948000 audit[4567]: CRED_DISP pid=4567 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:40.951006 systemd[1]: sshd@8-10.0.0.38:22-10.0.0.1:53298.service: Deactivated successfully. Nov 1 00:35:40.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.38:22-10.0.0.1:53298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:40.951869 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:35:40.952552 systemd-logind[1187]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:35:40.953632 systemd-logind[1187]: Removed session 9. Nov 1 00:35:41.149139 systemd-networkd[1032]: calid6c2d04ba11: Gained IPv6LL Nov 1 00:35:41.469189 systemd-networkd[1032]: cali615a234eb58: Gained IPv6LL Nov 1 00:35:41.485967 kubelet[1990]: E1101 00:35:41.485900 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:41.486908 kubelet[1990]: E1101 00:35:41.486869 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:35:41.487612 kubelet[1990]: E1101 00:35:41.487555 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:35:42.488186 kubelet[1990]: E1101 00:35:42.488130 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:43.253011 env[1201]: time="2025-11-01T00:35:43.252960445Z" level=info msg="StopPodSandbox for \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\"" Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.291 [WARNING][4590] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0", GenerateName:"calico-kube-controllers-5dcb8b9f76-", Namespace:"calico-system", SelfLink:"", UID:"886fc838-29d7-4a3c-9b62-9bab283716d9", ResourceVersion:"1200", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5dcb8b9f76", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9", Pod:"calico-kube-controllers-5dcb8b9f76-sszbv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid6c2d04ba11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.291 [INFO][4590] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.291 [INFO][4590] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" iface="eth0" netns="" Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.291 [INFO][4590] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.291 [INFO][4590] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.318 [INFO][4601] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.319 [INFO][4601] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.319 [INFO][4601] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.325 [WARNING][4601] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.325 [INFO][4601] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.326 [INFO][4601] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:43.329947 env[1201]: 2025-11-01 00:35:43.328 [INFO][4590] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:43.330439 env[1201]: time="2025-11-01T00:35:43.329974944Z" level=info msg="TearDown network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\" successfully" Nov 1 00:35:43.330439 env[1201]: time="2025-11-01T00:35:43.330018748Z" level=info msg="StopPodSandbox for \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\" returns successfully" Nov 1 00:35:43.330693 env[1201]: time="2025-11-01T00:35:43.330654284Z" level=info msg="RemovePodSandbox for \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\"" Nov 1 00:35:43.330757 env[1201]: time="2025-11-01T00:35:43.330695493Z" level=info msg="Forcibly stopping sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\"" Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.362 [WARNING][4618] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0", GenerateName:"calico-kube-controllers-5dcb8b9f76-", Namespace:"calico-system", SelfLink:"", UID:"886fc838-29d7-4a3c-9b62-9bab283716d9", ResourceVersion:"1200", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5dcb8b9f76", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a517afcb61a689b800a736bd267f20d984f3af69b2c79cdb3034ad0f3bcb0ff9", Pod:"calico-kube-controllers-5dcb8b9f76-sszbv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid6c2d04ba11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.363 [INFO][4618] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.363 [INFO][4618] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" iface="eth0" netns="" Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.363 [INFO][4618] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.363 [INFO][4618] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.383 [INFO][4626] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.383 [INFO][4626] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.383 [INFO][4626] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.390 [WARNING][4626] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.390 [INFO][4626] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" HandleID="k8s-pod-network.2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Workload="localhost-k8s-calico--kube--controllers--5dcb8b9f76--sszbv-eth0" Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.391 [INFO][4626] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:43.395047 env[1201]: 2025-11-01 00:35:43.393 [INFO][4618] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520" Nov 1 00:35:43.395607 env[1201]: time="2025-11-01T00:35:43.395078240Z" level=info msg="TearDown network for sandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\" successfully" Nov 1 00:35:43.409151 env[1201]: time="2025-11-01T00:35:43.409096045Z" level=info msg="RemovePodSandbox \"2f679b766dc29b607a0f5fbd2c706321c3c8818646dda1df69aaa25b7afb6520\" returns successfully" Nov 1 00:35:43.412995 env[1201]: time="2025-11-01T00:35:43.412955772Z" level=info msg="StopPodSandbox for \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\"" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.482 [WARNING][4644] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" WorkloadEndpoint="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.482 [INFO][4644] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.482 [INFO][4644] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" iface="eth0" netns="" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.483 [INFO][4644] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.483 [INFO][4644] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.504 [INFO][4652] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.504 [INFO][4652] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.504 [INFO][4652] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.510 [WARNING][4652] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.510 [INFO][4652] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.511 [INFO][4652] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:43.515011 env[1201]: 2025-11-01 00:35:43.513 [INFO][4644] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:43.515011 env[1201]: time="2025-11-01T00:35:43.514943251Z" level=info msg="TearDown network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\" successfully" Nov 1 00:35:43.515011 env[1201]: time="2025-11-01T00:35:43.514984521Z" level=info msg="StopPodSandbox for \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\" returns successfully" Nov 1 00:35:43.515892 env[1201]: time="2025-11-01T00:35:43.515615217Z" level=info msg="RemovePodSandbox for \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\"" Nov 1 00:35:43.515892 env[1201]: time="2025-11-01T00:35:43.515657468Z" level=info msg="Forcibly stopping sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\"" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.544 [WARNING][4671] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" WorkloadEndpoint="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.545 [INFO][4671] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.545 [INFO][4671] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" iface="eth0" netns="" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.545 [INFO][4671] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.545 [INFO][4671] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.563 [INFO][4680] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.563 [INFO][4680] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.563 [INFO][4680] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.569 [WARNING][4680] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.569 [INFO][4680] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" HandleID="k8s-pod-network.cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Workload="localhost-k8s-whisker--75755c6cf7--5c66s-eth0" Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.571 [INFO][4680] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:43.575137 env[1201]: 2025-11-01 00:35:43.572 [INFO][4671] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40" Nov 1 00:35:43.575891 env[1201]: time="2025-11-01T00:35:43.575143995Z" level=info msg="TearDown network for sandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\" successfully" Nov 1 00:35:43.642039 env[1201]: time="2025-11-01T00:35:43.641958606Z" level=info msg="RemovePodSandbox \"cb6a3bea9a28c812e8363d28e24b9cd59866bb93f37c977ace301a4ce546ed40\" returns successfully" Nov 1 00:35:43.642799 env[1201]: time="2025-11-01T00:35:43.642761552Z" level=info msg="StopPodSandbox for \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\"" Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.678 [WARNING][4697] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--76w7h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"44b8ae81-c16e-4f90-a959-8cda2ee7202f", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 34, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177", Pod:"coredns-674b8bbfcf-76w7h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali87c7ec8acd7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.678 [INFO][4697] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.678 [INFO][4697] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" iface="eth0" netns="" Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.678 [INFO][4697] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.678 [INFO][4697] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.704 [INFO][4706] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.704 [INFO][4706] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.705 [INFO][4706] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.711 [WARNING][4706] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.711 [INFO][4706] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.713 [INFO][4706] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:43.718449 env[1201]: 2025-11-01 00:35:43.715 [INFO][4697] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:43.719117 env[1201]: time="2025-11-01T00:35:43.718478238Z" level=info msg="TearDown network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\" successfully" Nov 1 00:35:43.719117 env[1201]: time="2025-11-01T00:35:43.718527663Z" level=info msg="StopPodSandbox for \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\" returns successfully" Nov 1 00:35:43.719117 env[1201]: time="2025-11-01T00:35:43.719074299Z" level=info msg="RemovePodSandbox for \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\"" Nov 1 00:35:43.719203 env[1201]: time="2025-11-01T00:35:43.719114797Z" level=info msg="Forcibly stopping sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\"" Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.757 [WARNING][4724] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--76w7h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"44b8ae81-c16e-4f90-a959-8cda2ee7202f", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 34, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"933a964739a71d51fc995ea2c50f1e8d7598746723ee78594e485e5feaba7177", Pod:"coredns-674b8bbfcf-76w7h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali87c7ec8acd7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.757 [INFO][4724] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.757 [INFO][4724] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" iface="eth0" netns="" Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.757 [INFO][4724] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.757 [INFO][4724] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.785 [INFO][4733] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.785 [INFO][4733] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.785 [INFO][4733] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.793 [WARNING][4733] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.793 [INFO][4733] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" HandleID="k8s-pod-network.56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Workload="localhost-k8s-coredns--674b8bbfcf--76w7h-eth0" Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.795 [INFO][4733] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:43.799376 env[1201]: 2025-11-01 00:35:43.797 [INFO][4724] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8" Nov 1 00:35:43.799376 env[1201]: time="2025-11-01T00:35:43.799343057Z" level=info msg="TearDown network for sandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\" successfully" Nov 1 00:35:43.872226 env[1201]: time="2025-11-01T00:35:43.872142841Z" level=info msg="RemovePodSandbox \"56311bc1d3fbd2b2869992deaa1110a3c5a0dfbf9bb433c41425f43da9b445c8\" returns successfully" Nov 1 00:35:43.872736 env[1201]: time="2025-11-01T00:35:43.872711899Z" level=info msg="StopPodSandbox for \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\"" Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.905 [WARNING][4749] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0", GenerateName:"calico-apiserver-6f9f45dfb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"c022fb38-382d-4e47-adc4-89eca47cf7eb", ResourceVersion:"1222", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f9f45dfb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53", Pod:"calico-apiserver-6f9f45dfb7-ztpvq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie80e04269bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.906 [INFO][4749] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.906 [INFO][4749] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" iface="eth0" netns="" Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.906 [INFO][4749] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.906 [INFO][4749] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.929 [INFO][4758] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.929 [INFO][4758] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.929 [INFO][4758] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.937 [WARNING][4758] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.937 [INFO][4758] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.939 [INFO][4758] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:43.943812 env[1201]: 2025-11-01 00:35:43.941 [INFO][4749] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:43.944479 env[1201]: time="2025-11-01T00:35:43.943847148Z" level=info msg="TearDown network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\" successfully" Nov 1 00:35:43.944479 env[1201]: time="2025-11-01T00:35:43.943882226Z" level=info msg="StopPodSandbox for \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\" returns successfully" Nov 1 00:35:43.944479 env[1201]: time="2025-11-01T00:35:43.944381842Z" level=info msg="RemovePodSandbox for \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\"" Nov 1 00:35:43.944479 env[1201]: time="2025-11-01T00:35:43.944415987Z" level=info msg="Forcibly stopping sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\"" Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:43.979 [WARNING][4776] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0", GenerateName:"calico-apiserver-6f9f45dfb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"c022fb38-382d-4e47-adc4-89eca47cf7eb", ResourceVersion:"1222", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f9f45dfb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aa99b2ff32cddea11408e1f779959e9c2c7b05594d331a729a3d325776aa9b53", Pod:"calico-apiserver-6f9f45dfb7-ztpvq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie80e04269bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:43.979 [INFO][4776] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:43.979 [INFO][4776] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" iface="eth0" netns="" Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:43.979 [INFO][4776] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:43.979 [INFO][4776] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:43.998 [INFO][4785] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:43.998 [INFO][4785] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:43.998 [INFO][4785] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:44.004 [WARNING][4785] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:44.004 [INFO][4785] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" HandleID="k8s-pod-network.8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--ztpvq-eth0" Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:44.006 [INFO][4785] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.012180 env[1201]: 2025-11-01 00:35:44.008 [INFO][4776] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c" Nov 1 00:35:44.012679 env[1201]: time="2025-11-01T00:35:44.012226813Z" level=info msg="TearDown network for sandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\" successfully" Nov 1 00:35:44.016511 env[1201]: time="2025-11-01T00:35:44.016458951Z" level=info msg="RemovePodSandbox \"8021b34f94a08a5ee484f8ad6beddc73e62c0478ea26c8bbf7a335b8fcf72e3c\" returns successfully" Nov 1 00:35:44.016957 env[1201]: time="2025-11-01T00:35:44.016935092Z" level=info msg="StopPodSandbox for \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\"" Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.050 [WARNING][4802] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"afdfe9f8-2e62-4702-90af-61701ab5a832", ResourceVersion:"1201", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 34, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24", Pod:"coredns-674b8bbfcf-cdp8g", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali37e95a20ac9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.051 [INFO][4802] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.051 [INFO][4802] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" iface="eth0" netns="" Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.051 [INFO][4802] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.051 [INFO][4802] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.073 [INFO][4811] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.074 [INFO][4811] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.075 [INFO][4811] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.082 [WARNING][4811] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.082 [INFO][4811] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.084 [INFO][4811] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.088487 env[1201]: 2025-11-01 00:35:44.086 [INFO][4802] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:44.089063 env[1201]: time="2025-11-01T00:35:44.088495857Z" level=info msg="TearDown network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\" successfully" Nov 1 00:35:44.089063 env[1201]: time="2025-11-01T00:35:44.088534230Z" level=info msg="StopPodSandbox for \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\" returns successfully" Nov 1 00:35:44.089236 env[1201]: time="2025-11-01T00:35:44.089190355Z" level=info msg="RemovePodSandbox for \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\"" Nov 1 00:35:44.089296 env[1201]: time="2025-11-01T00:35:44.089254669Z" level=info msg="Forcibly stopping sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\"" Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.124 [WARNING][4829] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"afdfe9f8-2e62-4702-90af-61701ab5a832", ResourceVersion:"1201", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 34, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"83266f42c173a7695afa8fef72726600fd867682ada811d5c50aae8bf3164a24", Pod:"coredns-674b8bbfcf-cdp8g", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali37e95a20ac9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.125 [INFO][4829] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.125 [INFO][4829] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" iface="eth0" netns="" Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.125 [INFO][4829] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.125 [INFO][4829] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.146 [INFO][4838] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.146 [INFO][4838] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.146 [INFO][4838] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.154 [WARNING][4838] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.154 [INFO][4838] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" HandleID="k8s-pod-network.8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Workload="localhost-k8s-coredns--674b8bbfcf--cdp8g-eth0" Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.157 [INFO][4838] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.161220 env[1201]: 2025-11-01 00:35:44.159 [INFO][4829] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591" Nov 1 00:35:44.161773 env[1201]: time="2025-11-01T00:35:44.161247830Z" level=info msg="TearDown network for sandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\" successfully" Nov 1 00:35:44.164759 env[1201]: time="2025-11-01T00:35:44.164729352Z" level=info msg="RemovePodSandbox \"8ebae9e8dcc068cfe78592ba5bfbff00ee339c0e54c6e494284cff4ba22b0591\" returns successfully" Nov 1 00:35:44.165422 env[1201]: time="2025-11-01T00:35:44.165359829Z" level=info msg="StopPodSandbox for \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\"" Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.200 [WARNING][4856] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2k2fp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4910ecde-2ad2-41de-b965-b4403e24ea7b", ResourceVersion:"1218", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42", Pod:"csi-node-driver-2k2fp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali615a234eb58", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.201 [INFO][4856] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.201 [INFO][4856] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" iface="eth0" netns="" Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.201 [INFO][4856] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.201 [INFO][4856] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.220 [INFO][4865] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.220 [INFO][4865] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.220 [INFO][4865] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.226 [WARNING][4865] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.226 [INFO][4865] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.227 [INFO][4865] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.232024 env[1201]: 2025-11-01 00:35:44.229 [INFO][4856] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:44.232529 env[1201]: time="2025-11-01T00:35:44.232080341Z" level=info msg="TearDown network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\" successfully" Nov 1 00:35:44.232529 env[1201]: time="2025-11-01T00:35:44.232117492Z" level=info msg="StopPodSandbox for \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\" returns successfully" Nov 1 00:35:44.232853 env[1201]: time="2025-11-01T00:35:44.232802673Z" level=info msg="RemovePodSandbox for \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\"" Nov 1 00:35:44.232909 env[1201]: time="2025-11-01T00:35:44.232858921Z" level=info msg="Forcibly stopping sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\"" Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.271 [WARNING][4882] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2k2fp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4910ecde-2ad2-41de-b965-b4403e24ea7b", ResourceVersion:"1218", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b225f5239391f954f31053b8b6251da57c642da17b8c8e58f05da186955de42", Pod:"csi-node-driver-2k2fp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali615a234eb58", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.272 [INFO][4882] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.272 [INFO][4882] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" iface="eth0" netns="" Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.272 [INFO][4882] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.272 [INFO][4882] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.296 [INFO][4890] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.296 [INFO][4890] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.296 [INFO][4890] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.307 [WARNING][4890] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.307 [INFO][4890] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" HandleID="k8s-pod-network.bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Workload="localhost-k8s-csi--node--driver--2k2fp-eth0" Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.309 [INFO][4890] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.315233 env[1201]: 2025-11-01 00:35:44.312 [INFO][4882] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b" Nov 1 00:35:44.316123 env[1201]: time="2025-11-01T00:35:44.316052915Z" level=info msg="TearDown network for sandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\" successfully" Nov 1 00:35:44.320229 env[1201]: time="2025-11-01T00:35:44.320182197Z" level=info msg="RemovePodSandbox \"bf333f2daac609b52c3b77d1b809797f9e7e553de0ddd8bfc014418b036dbd7b\" returns successfully" Nov 1 00:35:44.320907 env[1201]: time="2025-11-01T00:35:44.320860124Z" level=info msg="StopPodSandbox for \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\"" Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.361 [WARNING][4907] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0", GenerateName:"calico-apiserver-6f9f45dfb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"3c5c0a3b-621a-4eab-add8-e3f35847a66f", ResourceVersion:"1174", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f9f45dfb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538", Pod:"calico-apiserver-6f9f45dfb7-swg79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie5b5f4b7340", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.361 [INFO][4907] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.361 [INFO][4907] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" iface="eth0" netns="" Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.361 [INFO][4907] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.361 [INFO][4907] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.390 [INFO][4916] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.390 [INFO][4916] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.390 [INFO][4916] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.401 [WARNING][4916] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.401 [INFO][4916] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.404 [INFO][4916] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.409420 env[1201]: 2025-11-01 00:35:44.407 [INFO][4907] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:44.409420 env[1201]: time="2025-11-01T00:35:44.409373358Z" level=info msg="TearDown network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\" successfully" Nov 1 00:35:44.409420 env[1201]: time="2025-11-01T00:35:44.409419125Z" level=info msg="StopPodSandbox for \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\" returns successfully" Nov 1 00:35:44.410372 env[1201]: time="2025-11-01T00:35:44.410212523Z" level=info msg="RemovePodSandbox for \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\"" Nov 1 00:35:44.410550 env[1201]: time="2025-11-01T00:35:44.410496687Z" level=info msg="Forcibly stopping sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\"" Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.453 [WARNING][4934] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0", GenerateName:"calico-apiserver-6f9f45dfb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"3c5c0a3b-621a-4eab-add8-e3f35847a66f", ResourceVersion:"1174", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f9f45dfb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a441f6dd278d717e746d84c3913f3ce0ee5f3868dab0d4bf99eae3081de0538", Pod:"calico-apiserver-6f9f45dfb7-swg79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie5b5f4b7340", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.454 [INFO][4934] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.454 [INFO][4934] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" iface="eth0" netns="" Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.454 [INFO][4934] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.454 [INFO][4934] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.480 [INFO][4943] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.483 [INFO][4943] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.483 [INFO][4943] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.492 [WARNING][4943] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.492 [INFO][4943] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" HandleID="k8s-pod-network.721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Workload="localhost-k8s-calico--apiserver--6f9f45dfb7--swg79-eth0" Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.494 [INFO][4943] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.503821 env[1201]: 2025-11-01 00:35:44.500 [INFO][4934] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79" Nov 1 00:35:44.504485 env[1201]: time="2025-11-01T00:35:44.503844372Z" level=info msg="TearDown network for sandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\" successfully" Nov 1 00:35:44.519090 env[1201]: time="2025-11-01T00:35:44.518971228Z" level=info msg="RemovePodSandbox \"721f5e7e9934e16cf76bdb4f31a2c8a4b88a20f75e2573b23fb1af8a12079a79\" returns successfully" Nov 1 00:35:44.519615 env[1201]: time="2025-11-01T00:35:44.519583539Z" level=info msg="StopPodSandbox for \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\"" Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.559 [WARNING][4966] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--r67dj-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"6be34926-dcd9-40d6-b861-04b1dc9bc2fa", ResourceVersion:"1147", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b", Pod:"goldmane-666569f655-r67dj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliced6c52d0ff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.559 [INFO][4966] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.559 [INFO][4966] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" iface="eth0" netns="" Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.559 [INFO][4966] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.559 [INFO][4966] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.580 [INFO][4975] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.580 [INFO][4975] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.580 [INFO][4975] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.588 [WARNING][4975] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.588 [INFO][4975] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.590 [INFO][4975] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.594607 env[1201]: 2025-11-01 00:35:44.592 [INFO][4966] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:44.595190 env[1201]: time="2025-11-01T00:35:44.594630975Z" level=info msg="TearDown network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\" successfully" Nov 1 00:35:44.595190 env[1201]: time="2025-11-01T00:35:44.594666333Z" level=info msg="StopPodSandbox for \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\" returns successfully" Nov 1 00:35:44.595272 env[1201]: time="2025-11-01T00:35:44.595249078Z" level=info msg="RemovePodSandbox for \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\"" Nov 1 00:35:44.595325 env[1201]: time="2025-11-01T00:35:44.595288744Z" level=info msg="Forcibly stopping sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\"" Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.633 [WARNING][4994] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--r67dj-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"6be34926-dcd9-40d6-b861-04b1dc9bc2fa", ResourceVersion:"1147", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 35, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7b42f3841cbd9a42c76140e77c0bde278edc6329db6866f1b5e9957db985713b", Pod:"goldmane-666569f655-r67dj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliced6c52d0ff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.633 [INFO][4994] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.633 [INFO][4994] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" iface="eth0" netns="" Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.633 [INFO][4994] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.633 [INFO][4994] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.658 [INFO][5002] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.658 [INFO][5002] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.659 [INFO][5002] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.666 [WARNING][5002] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.666 [INFO][5002] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" HandleID="k8s-pod-network.f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Workload="localhost-k8s-goldmane--666569f655--r67dj-eth0" Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.667 [INFO][5002] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:35:44.671815 env[1201]: 2025-11-01 00:35:44.669 [INFO][4994] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c" Nov 1 00:35:44.672692 env[1201]: time="2025-11-01T00:35:44.672640079Z" level=info msg="TearDown network for sandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\" successfully" Nov 1 00:35:44.676419 env[1201]: time="2025-11-01T00:35:44.676373994Z" level=info msg="RemovePodSandbox \"f83854f4d946dad7a8612e0697ef326c82f44d401ef6d5c343f118236629f86c\" returns successfully" Nov 1 00:35:45.952901 systemd[1]: Started sshd@9-10.0.0.38:22-10.0.0.1:53304.service. Nov 1 00:35:45.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.38:22-10.0.0.1:53304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:45.955292 kernel: kauditd_printk_skb: 385 callbacks suppressed Nov 1 00:35:45.955502 kernel: audit: type=1130 audit(1761957345.952:1343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.38:22-10.0.0.1:53304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:45.992000 audit[5013]: USER_ACCT pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:45.993538 sshd[5013]: Accepted publickey for core from 10.0.0.1 port 53304 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:35:46.002963 kernel: audit: type=1101 audit(1761957345.992:1344): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.003084 kernel: audit: type=1103 audit(1761957346.001:1345): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.001000 audit[5013]: CRED_ACQ pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.003438 sshd[5013]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:35:46.008177 systemd-logind[1187]: New session 10 of user core. Nov 1 00:35:46.009477 systemd[1]: Started session-10.scope. Nov 1 00:35:46.016190 kernel: audit: type=1006 audit(1761957346.002:1346): pid=5013 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:35:46.016344 kernel: audit: type=1300 audit(1761957346.002:1346): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe25ee8190 a2=3 a3=0 items=0 ppid=1 pid=5013 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:46.002000 audit[5013]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe25ee8190 a2=3 a3=0 items=0 ppid=1 pid=5013 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:46.002000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:46.031881 kernel: audit: type=1327 audit(1761957346.002:1346): proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:46.031947 kernel: audit: type=1105 audit(1761957346.014:1347): pid=5013 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.014000 audit[5013]: USER_START pid=5013 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.016000 audit[5015]: CRED_ACQ pid=5015 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.045997 kernel: audit: type=1103 audit(1761957346.016:1348): pid=5015 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.162650 sshd[5013]: pam_unix(sshd:session): session closed for user core Nov 1 00:35:46.162000 audit[5013]: USER_END pid=5013 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.165631 systemd[1]: sshd@9-10.0.0.38:22-10.0.0.1:53304.service: Deactivated successfully. Nov 1 00:35:46.166495 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:35:46.167353 systemd-logind[1187]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:35:46.168483 systemd-logind[1187]: Removed session 10. Nov 1 00:35:46.163000 audit[5013]: CRED_DISP pid=5013 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.177947 kernel: audit: type=1106 audit(1761957346.162:1349): pid=5013 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.178011 kernel: audit: type=1104 audit(1761957346.163:1350): pid=5013 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:46.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.38:22-10.0.0.1:53304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:46.886000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:46.886000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:46.886000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:46.886000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002f82500 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:35:46.886000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d78580 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:35:46.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:35:46.886000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002e76060 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:35:46.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:35:46.886000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:35:46.889000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:35:46.889000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002f041e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:35:46.889000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:35:49.273902 env[1201]: time="2025-11-01T00:35:49.273833905Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:35:49.667816 env[1201]: time="2025-11-01T00:35:49.667733322Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:49.813835 env[1201]: time="2025-11-01T00:35:49.813720361Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:35:49.814166 kubelet[1990]: E1101 00:35:49.814081 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:35:49.814592 kubelet[1990]: E1101 00:35:49.814184 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:35:49.814592 kubelet[1990]: E1101 00:35:49.814354 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6902f7d9d27b4bd7b9bbb315bb5ea18c,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-r2vs8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fdfb546bf-7b46l_calico-system(ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:49.816744 env[1201]: time="2025-11-01T00:35:49.816704570Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:35:50.171942 env[1201]: time="2025-11-01T00:35:50.171853751Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:50.208156 env[1201]: time="2025-11-01T00:35:50.208035513Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:35:50.208412 kubelet[1990]: E1101 00:35:50.208370 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:35:50.208497 kubelet[1990]: E1101 00:35:50.208430 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:35:50.210119 kubelet[1990]: E1101 00:35:50.210051 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-r2vs8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fdfb546bf-7b46l_calico-system(ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:50.211342 kubelet[1990]: E1101 00:35:50.211290 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fdfb546bf-7b46l" podUID="ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7" Nov 1 00:35:51.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.38:22-10.0.0.1:46656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:51.169349 systemd[1]: Started sshd@10-10.0.0.38:22-10.0.0.1:46656.service. Nov 1 00:35:51.171678 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:35:51.171747 kernel: audit: type=1130 audit(1761957351.168:1356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.38:22-10.0.0.1:46656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:51.213000 audit[5031]: USER_ACCT pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.214724 sshd[5031]: Accepted publickey for core from 10.0.0.1 port 46656 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:35:51.217157 sshd[5031]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:35:51.215000 audit[5031]: CRED_ACQ pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.225784 systemd-logind[1187]: New session 11 of user core. Nov 1 00:35:51.227263 systemd[1]: Started session-11.scope. Nov 1 00:35:51.229720 kernel: audit: type=1101 audit(1761957351.213:1357): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.229770 kernel: audit: type=1103 audit(1761957351.215:1358): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.229797 kernel: audit: type=1006 audit(1761957351.215:1359): pid=5031 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Nov 1 00:35:51.215000 audit[5031]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcabd78400 a2=3 a3=0 items=0 ppid=1 pid=5031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:51.241589 kernel: audit: type=1300 audit(1761957351.215:1359): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcabd78400 a2=3 a3=0 items=0 ppid=1 pid=5031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:51.241786 kernel: audit: type=1327 audit(1761957351.215:1359): proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:51.215000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:51.243895 kernel: audit: type=1105 audit(1761957351.233:1360): pid=5031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.233000 audit[5031]: USER_START pid=5031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.251269 kernel: audit: type=1103 audit(1761957351.235:1361): pid=5033 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.235000 audit[5033]: CRED_ACQ pid=5033 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.274082 env[1201]: time="2025-11-01T00:35:51.274021520Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:35:51.363892 sshd[5031]: pam_unix(sshd:session): session closed for user core Nov 1 00:35:51.364000 audit[5031]: USER_END pid=5031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.367763 systemd[1]: sshd@10-10.0.0.38:22-10.0.0.1:46656.service: Deactivated successfully. Nov 1 00:35:51.368372 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:35:51.369192 systemd-logind[1187]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:35:51.370995 systemd[1]: Started sshd@11-10.0.0.38:22-10.0.0.1:46664.service. Nov 1 00:35:51.372515 systemd-logind[1187]: Removed session 11. Nov 1 00:35:51.364000 audit[5031]: CRED_DISP pid=5031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.382031 kernel: audit: type=1106 audit(1761957351.364:1362): pid=5031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.382200 kernel: audit: type=1104 audit(1761957351.364:1363): pid=5031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.38:22-10.0.0.1:46656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:51.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.38:22-10.0.0.1:46664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:51.416000 audit[5045]: USER_ACCT pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.417516 sshd[5045]: Accepted publickey for core from 10.0.0.1 port 46664 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:35:51.417000 audit[5045]: CRED_ACQ pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.417000 audit[5045]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb21f7e10 a2=3 a3=0 items=0 ppid=1 pid=5045 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:51.417000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:51.419199 sshd[5045]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:35:51.423594 systemd-logind[1187]: New session 12 of user core. Nov 1 00:35:51.424527 systemd[1]: Started session-12.scope. Nov 1 00:35:51.428000 audit[5045]: USER_START pid=5045 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.430000 audit[5047]: CRED_ACQ pid=5047 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.584130 sshd[5045]: pam_unix(sshd:session): session closed for user core Nov 1 00:35:51.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.38:22-10.0.0.1:46668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:51.589896 systemd[1]: Started sshd@12-10.0.0.38:22-10.0.0.1:46668.service. Nov 1 00:35:51.589000 audit[5045]: USER_END pid=5045 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.589000 audit[5045]: CRED_DISP pid=5045 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.592824 systemd[1]: sshd@11-10.0.0.38:22-10.0.0.1:46664.service: Deactivated successfully. Nov 1 00:35:51.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.38:22-10.0.0.1:46664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:51.594510 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:35:51.595841 systemd-logind[1187]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:35:51.597480 systemd-logind[1187]: Removed session 12. Nov 1 00:35:51.634000 audit[5056]: USER_ACCT pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.635452 sshd[5056]: Accepted publickey for core from 10.0.0.1 port 46668 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:35:51.635000 audit[5056]: CRED_ACQ pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.635000 audit[5056]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbae642a0 a2=3 a3=0 items=0 ppid=1 pid=5056 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:51.635000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:51.636754 sshd[5056]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:35:51.640435 systemd-logind[1187]: New session 13 of user core. Nov 1 00:35:51.641316 systemd[1]: Started session-13.scope. Nov 1 00:35:51.645000 audit[5056]: USER_START pid=5056 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.646000 audit[5059]: CRED_ACQ pid=5059 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.758954 sshd[5056]: pam_unix(sshd:session): session closed for user core Nov 1 00:35:51.759000 audit[5056]: USER_END pid=5056 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.759000 audit[5056]: CRED_DISP pid=5056 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:51.762157 systemd[1]: sshd@12-10.0.0.38:22-10.0.0.1:46668.service: Deactivated successfully. Nov 1 00:35:51.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.38:22-10.0.0.1:46668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:51.762873 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:35:51.762996 env[1201]: time="2025-11-01T00:35:51.762845575Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:51.763604 systemd-logind[1187]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:35:51.764533 systemd-logind[1187]: Removed session 13. Nov 1 00:35:51.769718 env[1201]: time="2025-11-01T00:35:51.769661211Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:35:51.770110 kubelet[1990]: E1101 00:35:51.770048 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:35:51.770405 kubelet[1990]: E1101 00:35:51.770131 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:35:51.770539 kubelet[1990]: E1101 00:35:51.770455 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gxdl6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6f9f45dfb7-swg79_calico-apiserver(3c5c0a3b-621a-4eab-add8-e3f35847a66f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:51.770846 env[1201]: time="2025-11-01T00:35:51.770768780Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:35:51.771816 kubelet[1990]: E1101 00:35:51.771757 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:35:52.058040 env[1201]: time="2025-11-01T00:35:52.057977948Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:52.059212 env[1201]: time="2025-11-01T00:35:52.059163555Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:35:52.059434 kubelet[1990]: E1101 00:35:52.059395 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:35:52.059528 kubelet[1990]: E1101 00:35:52.059454 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:35:52.059747 kubelet[1990]: E1101 00:35:52.059690 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-t2tjv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5dcb8b9f76-sszbv_calico-system(886fc838-29d7-4a3c-9b62-9bab283716d9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:52.059952 env[1201]: time="2025-11-01T00:35:52.059811365Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:35:52.061275 kubelet[1990]: E1101 00:35:52.061199 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:35:52.363160 env[1201]: time="2025-11-01T00:35:52.362993210Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:52.364542 env[1201]: time="2025-11-01T00:35:52.364487448Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:35:52.364814 kubelet[1990]: E1101 00:35:52.364751 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:35:52.364892 kubelet[1990]: E1101 00:35:52.364832 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:35:52.365080 kubelet[1990]: E1101 00:35:52.365023 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7bjpr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-r67dj_calico-system(6be34926-dcd9-40d6-b861-04b1dc9bc2fa): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:52.366264 kubelet[1990]: E1101 00:35:52.366222 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:35:53.273304 kubelet[1990]: E1101 00:35:53.273223 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:35:56.273483 env[1201]: time="2025-11-01T00:35:56.273432855Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:35:56.582722 env[1201]: time="2025-11-01T00:35:56.582646577Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:56.584188 env[1201]: time="2025-11-01T00:35:56.584084747Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:35:56.584457 kubelet[1990]: E1101 00:35:56.584404 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:35:56.584734 kubelet[1990]: E1101 00:35:56.584468 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:35:56.584842 kubelet[1990]: E1101 00:35:56.584788 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmgnn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6f9f45dfb7-ztpvq_calico-apiserver(c022fb38-382d-4e47-adc4-89eca47cf7eb): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:56.585009 env[1201]: time="2025-11-01T00:35:56.584844540Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:35:56.586313 kubelet[1990]: E1101 00:35:56.586277 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:35:56.765401 systemd[1]: Started sshd@13-10.0.0.38:22-10.0.0.1:46672.service. Nov 1 00:35:56.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.38:22-10.0.0.1:46672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:56.767288 kernel: kauditd_printk_skb: 23 callbacks suppressed Nov 1 00:35:56.767373 kernel: audit: type=1130 audit(1761957356.764:1383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.38:22-10.0.0.1:46672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:56.805000 audit[5076]: USER_ACCT pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.807203 sshd[5076]: Accepted publickey for core from 10.0.0.1 port 46672 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:35:56.809332 sshd[5076]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:35:56.814210 systemd[1]: Started session-14.scope. Nov 1 00:35:56.814591 systemd-logind[1187]: New session 14 of user core. Nov 1 00:35:56.807000 audit[5076]: CRED_ACQ pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.821973 kernel: audit: type=1101 audit(1761957356.805:1384): pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.822025 kernel: audit: type=1103 audit(1761957356.807:1385): pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.822052 kernel: audit: type=1006 audit(1761957356.808:1386): pid=5076 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Nov 1 00:35:56.826629 kernel: audit: type=1300 audit(1761957356.808:1386): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6190bb30 a2=3 a3=0 items=0 ppid=1 pid=5076 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:56.808000 audit[5076]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6190bb30 a2=3 a3=0 items=0 ppid=1 pid=5076 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:35:56.808000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:56.837496 kernel: audit: type=1327 audit(1761957356.808:1386): proctitle=737368643A20636F7265205B707269765D Nov 1 00:35:56.818000 audit[5076]: USER_START pid=5076 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.846086 kernel: audit: type=1105 audit(1761957356.818:1387): pid=5076 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.846158 kernel: audit: type=1103 audit(1761957356.819:1388): pid=5078 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.819000 audit[5078]: CRED_ACQ pid=5078 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.889772 env[1201]: time="2025-11-01T00:35:56.889697882Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:56.890844 env[1201]: time="2025-11-01T00:35:56.890800942Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:35:56.891086 kubelet[1990]: E1101 00:35:56.891035 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:35:56.891186 kubelet[1990]: E1101 00:35:56.891093 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:35:56.891278 kubelet[1990]: E1101 00:35:56.891246 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hm4dm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-2k2fp_calico-system(4910ecde-2ad2-41de-b965-b4403e24ea7b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:56.893818 env[1201]: time="2025-11-01T00:35:56.893771553Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:35:56.932673 sshd[5076]: pam_unix(sshd:session): session closed for user core Nov 1 00:35:56.932000 audit[5076]: USER_END pid=5076 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.935681 systemd[1]: sshd@13-10.0.0.38:22-10.0.0.1:46672.service: Deactivated successfully. Nov 1 00:35:56.936563 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:35:56.937513 systemd-logind[1187]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:35:56.938270 systemd-logind[1187]: Removed session 14. Nov 1 00:35:56.932000 audit[5076]: CRED_DISP pid=5076 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.948252 kernel: audit: type=1106 audit(1761957356.932:1389): pid=5076 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.948311 kernel: audit: type=1104 audit(1761957356.932:1390): pid=5076 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:35:56.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.38:22-10.0.0.1:46672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:35:57.335861 env[1201]: time="2025-11-01T00:35:57.335747749Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:35:57.338995 env[1201]: time="2025-11-01T00:35:57.338908313Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:35:57.339304 kubelet[1990]: E1101 00:35:57.339256 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:35:57.339384 kubelet[1990]: E1101 00:35:57.339319 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:35:57.339540 kubelet[1990]: E1101 00:35:57.339480 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hm4dm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-2k2fp_calico-system(4910ecde-2ad2-41de-b965-b4403e24ea7b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:35:57.340743 kubelet[1990]: E1101 00:35:57.340703 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:36:01.938927 systemd[1]: Started sshd@14-10.0.0.38:22-10.0.0.1:53202.service. Nov 1 00:36:01.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.38:22-10.0.0.1:53202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:01.940630 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:36:01.940690 kernel: audit: type=1130 audit(1761957361.938:1392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.38:22-10.0.0.1:53202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:01.978000 audit[5091]: USER_ACCT pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:01.979677 sshd[5091]: Accepted publickey for core from 10.0.0.1 port 53202 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:01.981721 sshd[5091]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:01.986219 systemd[1]: Started session-15.scope. Nov 1 00:36:01.986679 systemd-logind[1187]: New session 15 of user core. Nov 1 00:36:02.015967 kernel: audit: type=1101 audit(1761957361.978:1393): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:01.980000 audit[5091]: CRED_ACQ pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:02.064875 kernel: audit: type=1103 audit(1761957361.980:1394): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:02.065075 kernel: audit: type=1006 audit(1761957361.980:1395): pid=5091 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:36:02.065110 kernel: audit: type=1300 audit(1761957361.980:1395): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7c5e94a0 a2=3 a3=0 items=0 ppid=1 pid=5091 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:01.980000 audit[5091]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7c5e94a0 a2=3 a3=0 items=0 ppid=1 pid=5091 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:01.980000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:02.085070 kernel: audit: type=1327 audit(1761957361.980:1395): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:02.085302 kernel: audit: type=1105 audit(1761957361.990:1396): pid=5091 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:01.990000 audit[5091]: USER_START pid=5091 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:02.094283 kernel: audit: type=1103 audit(1761957361.991:1397): pid=5093 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:01.991000 audit[5093]: CRED_ACQ pid=5093 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:02.274085 kubelet[1990]: E1101 00:36:02.273946 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fdfb546bf-7b46l" podUID="ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7" Nov 1 00:36:02.388185 sshd[5091]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:02.388000 audit[5091]: USER_END pid=5091 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:02.391685 systemd[1]: sshd@14-10.0.0.38:22-10.0.0.1:53202.service: Deactivated successfully. Nov 1 00:36:02.392665 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:36:02.393226 systemd-logind[1187]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:36:02.393980 systemd-logind[1187]: Removed session 15. Nov 1 00:36:02.388000 audit[5091]: CRED_DISP pid=5091 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:02.441746 kernel: audit: type=1106 audit(1761957362.388:1398): pid=5091 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:02.441816 kernel: audit: type=1104 audit(1761957362.388:1399): pid=5091 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:02.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.38:22-10.0.0.1:53202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:04.273239 kubelet[1990]: E1101 00:36:04.273151 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:36:04.273798 kubelet[1990]: E1101 00:36:04.273564 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:36:06.272711 kubelet[1990]: E1101 00:36:06.272654 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:36:07.392933 systemd[1]: Started sshd@15-10.0.0.38:22-10.0.0.1:53212.service. Nov 1 00:36:07.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.38:22-10.0.0.1:53212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:07.395135 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:36:07.395195 kernel: audit: type=1130 audit(1761957367.392:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.38:22-10.0.0.1:53212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:07.656000 audit[5133]: USER_ACCT pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.658150 sshd[5133]: Accepted publickey for core from 10.0.0.1 port 53212 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:07.686214 sshd[5133]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:07.691820 systemd-logind[1187]: New session 16 of user core. Nov 1 00:36:07.663000 audit[5133]: CRED_ACQ pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.692714 systemd[1]: Started session-16.scope. Nov 1 00:36:07.698705 kernel: audit: type=1101 audit(1761957367.656:1402): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.698841 kernel: audit: type=1103 audit(1761957367.663:1403): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.698863 kernel: audit: type=1006 audit(1761957367.663:1404): pid=5133 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:36:07.663000 audit[5133]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd64ca1180 a2=3 a3=0 items=0 ppid=1 pid=5133 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:07.790428 kernel: audit: type=1300 audit(1761957367.663:1404): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd64ca1180 a2=3 a3=0 items=0 ppid=1 pid=5133 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:07.663000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:07.793507 kernel: audit: type=1327 audit(1761957367.663:1404): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:07.696000 audit[5133]: USER_START pid=5133 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.803100 kernel: audit: type=1105 audit(1761957367.696:1405): pid=5133 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.803243 kernel: audit: type=1103 audit(1761957367.698:1406): pid=5136 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.698000 audit[5136]: CRED_ACQ pid=5136 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.897305 sshd[5133]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:07.897000 audit[5133]: USER_END pid=5133 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.899881 systemd[1]: sshd@15-10.0.0.38:22-10.0.0.1:53212.service: Deactivated successfully. Nov 1 00:36:07.900737 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:36:07.901484 systemd-logind[1187]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:36:07.902222 systemd-logind[1187]: Removed session 16. Nov 1 00:36:07.897000 audit[5133]: CRED_DISP pid=5133 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.982512 kernel: audit: type=1106 audit(1761957367.897:1407): pid=5133 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.982612 kernel: audit: type=1104 audit(1761957367.897:1408): pid=5133 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:07.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.38:22-10.0.0.1:53212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:09.273962 kubelet[1990]: E1101 00:36:09.273885 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:36:09.274699 kubelet[1990]: E1101 00:36:09.274651 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:36:11.272809 kubelet[1990]: E1101 00:36:11.272761 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:36:12.903976 systemd[1]: Started sshd@16-10.0.0.38:22-10.0.0.1:38774.service. Nov 1 00:36:12.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.38:22-10.0.0.1:38774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:12.910648 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:36:12.910732 kernel: audit: type=1130 audit(1761957372.903:1410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.38:22-10.0.0.1:38774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:12.954000 audit[5147]: USER_ACCT pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:12.955616 sshd[5147]: Accepted publickey for core from 10.0.0.1 port 38774 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:12.958365 sshd[5147]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:12.964136 systemd[1]: Started session-17.scope. Nov 1 00:36:12.964879 systemd-logind[1187]: New session 17 of user core. Nov 1 00:36:12.956000 audit[5147]: CRED_ACQ pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.000826 kernel: audit: type=1101 audit(1761957372.954:1411): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.000896 kernel: audit: type=1103 audit(1761957372.956:1412): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.000947 kernel: audit: type=1006 audit(1761957372.957:1413): pid=5147 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Nov 1 00:36:13.004770 kernel: audit: type=1300 audit(1761957372.957:1413): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb4c44490 a2=3 a3=0 items=0 ppid=1 pid=5147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:12.957000 audit[5147]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb4c44490 a2=3 a3=0 items=0 ppid=1 pid=5147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:13.011735 kernel: audit: type=1327 audit(1761957372.957:1413): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:12.957000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:12.969000 audit[5147]: USER_START pid=5147 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.021404 kernel: audit: type=1105 audit(1761957372.969:1414): pid=5147 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.021455 kernel: audit: type=1103 audit(1761957372.971:1415): pid=5149 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:12.971000 audit[5149]: CRED_ACQ pid=5149 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.260223 sshd[5147]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:13.260000 audit[5147]: USER_END pid=5147 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.263643 systemd[1]: sshd@16-10.0.0.38:22-10.0.0.1:38774.service: Deactivated successfully. Nov 1 00:36:13.264394 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:36:13.264940 systemd-logind[1187]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:36:13.265814 systemd-logind[1187]: Removed session 17. Nov 1 00:36:13.260000 audit[5147]: CRED_DISP pid=5147 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.302322 kernel: audit: type=1106 audit(1761957373.260:1416): pid=5147 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.302465 kernel: audit: type=1104 audit(1761957373.260:1417): pid=5147 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:13.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.38:22-10.0.0.1:38774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:15.272050 kubelet[1990]: E1101 00:36:15.271967 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:36:16.273104 env[1201]: time="2025-11-01T00:36:16.273054384Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:36:17.099425 env[1201]: time="2025-11-01T00:36:17.099332688Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:36:17.159484 env[1201]: time="2025-11-01T00:36:17.159365281Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:36:17.159727 kubelet[1990]: E1101 00:36:17.159668 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:36:17.160104 kubelet[1990]: E1101 00:36:17.159733 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:36:17.160104 kubelet[1990]: E1101 00:36:17.159963 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7bjpr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-r67dj_calico-system(6be34926-dcd9-40d6-b861-04b1dc9bc2fa): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:36:17.161527 kubelet[1990]: E1101 00:36:17.161485 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:36:17.273424 env[1201]: time="2025-11-01T00:36:17.273350559Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:36:17.639097 env[1201]: time="2025-11-01T00:36:17.639020399Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:36:17.640695 env[1201]: time="2025-11-01T00:36:17.640584087Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:36:17.641029 kubelet[1990]: E1101 00:36:17.640954 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:36:17.641134 kubelet[1990]: E1101 00:36:17.641030 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:36:17.641196 kubelet[1990]: E1101 00:36:17.641172 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6902f7d9d27b4bd7b9bbb315bb5ea18c,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-r2vs8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fdfb546bf-7b46l_calico-system(ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:36:17.643337 env[1201]: time="2025-11-01T00:36:17.643286993Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:36:17.955998 env[1201]: time="2025-11-01T00:36:17.955791613Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:36:18.046557 env[1201]: time="2025-11-01T00:36:18.046434461Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:36:18.046822 kubelet[1990]: E1101 00:36:18.046769 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:36:18.046959 kubelet[1990]: E1101 00:36:18.046844 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:36:18.047081 kubelet[1990]: E1101 00:36:18.047020 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-r2vs8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-fdfb546bf-7b46l_calico-system(ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:36:18.048427 kubelet[1990]: E1101 00:36:18.048199 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fdfb546bf-7b46l" podUID="ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7" Nov 1 00:36:18.266050 systemd[1]: Started sshd@17-10.0.0.38:22-10.0.0.1:38784.service. Nov 1 00:36:18.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.38:22-10.0.0.1:38784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:18.268144 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:36:18.268230 kernel: audit: type=1130 audit(1761957378.265:1419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.38:22-10.0.0.1:38784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:18.273881 env[1201]: time="2025-11-01T00:36:18.273443089Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:36:18.311000 audit[5166]: USER_ACCT pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.313088 sshd[5166]: Accepted publickey for core from 10.0.0.1 port 38784 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:18.315476 sshd[5166]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:18.314000 audit[5166]: CRED_ACQ pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.320264 systemd-logind[1187]: New session 18 of user core. Nov 1 00:36:18.321478 systemd[1]: Started session-18.scope. Nov 1 00:36:18.326650 kernel: audit: type=1101 audit(1761957378.311:1420): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.326789 kernel: audit: type=1103 audit(1761957378.314:1421): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.327420 kernel: audit: type=1006 audit(1761957378.314:1422): pid=5166 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Nov 1 00:36:18.330403 kernel: audit: type=1300 audit(1761957378.314:1422): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc57424860 a2=3 a3=0 items=0 ppid=1 pid=5166 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:18.314000 audit[5166]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc57424860 a2=3 a3=0 items=0 ppid=1 pid=5166 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:18.314000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:18.339958 kernel: audit: type=1327 audit(1761957378.314:1422): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:18.340050 kernel: audit: type=1105 audit(1761957378.326:1423): pid=5166 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.326000 audit[5166]: USER_START pid=5166 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.327000 audit[5168]: CRED_ACQ pid=5168 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.354552 kernel: audit: type=1103 audit(1761957378.327:1424): pid=5168 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.460935 sshd[5166]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:18.461000 audit[5166]: USER_END pid=5166 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.465557 systemd[1]: sshd@17-10.0.0.38:22-10.0.0.1:38784.service: Deactivated successfully. Nov 1 00:36:18.466509 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:36:18.467753 systemd-logind[1187]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:36:18.461000 audit[5166]: CRED_DISP pid=5166 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.471509 systemd[1]: Started sshd@18-10.0.0.38:22-10.0.0.1:38798.service. Nov 1 00:36:18.473373 systemd-logind[1187]: Removed session 18. Nov 1 00:36:18.477904 kernel: audit: type=1106 audit(1761957378.461:1425): pid=5166 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.478136 kernel: audit: type=1104 audit(1761957378.461:1426): pid=5166 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.38:22-10.0.0.1:38784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:18.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.38:22-10.0.0.1:38798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:18.517000 audit[5180]: USER_ACCT pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.518884 sshd[5180]: Accepted publickey for core from 10.0.0.1 port 38798 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:18.519000 audit[5180]: CRED_ACQ pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.519000 audit[5180]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeaa10dde0 a2=3 a3=0 items=0 ppid=1 pid=5180 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:18.519000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:18.520692 sshd[5180]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:18.525274 systemd-logind[1187]: New session 19 of user core. Nov 1 00:36:18.526463 systemd[1]: Started session-19.scope. Nov 1 00:36:18.531000 audit[5180]: USER_START pid=5180 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.533000 audit[5182]: CRED_ACQ pid=5182 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.563579 env[1201]: time="2025-11-01T00:36:18.563482928Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:36:18.570547 env[1201]: time="2025-11-01T00:36:18.570454610Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:36:18.570842 kubelet[1990]: E1101 00:36:18.570769 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:36:18.571224 kubelet[1990]: E1101 00:36:18.570855 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:36:18.571224 kubelet[1990]: E1101 00:36:18.571079 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-t2tjv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5dcb8b9f76-sszbv_calico-system(886fc838-29d7-4a3c-9b62-9bab283716d9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:36:18.572325 kubelet[1990]: E1101 00:36:18.572266 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:36:18.907204 sshd[5180]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:18.907000 audit[5180]: USER_END pid=5180 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.908000 audit[5180]: CRED_DISP pid=5180 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.912357 systemd[1]: Started sshd@19-10.0.0.38:22-10.0.0.1:38808.service. Nov 1 00:36:18.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.38:22-10.0.0.1:38808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:18.913030 systemd[1]: sshd@18-10.0.0.38:22-10.0.0.1:38798.service: Deactivated successfully. Nov 1 00:36:18.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.38:22-10.0.0.1:38798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:18.913957 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:36:18.914751 systemd-logind[1187]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:36:18.915720 systemd-logind[1187]: Removed session 19. Nov 1 00:36:18.956000 audit[5193]: USER_ACCT pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.958029 sshd[5193]: Accepted publickey for core from 10.0.0.1 port 38808 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:18.958000 audit[5193]: CRED_ACQ pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.958000 audit[5193]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd38444f0 a2=3 a3=0 items=0 ppid=1 pid=5193 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:18.958000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:18.959541 sshd[5193]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:18.964693 systemd-logind[1187]: New session 20 of user core. Nov 1 00:36:18.965704 systemd[1]: Started session-20.scope. Nov 1 00:36:18.969000 audit[5193]: USER_START pid=5193 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:18.971000 audit[5196]: CRED_ACQ pid=5196 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:19.278987 env[1201]: time="2025-11-01T00:36:19.278566121Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:36:19.649254 env[1201]: time="2025-11-01T00:36:19.649160182Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:36:19.781163 env[1201]: time="2025-11-01T00:36:19.781027251Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:36:19.781481 kubelet[1990]: E1101 00:36:19.781428 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:36:19.781859 kubelet[1990]: E1101 00:36:19.781498 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:36:19.781859 kubelet[1990]: E1101 00:36:19.781678 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gxdl6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6f9f45dfb7-swg79_calico-apiserver(3c5c0a3b-621a-4eab-add8-e3f35847a66f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:36:19.782980 kubelet[1990]: E1101 00:36:19.782879 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:36:20.273049 env[1201]: time="2025-11-01T00:36:20.272982183Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:36:20.771824 env[1201]: time="2025-11-01T00:36:20.771753540Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:36:20.821362 env[1201]: time="2025-11-01T00:36:20.821240735Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:36:20.821646 kubelet[1990]: E1101 00:36:20.821576 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:36:20.822064 kubelet[1990]: E1101 00:36:20.821646 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:36:20.822064 kubelet[1990]: E1101 00:36:20.821853 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmgnn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6f9f45dfb7-ztpvq_calico-apiserver(c022fb38-382d-4e47-adc4-89eca47cf7eb): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:36:20.823015 kubelet[1990]: E1101 00:36:20.822970 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:36:21.272476 kubelet[1990]: E1101 00:36:21.272418 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:36:21.273627 env[1201]: time="2025-11-01T00:36:21.273577732Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:36:21.673000 audit[5213]: NETFILTER_CFG table=filter:129 family=2 entries=26 op=nft_register_rule pid=5213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:36:21.673000 audit[5213]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffe83c91bf0 a2=0 a3=7ffe83c91bdc items=0 ppid=2104 pid=5213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:21.673000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:36:21.679831 env[1201]: time="2025-11-01T00:36:21.679784273Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:36:21.682000 audit[5213]: NETFILTER_CFG table=nat:130 family=2 entries=20 op=nft_register_rule pid=5213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:36:21.682000 audit[5213]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe83c91bf0 a2=0 a3=0 items=0 ppid=2104 pid=5213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:21.682000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:36:21.842748 env[1201]: time="2025-11-01T00:36:21.842612213Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:36:21.843348 kubelet[1990]: E1101 00:36:21.843029 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:36:21.843348 kubelet[1990]: E1101 00:36:21.843094 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:36:21.843348 kubelet[1990]: E1101 00:36:21.843256 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hm4dm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-2k2fp_calico-system(4910ecde-2ad2-41de-b965-b4403e24ea7b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:36:21.845400 env[1201]: time="2025-11-01T00:36:21.845371677Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:36:22.048000 audit[5215]: NETFILTER_CFG table=filter:131 family=2 entries=38 op=nft_register_rule pid=5215 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:36:22.048000 audit[5215]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffcd196f860 a2=0 a3=7ffcd196f84c items=0 ppid=2104 pid=5215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:22.048000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:36:22.053000 audit[5215]: NETFILTER_CFG table=nat:132 family=2 entries=20 op=nft_register_rule pid=5215 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:36:22.053000 audit[5215]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffcd196f860 a2=0 a3=0 items=0 ppid=2104 pid=5215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:22.053000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:36:22.198532 sshd[5193]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:22.199000 audit[5193]: USER_END pid=5193 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:22.199000 audit[5193]: CRED_DISP pid=5193 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:22.202695 systemd[1]: sshd@19-10.0.0.38:22-10.0.0.1:38808.service: Deactivated successfully. Nov 1 00:36:22.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.38:22-10.0.0.1:38808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:22.204461 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:36:22.205181 systemd-logind[1187]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:36:22.207615 systemd[1]: Started sshd@20-10.0.0.38:22-10.0.0.1:49496.service. Nov 1 00:36:22.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.38:22-10.0.0.1:49496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:22.208815 systemd-logind[1187]: Removed session 20. Nov 1 00:36:22.252000 audit[5218]: USER_ACCT pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:22.254200 sshd[5218]: Accepted publickey for core from 10.0.0.1 port 49496 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:22.254000 audit[5218]: CRED_ACQ pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:22.254000 audit[5218]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6e2e6960 a2=3 a3=0 items=0 ppid=1 pid=5218 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:22.254000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:22.255514 sshd[5218]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:22.262220 systemd-logind[1187]: New session 21 of user core. Nov 1 00:36:22.263738 systemd[1]: Started session-21.scope. Nov 1 00:36:22.269000 audit[5218]: USER_START pid=5218 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:22.271000 audit[5220]: CRED_ACQ pid=5220 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:22.278209 env[1201]: time="2025-11-01T00:36:22.278133781Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:36:22.302816 env[1201]: time="2025-11-01T00:36:22.302631642Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:36:22.303383 kubelet[1990]: E1101 00:36:22.303103 1990 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:36:22.303383 kubelet[1990]: E1101 00:36:22.303149 1990 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:36:22.303383 kubelet[1990]: E1101 00:36:22.303288 1990 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hm4dm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-2k2fp_calico-system(4910ecde-2ad2-41de-b965-b4403e24ea7b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:36:22.304528 kubelet[1990]: E1101 00:36:22.304481 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:36:23.442074 sshd[5218]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:23.442000 audit[5218]: USER_END pid=5218 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.446976 kernel: kauditd_printk_skb: 43 callbacks suppressed Nov 1 00:36:23.447113 kernel: audit: type=1106 audit(1761957383.442:1456): pid=5218 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.445973 systemd[1]: sshd@20-10.0.0.38:22-10.0.0.1:49496.service: Deactivated successfully. Nov 1 00:36:23.446818 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:36:23.447767 systemd-logind[1187]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:36:23.449548 systemd[1]: Started sshd@21-10.0.0.38:22-10.0.0.1:49500.service. Nov 1 00:36:23.452054 systemd-logind[1187]: Removed session 21. Nov 1 00:36:23.442000 audit[5218]: CRED_DISP pid=5218 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.472457 kernel: audit: type=1104 audit(1761957383.442:1457): pid=5218 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.472621 kernel: audit: type=1131 audit(1761957383.445:1458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.38:22-10.0.0.1:49496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:23.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.38:22-10.0.0.1:49496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:23.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.38:22-10.0.0.1:49500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:23.491998 kernel: audit: type=1130 audit(1761957383.448:1459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.38:22-10.0.0.1:49500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:23.520684 sshd[5229]: Accepted publickey for core from 10.0.0.1 port 49500 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:23.519000 audit[5229]: USER_ACCT pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.526758 sshd[5229]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:23.531951 kernel: audit: type=1101 audit(1761957383.519:1460): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.525000 audit[5229]: CRED_ACQ pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.539545 systemd[1]: Started session-22.scope. Nov 1 00:36:23.541128 systemd-logind[1187]: New session 22 of user core. Nov 1 00:36:23.545970 kernel: audit: type=1103 audit(1761957383.525:1461): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.546101 kernel: audit: type=1006 audit(1761957383.525:1462): pid=5229 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Nov 1 00:36:23.525000 audit[5229]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd91125a40 a2=3 a3=0 items=0 ppid=1 pid=5229 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:23.561016 kernel: audit: type=1300 audit(1761957383.525:1462): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd91125a40 a2=3 a3=0 items=0 ppid=1 pid=5229 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:23.525000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:23.564153 kernel: audit: type=1327 audit(1761957383.525:1462): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:23.564254 kernel: audit: type=1105 audit(1761957383.546:1463): pid=5229 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.546000 audit[5229]: USER_START pid=5229 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.548000 audit[5231]: CRED_ACQ pid=5231 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.750893 sshd[5229]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:23.751000 audit[5229]: USER_END pid=5229 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.751000 audit[5229]: CRED_DISP pid=5229 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:23.754614 systemd[1]: sshd@21-10.0.0.38:22-10.0.0.1:49500.service: Deactivated successfully. Nov 1 00:36:23.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.38:22-10.0.0.1:49500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:23.755542 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:36:23.756576 systemd-logind[1187]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:36:23.757627 systemd-logind[1187]: Removed session 22. Nov 1 00:36:28.755716 systemd[1]: Started sshd@22-10.0.0.38:22-10.0.0.1:49516.service. Nov 1 00:36:28.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.38:22-10.0.0.1:49516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:28.795359 kernel: kauditd_printk_skb: 4 callbacks suppressed Nov 1 00:36:28.795434 kernel: audit: type=1130 audit(1761957388.754:1468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.38:22-10.0.0.1:49516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:28.834000 audit[5242]: USER_ACCT pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.835871 sshd[5242]: Accepted publickey for core from 10.0.0.1 port 49516 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:28.839326 sshd[5242]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:28.843660 systemd-logind[1187]: New session 23 of user core. Nov 1 00:36:28.844051 systemd[1]: Started session-23.scope. Nov 1 00:36:28.838000 audit[5242]: CRED_ACQ pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.914165 kernel: audit: type=1101 audit(1761957388.834:1469): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.914255 kernel: audit: type=1103 audit(1761957388.838:1470): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.914316 kernel: audit: type=1006 audit(1761957388.838:1471): pid=5242 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:36:28.918489 kernel: audit: type=1300 audit(1761957388.838:1471): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceec71e40 a2=3 a3=0 items=0 ppid=1 pid=5242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:28.838000 audit[5242]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceec71e40 a2=3 a3=0 items=0 ppid=1 pid=5242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:28.838000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:28.929583 kernel: audit: type=1327 audit(1761957388.838:1471): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:28.929711 kernel: audit: type=1105 audit(1761957388.848:1472): pid=5242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.848000 audit[5242]: USER_START pid=5242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.849000 audit[5244]: CRED_ACQ pid=5244 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.945486 kernel: audit: type=1103 audit(1761957388.849:1473): pid=5244 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.989486 sshd[5242]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:28.989000 audit[5242]: USER_END pid=5242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.993269 systemd[1]: sshd@22-10.0.0.38:22-10.0.0.1:49516.service: Deactivated successfully. Nov 1 00:36:28.994081 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:36:28.995629 systemd-logind[1187]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:36:28.996860 systemd-logind[1187]: Removed session 23. Nov 1 00:36:28.990000 audit[5242]: CRED_DISP pid=5242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:29.019778 kernel: audit: type=1106 audit(1761957388.989:1474): pid=5242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:29.019861 kernel: audit: type=1104 audit(1761957388.990:1475): pid=5242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:28.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.38:22-10.0.0.1:49516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:31.274261 kubelet[1990]: E1101 00:36:31.274200 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:36:32.273475 kubelet[1990]: E1101 00:36:32.273395 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:36:33.274230 kubelet[1990]: E1101 00:36:33.274095 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:36:33.274731 kubelet[1990]: E1101 00:36:33.274691 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fdfb546bf-7b46l" podUID="ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7" Nov 1 00:36:33.994954 systemd[1]: Started sshd@23-10.0.0.38:22-10.0.0.1:43292.service. Nov 1 00:36:33.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.38:22-10.0.0.1:43292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:33.996759 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:36:33.996814 kernel: audit: type=1130 audit(1761957393.994:1477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.38:22-10.0.0.1:43292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:34.032000 audit[5255]: USER_ACCT pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.033449 sshd[5255]: Accepted publickey for core from 10.0.0.1 port 43292 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:34.035507 sshd[5255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:34.039039 systemd-logind[1187]: New session 24 of user core. Nov 1 00:36:34.039444 systemd[1]: Started session-24.scope. Nov 1 00:36:34.034000 audit[5255]: CRED_ACQ pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.094324 kernel: audit: type=1101 audit(1761957394.032:1478): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.094484 kernel: audit: type=1103 audit(1761957394.034:1479): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.094510 kernel: audit: type=1006 audit(1761957394.034:1480): pid=5255 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Nov 1 00:36:34.098264 kernel: audit: type=1300 audit(1761957394.034:1480): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedcb928b0 a2=3 a3=0 items=0 ppid=1 pid=5255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:34.034000 audit[5255]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedcb928b0 a2=3 a3=0 items=0 ppid=1 pid=5255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:34.034000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:34.107337 kernel: audit: type=1327 audit(1761957394.034:1480): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:34.107438 kernel: audit: type=1105 audit(1761957394.042:1481): pid=5255 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.042000 audit[5255]: USER_START pid=5255 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.044000 audit[5257]: CRED_ACQ pid=5257 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.120393 kernel: audit: type=1103 audit(1761957394.044:1482): pid=5257 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.163000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:34.163000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:34.193835 kernel: audit: type=1400 audit(1761957394.163:1483): avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:34.194002 kernel: audit: type=1400 audit(1761957394.163:1484): avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:34.163000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002afec00 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:36:34.163000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:36:34.163000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0030ec1e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:36:34.163000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:36:34.273017 kubelet[1990]: E1101 00:36:34.272861 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:36:34.504118 sshd[5255]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:34.504000 audit[5255]: USER_END pid=5255 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.504000 audit[5255]: CRED_DISP pid=5255 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:34.506820 systemd[1]: sshd@23-10.0.0.38:22-10.0.0.1:43292.service: Deactivated successfully. Nov 1 00:36:34.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.38:22-10.0.0.1:43292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:34.507929 systemd-logind[1187]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:36:34.508046 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:36:34.508722 systemd-logind[1187]: Removed session 24. Nov 1 00:36:34.558876 kubelet[1990]: E1101 00:36:34.558840 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:36:35.121000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:35.121000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00383ef90 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:36:35.121000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:36:35.122000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:35.122000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00383f290 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:36:35.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:36:35.122000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:35.122000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00383f2f0 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:36:35.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:36:35.122000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:35.122000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:35.122000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c00fadf350 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:36:35.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:36:35.122000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c0071a0f00 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:36:35.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:36:35.122000 audit[1860]: AVC avc: denied { watch } for pid=1860 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:35.122000 audit[1860]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c0071a0f40 a2=fc6 a3=0 items=0 ppid=1697 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c662,c666 key=(null) Nov 1 00:36:35.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:36:36.272889 kubelet[1990]: E1101 00:36:36.272834 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:36:36.274262 kubelet[1990]: E1101 00:36:36.274220 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b" Nov 1 00:36:38.268000 audit[5290]: NETFILTER_CFG table=filter:133 family=2 entries=26 op=nft_register_rule pid=5290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:36:38.268000 audit[5290]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdd40a2fa0 a2=0 a3=7ffdd40a2f8c items=0 ppid=2104 pid=5290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:38.268000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:36:38.276000 audit[5290]: NETFILTER_CFG table=nat:134 family=2 entries=104 op=nft_register_chain pid=5290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:36:38.276000 audit[5290]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffdd40a2fa0 a2=0 a3=7ffdd40a2f8c items=0 ppid=2104 pid=5290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:38.276000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:36:39.272475 kubelet[1990]: E1101 00:36:39.272411 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:36:39.519671 kernel: kauditd_printk_skb: 31 callbacks suppressed Nov 1 00:36:39.519835 kernel: audit: type=1130 audit(1761957399.508:1496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.38:22-10.0.0.1:43302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:39.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.38:22-10.0.0.1:43302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:39.509552 systemd[1]: Started sshd@24-10.0.0.38:22-10.0.0.1:43302.service. Nov 1 00:36:39.573000 audit[5292]: USER_ACCT pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.583237 kernel: audit: type=1101 audit(1761957399.573:1497): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.576313 sshd[5292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:39.574000 audit[5292]: CRED_ACQ pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.583699 sshd[5292]: Accepted publickey for core from 10.0.0.1 port 43302 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:39.586982 systemd-logind[1187]: New session 25 of user core. Nov 1 00:36:39.588095 systemd[1]: Started session-25.scope. Nov 1 00:36:39.595687 kernel: audit: type=1103 audit(1761957399.574:1498): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.595887 kernel: audit: type=1006 audit(1761957399.574:1499): pid=5292 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:36:39.574000 audit[5292]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc889235c0 a2=3 a3=0 items=0 ppid=1 pid=5292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:39.574000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:39.607780 kernel: audit: type=1300 audit(1761957399.574:1499): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc889235c0 a2=3 a3=0 items=0 ppid=1 pid=5292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:39.607909 kernel: audit: type=1327 audit(1761957399.574:1499): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:39.607970 kernel: audit: type=1105 audit(1761957399.592:1500): pid=5292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.592000 audit[5292]: USER_START pid=5292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.617622 kernel: audit: type=1103 audit(1761957399.594:1501): pid=5294 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.594000 audit[5294]: CRED_ACQ pid=5294 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.733072 sshd[5292]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:39.733000 audit[5292]: USER_END pid=5292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.733000 audit[5292]: CRED_DISP pid=5292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.783581 systemd[1]: sshd@24-10.0.0.38:22-10.0.0.1:43302.service: Deactivated successfully. Nov 1 00:36:39.784550 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:36:39.785253 systemd-logind[1187]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:36:39.806772 kernel: audit: type=1106 audit(1761957399.733:1502): pid=5292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.806829 kernel: audit: type=1104 audit(1761957399.733:1503): pid=5292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:39.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.38:22-10.0.0.1:43302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:39.786204 systemd-logind[1187]: Removed session 25. Nov 1 00:36:42.273464 kubelet[1990]: E1101 00:36:42.273409 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-r67dj" podUID="6be34926-dcd9-40d6-b861-04b1dc9bc2fa" Nov 1 00:36:43.274264 kubelet[1990]: E1101 00:36:43.274167 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-swg79" podUID="3c5c0a3b-621a-4eab-add8-e3f35847a66f" Nov 1 00:36:44.738941 systemd[1]: Started sshd@25-10.0.0.38:22-10.0.0.1:37218.service. Nov 1 00:36:44.748019 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:36:44.748184 kernel: audit: type=1130 audit(1761957404.739:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.38:22-10.0.0.1:37218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:44.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.38:22-10.0.0.1:37218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:44.783000 audit[5307]: USER_ACCT pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.785078 sshd[5307]: Accepted publickey for core from 10.0.0.1 port 37218 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:44.786507 sshd[5307]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:44.785000 audit[5307]: CRED_ACQ pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.798168 systemd[1]: Started session-26.scope. Nov 1 00:36:44.799080 systemd-logind[1187]: New session 26 of user core. Nov 1 00:36:44.803133 kernel: audit: type=1101 audit(1761957404.783:1506): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.803216 kernel: audit: type=1103 audit(1761957404.785:1507): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.803243 kernel: audit: type=1006 audit(1761957404.785:1508): pid=5307 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 00:36:44.785000 audit[5307]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5002c2e0 a2=3 a3=0 items=0 ppid=1 pid=5307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:44.817745 kernel: audit: type=1300 audit(1761957404.785:1508): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5002c2e0 a2=3 a3=0 items=0 ppid=1 pid=5307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:44.817876 kernel: audit: type=1327 audit(1761957404.785:1508): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:44.785000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:44.803000 audit[5307]: USER_START pid=5307 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.830215 kernel: audit: type=1105 audit(1761957404.803:1509): pid=5307 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.805000 audit[5309]: CRED_ACQ pid=5309 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.836787 kernel: audit: type=1103 audit(1761957404.805:1510): pid=5309 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.938993 sshd[5307]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:44.939000 audit[5307]: USER_END pid=5307 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.942176 systemd[1]: sshd@25-10.0.0.38:22-10.0.0.1:37218.service: Deactivated successfully. Nov 1 00:36:44.942884 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 00:36:44.943191 systemd-logind[1187]: Session 26 logged out. Waiting for processes to exit. Nov 1 00:36:44.944247 systemd-logind[1187]: Removed session 26. Nov 1 00:36:44.939000 audit[5307]: CRED_DISP pid=5307 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.955527 kernel: audit: type=1106 audit(1761957404.939:1511): pid=5307 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.955709 kernel: audit: type=1104 audit(1761957404.939:1512): pid=5307 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:44.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.38:22-10.0.0.1:37218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:46.887000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:46.887000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:46.887000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00183b080 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:36:46.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:36:46.887000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030edae0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:36:46.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:36:46.888000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:46.888000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000dd68e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:36:46.888000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:36:46.891000 audit[1837]: AVC avc: denied { watch } for pid=1837 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:36:46.891000 audit[1837]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00183b0c0 a2=fc6 a3=0 items=0 ppid=1683 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c793 key=(null) Nov 1 00:36:46.891000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:36:47.273960 kubelet[1990]: E1101 00:36:47.273803 1990 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:36:47.274440 kubelet[1990]: E1101 00:36:47.274404 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6f9f45dfb7-ztpvq" podUID="c022fb38-382d-4e47-adc4-89eca47cf7eb" Nov 1 00:36:47.275137 kubelet[1990]: E1101 00:36:47.275086 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-fdfb546bf-7b46l" podUID="ad4dfbd7-6d22-4478-98d5-f9dedf24c2a7" Nov 1 00:36:48.272700 kubelet[1990]: E1101 00:36:48.272640 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5dcb8b9f76-sszbv" podUID="886fc838-29d7-4a3c-9b62-9bab283716d9" Nov 1 00:36:49.944391 systemd[1]: Started sshd@26-10.0.0.38:22-10.0.0.1:37234.service. Nov 1 00:36:49.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.38:22-10.0.0.1:37234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:49.946587 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:36:49.946668 kernel: audit: type=1130 audit(1761957409.943:1518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.38:22-10.0.0.1:37234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:49.987000 audit[5323]: USER_ACCT pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:49.989964 sshd[5323]: Accepted publickey for core from 10.0.0.1 port 37234 ssh2: RSA SHA256:NQ/pL2fWYvQCjEeRqy6L6UmvNbztCIRYTBTHl6vxSTo Nov 1 00:36:49.990912 sshd[5323]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:36:50.003139 kernel: audit: type=1101 audit(1761957409.987:1519): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.003260 kernel: audit: type=1103 audit(1761957409.989:1520): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:49.989000 audit[5323]: CRED_ACQ pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.003344 systemd-logind[1187]: New session 27 of user core. Nov 1 00:36:50.004451 systemd[1]: Started session-27.scope. Nov 1 00:36:49.989000 audit[5323]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff96737030 a2=3 a3=0 items=0 ppid=1 pid=5323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:50.016634 kernel: audit: type=1006 audit(1761957409.989:1521): pid=5323 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Nov 1 00:36:50.016705 kernel: audit: type=1300 audit(1761957409.989:1521): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff96737030 a2=3 a3=0 items=0 ppid=1 pid=5323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:36:49.989000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:50.019633 kernel: audit: type=1327 audit(1761957409.989:1521): proctitle=737368643A20636F7265205B707269765D Nov 1 00:36:50.011000 audit[5323]: USER_START pid=5323 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.027107 kernel: audit: type=1105 audit(1761957410.011:1522): pid=5323 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.027152 kernel: audit: type=1103 audit(1761957410.013:1523): pid=5325 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.013000 audit[5325]: CRED_ACQ pid=5325 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.132701 sshd[5323]: pam_unix(sshd:session): session closed for user core Nov 1 00:36:50.133000 audit[5323]: USER_END pid=5323 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.135881 systemd[1]: sshd@26-10.0.0.38:22-10.0.0.1:37234.service: Deactivated successfully. Nov 1 00:36:50.136859 systemd[1]: session-27.scope: Deactivated successfully. Nov 1 00:36:50.144303 kernel: audit: type=1106 audit(1761957410.133:1524): pid=5323 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.133000 audit[5323]: CRED_DISP pid=5323 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:50.144845 systemd-logind[1187]: Session 27 logged out. Waiting for processes to exit. Nov 1 00:36:50.147482 systemd-logind[1187]: Removed session 27. Nov 1 00:36:50.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.38:22-10.0.0.1:37234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:36:50.151966 kernel: audit: type=1104 audit(1761957410.133:1525): pid=5323 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:36:51.273584 kubelet[1990]: E1101 00:36:51.273521 1990 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-2k2fp" podUID="4910ecde-2ad2-41de-b965-b4403e24ea7b"