Nov 1 00:52:52.897416 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Oct 31 23:02:53 -00 2025 Nov 1 00:52:52.897435 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:52:52.897443 kernel: BIOS-provided physical RAM map: Nov 1 00:52:52.897448 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Nov 1 00:52:52.897454 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Nov 1 00:52:52.897459 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Nov 1 00:52:52.897465 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Nov 1 00:52:52.897471 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Nov 1 00:52:52.897477 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Nov 1 00:52:52.897483 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Nov 1 00:52:52.897488 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Nov 1 00:52:52.897493 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Nov 1 00:52:52.897499 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Nov 1 00:52:52.897504 kernel: NX (Execute Disable) protection: active Nov 1 00:52:52.897512 kernel: SMBIOS 2.8 present. Nov 1 00:52:52.897518 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Nov 1 00:52:52.897524 kernel: Hypervisor detected: KVM Nov 1 00:52:52.897530 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Nov 1 00:52:52.897535 kernel: kvm-clock: cpu 0, msr 921a0001, primary cpu clock Nov 1 00:52:52.897541 kernel: kvm-clock: using sched offset of 3067414506 cycles Nov 1 00:52:52.897547 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Nov 1 00:52:52.897553 kernel: tsc: Detected 2794.748 MHz processor Nov 1 00:52:52.897559 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Nov 1 00:52:52.897567 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Nov 1 00:52:52.897573 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Nov 1 00:52:52.897579 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Nov 1 00:52:52.897585 kernel: Using GB pages for direct mapping Nov 1 00:52:52.897591 kernel: ACPI: Early table checksum verification disabled Nov 1 00:52:52.897596 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Nov 1 00:52:52.897602 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:52:52.897608 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:52:52.897624 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:52:52.897632 kernel: ACPI: FACS 0x000000009CFE0000 000040 Nov 1 00:52:52.897638 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:52:52.897644 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:52:52.897650 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:52:52.897656 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:52:52.897662 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Nov 1 00:52:52.897668 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Nov 1 00:52:52.897674 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Nov 1 00:52:52.897684 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Nov 1 00:52:52.897690 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Nov 1 00:52:52.897696 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Nov 1 00:52:52.897703 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Nov 1 00:52:52.897709 kernel: No NUMA configuration found Nov 1 00:52:52.897715 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Nov 1 00:52:52.897723 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Nov 1 00:52:52.897729 kernel: Zone ranges: Nov 1 00:52:52.897735 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Nov 1 00:52:52.897742 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Nov 1 00:52:52.897748 kernel: Normal empty Nov 1 00:52:52.897754 kernel: Movable zone start for each node Nov 1 00:52:52.897760 kernel: Early memory node ranges Nov 1 00:52:52.897767 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Nov 1 00:52:52.897773 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Nov 1 00:52:52.897780 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Nov 1 00:52:52.897787 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Nov 1 00:52:52.897793 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Nov 1 00:52:52.897799 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Nov 1 00:52:52.897806 kernel: ACPI: PM-Timer IO Port: 0x608 Nov 1 00:52:52.897812 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Nov 1 00:52:52.897818 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Nov 1 00:52:52.897825 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Nov 1 00:52:52.897831 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Nov 1 00:52:52.897837 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Nov 1 00:52:52.897845 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Nov 1 00:52:52.897851 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Nov 1 00:52:52.897857 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Nov 1 00:52:52.897864 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Nov 1 00:52:52.897870 kernel: TSC deadline timer available Nov 1 00:52:52.897876 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Nov 1 00:52:52.897883 kernel: kvm-guest: KVM setup pv remote TLB flush Nov 1 00:52:52.897889 kernel: kvm-guest: setup PV sched yield Nov 1 00:52:52.897895 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Nov 1 00:52:52.897903 kernel: Booting paravirtualized kernel on KVM Nov 1 00:52:52.897909 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Nov 1 00:52:52.897916 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Nov 1 00:52:52.897922 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Nov 1 00:52:52.897928 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Nov 1 00:52:52.897935 kernel: pcpu-alloc: [0] 0 1 2 3 Nov 1 00:52:52.897941 kernel: kvm-guest: setup async PF for cpu 0 Nov 1 00:52:52.897947 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Nov 1 00:52:52.897953 kernel: kvm-guest: PV spinlocks enabled Nov 1 00:52:52.897961 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Nov 1 00:52:52.897967 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Nov 1 00:52:52.897974 kernel: Policy zone: DMA32 Nov 1 00:52:52.897981 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:52:52.897988 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:52:52.897994 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:52:52.898001 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:52:52.898007 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:52:52.898015 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47496K init, 4084K bss, 134796K reserved, 0K cma-reserved) Nov 1 00:52:52.898021 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Nov 1 00:52:52.898028 kernel: ftrace: allocating 34614 entries in 136 pages Nov 1 00:52:52.898034 kernel: ftrace: allocated 136 pages with 2 groups Nov 1 00:52:52.898040 kernel: rcu: Hierarchical RCU implementation. Nov 1 00:52:52.898047 kernel: rcu: RCU event tracing is enabled. Nov 1 00:52:52.898053 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Nov 1 00:52:52.898060 kernel: Rude variant of Tasks RCU enabled. Nov 1 00:52:52.898066 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:52:52.898074 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:52:52.898081 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Nov 1 00:52:52.898087 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Nov 1 00:52:52.898093 kernel: random: crng init done Nov 1 00:52:52.898099 kernel: Console: colour VGA+ 80x25 Nov 1 00:52:52.898106 kernel: printk: console [ttyS0] enabled Nov 1 00:52:52.898112 kernel: ACPI: Core revision 20210730 Nov 1 00:52:52.898119 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Nov 1 00:52:52.898125 kernel: APIC: Switch to symmetric I/O mode setup Nov 1 00:52:52.898143 kernel: x2apic enabled Nov 1 00:52:52.898150 kernel: Switched APIC routing to physical x2apic. Nov 1 00:52:52.898156 kernel: kvm-guest: setup PV IPIs Nov 1 00:52:52.898162 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Nov 1 00:52:52.898169 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Nov 1 00:52:52.898175 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Nov 1 00:52:52.898182 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Nov 1 00:52:52.898188 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Nov 1 00:52:52.898194 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Nov 1 00:52:52.898207 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Nov 1 00:52:52.898214 kernel: Spectre V2 : Mitigation: Retpolines Nov 1 00:52:52.898220 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Nov 1 00:52:52.898228 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Nov 1 00:52:52.898235 kernel: active return thunk: retbleed_return_thunk Nov 1 00:52:52.898241 kernel: RETBleed: Mitigation: untrained return thunk Nov 1 00:52:52.898248 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Nov 1 00:52:52.898255 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Nov 1 00:52:52.898262 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Nov 1 00:52:52.898270 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Nov 1 00:52:52.898277 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Nov 1 00:52:52.898283 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Nov 1 00:52:52.898290 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Nov 1 00:52:52.898297 kernel: Freeing SMP alternatives memory: 32K Nov 1 00:52:52.898304 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:52:52.898310 kernel: LSM: Security Framework initializing Nov 1 00:52:52.898318 kernel: SELinux: Initializing. Nov 1 00:52:52.898325 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:52:52.898332 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:52:52.898338 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Nov 1 00:52:52.898345 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Nov 1 00:52:52.898352 kernel: ... version: 0 Nov 1 00:52:52.898359 kernel: ... bit width: 48 Nov 1 00:52:52.898365 kernel: ... generic registers: 6 Nov 1 00:52:52.898372 kernel: ... value mask: 0000ffffffffffff Nov 1 00:52:52.898379 kernel: ... max period: 00007fffffffffff Nov 1 00:52:52.898386 kernel: ... fixed-purpose events: 0 Nov 1 00:52:52.898393 kernel: ... event mask: 000000000000003f Nov 1 00:52:52.898400 kernel: signal: max sigframe size: 1776 Nov 1 00:52:52.898406 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:52:52.898413 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:52:52.898419 kernel: x86: Booting SMP configuration: Nov 1 00:52:52.898426 kernel: .... node #0, CPUs: #1 Nov 1 00:52:52.898433 kernel: kvm-clock: cpu 1, msr 921a0041, secondary cpu clock Nov 1 00:52:52.898439 kernel: kvm-guest: setup async PF for cpu 1 Nov 1 00:52:52.898447 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Nov 1 00:52:52.898454 kernel: #2 Nov 1 00:52:52.898460 kernel: kvm-clock: cpu 2, msr 921a0081, secondary cpu clock Nov 1 00:52:52.898467 kernel: kvm-guest: setup async PF for cpu 2 Nov 1 00:52:52.898474 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Nov 1 00:52:52.898480 kernel: #3 Nov 1 00:52:52.898487 kernel: kvm-clock: cpu 3, msr 921a00c1, secondary cpu clock Nov 1 00:52:52.898493 kernel: kvm-guest: setup async PF for cpu 3 Nov 1 00:52:52.898500 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Nov 1 00:52:52.898508 kernel: smp: Brought up 1 node, 4 CPUs Nov 1 00:52:52.898515 kernel: smpboot: Max logical packages: 1 Nov 1 00:52:52.898521 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Nov 1 00:52:52.898528 kernel: devtmpfs: initialized Nov 1 00:52:52.898535 kernel: x86/mm: Memory block size: 128MB Nov 1 00:52:52.898542 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:52:52.898548 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Nov 1 00:52:52.898555 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:52:52.898562 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:52:52.898569 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:52:52.898576 kernel: audit: type=2000 audit(1761958372.409:1): state=initialized audit_enabled=0 res=1 Nov 1 00:52:52.898583 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:52:52.898590 kernel: thermal_sys: Registered thermal governor 'user_space' Nov 1 00:52:52.898596 kernel: cpuidle: using governor menu Nov 1 00:52:52.898603 kernel: ACPI: bus type PCI registered Nov 1 00:52:52.898610 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:52:52.898623 kernel: dca service started, version 1.12.1 Nov 1 00:52:52.898630 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Nov 1 00:52:52.898638 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Nov 1 00:52:52.898645 kernel: PCI: Using configuration type 1 for base access Nov 1 00:52:52.898652 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Nov 1 00:52:52.898658 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:52:52.898665 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:52:52.898672 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:52:52.898679 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:52:52.898686 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:52:52.898693 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:52:52.898700 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:52:52.898707 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:52:52.898714 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:52:52.898721 kernel: ACPI: Interpreter enabled Nov 1 00:52:52.898727 kernel: ACPI: PM: (supports S0 S3 S5) Nov 1 00:52:52.898734 kernel: ACPI: Using IOAPIC for interrupt routing Nov 1 00:52:52.898741 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Nov 1 00:52:52.898747 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Nov 1 00:52:52.898754 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Nov 1 00:52:52.898860 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Nov 1 00:52:52.898931 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Nov 1 00:52:52.898998 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Nov 1 00:52:52.899006 kernel: PCI host bridge to bus 0000:00 Nov 1 00:52:52.899076 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Nov 1 00:52:52.899150 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Nov 1 00:52:52.899215 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Nov 1 00:52:52.899275 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Nov 1 00:52:52.899334 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Nov 1 00:52:52.899395 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Nov 1 00:52:52.899454 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Nov 1 00:52:52.899536 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Nov 1 00:52:52.899614 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Nov 1 00:52:52.899697 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Nov 1 00:52:52.899764 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Nov 1 00:52:52.899831 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Nov 1 00:52:52.899897 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Nov 1 00:52:52.899972 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Nov 1 00:52:52.900041 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Nov 1 00:52:52.900113 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Nov 1 00:52:52.900197 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Nov 1 00:52:52.900271 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Nov 1 00:52:52.900339 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Nov 1 00:52:52.900406 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Nov 1 00:52:52.900472 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Nov 1 00:52:52.900547 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Nov 1 00:52:52.900624 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Nov 1 00:52:52.900698 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Nov 1 00:52:52.900765 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Nov 1 00:52:52.900831 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Nov 1 00:52:52.900908 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Nov 1 00:52:52.900976 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Nov 1 00:52:52.901049 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Nov 1 00:52:52.901118 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Nov 1 00:52:52.901198 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Nov 1 00:52:52.901288 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Nov 1 00:52:52.901356 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Nov 1 00:52:52.901365 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Nov 1 00:52:52.901372 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Nov 1 00:52:52.901379 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Nov 1 00:52:52.901386 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Nov 1 00:52:52.901395 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Nov 1 00:52:52.901402 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Nov 1 00:52:52.901408 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Nov 1 00:52:52.901415 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Nov 1 00:52:52.901422 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Nov 1 00:52:52.901429 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Nov 1 00:52:52.901435 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Nov 1 00:52:52.901442 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Nov 1 00:52:52.901448 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Nov 1 00:52:52.901456 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Nov 1 00:52:52.901463 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Nov 1 00:52:52.901470 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Nov 1 00:52:52.901476 kernel: iommu: Default domain type: Translated Nov 1 00:52:52.901483 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Nov 1 00:52:52.901549 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Nov 1 00:52:52.901624 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Nov 1 00:52:52.901692 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Nov 1 00:52:52.901704 kernel: vgaarb: loaded Nov 1 00:52:52.901711 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:52:52.901718 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:52:52.901724 kernel: PTP clock support registered Nov 1 00:52:52.901731 kernel: PCI: Using ACPI for IRQ routing Nov 1 00:52:52.901738 kernel: PCI: pci_cache_line_size set to 64 bytes Nov 1 00:52:52.901744 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Nov 1 00:52:52.901751 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Nov 1 00:52:52.901758 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Nov 1 00:52:52.901766 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Nov 1 00:52:52.901773 kernel: clocksource: Switched to clocksource kvm-clock Nov 1 00:52:52.901779 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:52:52.901786 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:52:52.901793 kernel: pnp: PnP ACPI init Nov 1 00:52:52.901870 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Nov 1 00:52:52.901880 kernel: pnp: PnP ACPI: found 6 devices Nov 1 00:52:52.901887 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Nov 1 00:52:52.901896 kernel: NET: Registered PF_INET protocol family Nov 1 00:52:52.901903 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:52:52.901910 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Nov 1 00:52:52.901916 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:52:52.901923 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:52:52.901930 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Nov 1 00:52:52.901937 kernel: TCP: Hash tables configured (established 32768 bind 32768) Nov 1 00:52:52.901943 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:52:52.901950 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:52:52.901958 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:52:52.901965 kernel: NET: Registered PF_XDP protocol family Nov 1 00:52:52.902025 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Nov 1 00:52:52.902085 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Nov 1 00:52:52.902155 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Nov 1 00:52:52.902216 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Nov 1 00:52:52.902280 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Nov 1 00:52:52.902339 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Nov 1 00:52:52.902348 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:52:52.902357 kernel: Initialise system trusted keyrings Nov 1 00:52:52.902364 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Nov 1 00:52:52.902371 kernel: Key type asymmetric registered Nov 1 00:52:52.902377 kernel: Asymmetric key parser 'x509' registered Nov 1 00:52:52.902384 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:52:52.902391 kernel: io scheduler mq-deadline registered Nov 1 00:52:52.902397 kernel: io scheduler kyber registered Nov 1 00:52:52.902404 kernel: io scheduler bfq registered Nov 1 00:52:52.902411 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Nov 1 00:52:52.902419 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Nov 1 00:52:52.902426 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Nov 1 00:52:52.902433 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Nov 1 00:52:52.902439 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:52:52.902446 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Nov 1 00:52:52.902453 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Nov 1 00:52:52.902460 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Nov 1 00:52:52.902467 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Nov 1 00:52:52.902535 kernel: rtc_cmos 00:04: RTC can wake from S4 Nov 1 00:52:52.902547 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Nov 1 00:52:52.902608 kernel: rtc_cmos 00:04: registered as rtc0 Nov 1 00:52:52.902683 kernel: rtc_cmos 00:04: setting system clock to 2025-11-01T00:52:52 UTC (1761958372) Nov 1 00:52:52.902744 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Nov 1 00:52:52.902753 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:52:52.902760 kernel: Segment Routing with IPv6 Nov 1 00:52:52.902767 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:52:52.902773 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:52:52.902782 kernel: Key type dns_resolver registered Nov 1 00:52:52.902789 kernel: IPI shorthand broadcast: enabled Nov 1 00:52:52.902796 kernel: sched_clock: Marking stable (553536703, 201105707)->(866969758, -112327348) Nov 1 00:52:52.902802 kernel: registered taskstats version 1 Nov 1 00:52:52.902809 kernel: Loading compiled-in X.509 certificates Nov 1 00:52:52.902816 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: f2055682e6899ad8548fd369019e7b47939b46a0' Nov 1 00:52:52.902823 kernel: Key type .fscrypt registered Nov 1 00:52:52.902829 kernel: Key type fscrypt-provisioning registered Nov 1 00:52:52.902836 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:52:52.902844 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:52:52.902851 kernel: ima: No architecture policies found Nov 1 00:52:52.902858 kernel: clk: Disabling unused clocks Nov 1 00:52:52.902864 kernel: Freeing unused kernel image (initmem) memory: 47496K Nov 1 00:52:52.902871 kernel: Write protecting the kernel read-only data: 28672k Nov 1 00:52:52.902878 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Nov 1 00:52:52.902884 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Nov 1 00:52:52.902891 kernel: Run /init as init process Nov 1 00:52:52.902899 kernel: with arguments: Nov 1 00:52:52.902906 kernel: /init Nov 1 00:52:52.902912 kernel: with environment: Nov 1 00:52:52.902918 kernel: HOME=/ Nov 1 00:52:52.902925 kernel: TERM=linux Nov 1 00:52:52.902931 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:52:52.902941 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:52:52.902949 systemd[1]: Detected virtualization kvm. Nov 1 00:52:52.902958 systemd[1]: Detected architecture x86-64. Nov 1 00:52:52.902965 systemd[1]: Running in initrd. Nov 1 00:52:52.902972 systemd[1]: No hostname configured, using default hostname. Nov 1 00:52:52.902979 systemd[1]: Hostname set to . Nov 1 00:52:52.902986 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:52:52.902994 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:52:52.903001 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:52:52.903008 systemd[1]: Reached target cryptsetup.target. Nov 1 00:52:52.903015 systemd[1]: Reached target paths.target. Nov 1 00:52:52.903023 systemd[1]: Reached target slices.target. Nov 1 00:52:52.903036 systemd[1]: Reached target swap.target. Nov 1 00:52:52.903044 systemd[1]: Reached target timers.target. Nov 1 00:52:52.903052 systemd[1]: Listening on iscsid.socket. Nov 1 00:52:52.903059 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:52:52.903068 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:52:52.903075 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:52:52.903083 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:52:52.903090 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:52:52.903097 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:52:52.903105 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:52:52.903112 systemd[1]: Reached target sockets.target. Nov 1 00:52:52.903119 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:52:52.903127 systemd[1]: Finished network-cleanup.service. Nov 1 00:52:52.903146 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:52:52.903153 systemd[1]: Starting systemd-journald.service... Nov 1 00:52:52.903161 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:52:52.903168 systemd[1]: Starting systemd-resolved.service... Nov 1 00:52:52.903176 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:52:52.903183 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:52:52.903191 kernel: audit: type=1130 audit(1761958372.898:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:52.903198 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:52:52.903210 systemd-journald[198]: Journal started Nov 1 00:52:52.903245 systemd-journald[198]: Runtime Journal (/run/log/journal/b33035aec59f4484b48d72c9b73941ab) is 6.0M, max 48.5M, 42.5M free. Nov 1 00:52:52.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:52.907794 kernel: audit: type=1130 audit(1761958372.906:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:52.907815 systemd[1]: Started systemd-journald.service. Nov 1 00:52:52.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:52.906200 systemd-modules-load[199]: Inserted module 'overlay' Nov 1 00:52:52.994090 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:52:52.994115 kernel: Bridge firewalling registered Nov 1 00:52:52.994126 kernel: SCSI subsystem initialized Nov 1 00:52:52.994149 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:52:52.994160 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:52:52.994169 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:52:52.925163 systemd-resolved[200]: Positive Trust Anchors: Nov 1 00:52:52.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:52.925262 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:52:53.010730 kernel: audit: type=1130 audit(1761958372.995:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.010745 kernel: audit: type=1130 audit(1761958373.003:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:52.925289 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:52:53.020014 kernel: audit: type=1130 audit(1761958373.013:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:52.927364 systemd-resolved[200]: Defaulting to hostname 'linux'. Nov 1 00:52:52.946280 systemd-modules-load[199]: Inserted module 'br_netfilter' Nov 1 00:52:52.973991 systemd-modules-load[199]: Inserted module 'dm_multipath' Nov 1 00:52:52.996215 systemd[1]: Started systemd-resolved.service. Nov 1 00:52:53.004184 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:52:53.013487 systemd[1]: Reached target nss-lookup.target. Nov 1 00:52:53.061472 kernel: audit: type=1130 audit(1761958373.039:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.061500 kernel: audit: type=1130 audit(1761958373.045:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.061513 kernel: audit: type=1130 audit(1761958373.053:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.021379 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:52:53.032234 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:52:53.037092 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:52:53.042119 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:52:53.045964 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:52:53.054393 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:52:53.074006 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:52:53.082870 kernel: audit: type=1130 audit(1761958373.075:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.076130 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:52:53.084256 dracut-cmdline[220]: dracut-dracut-053 Nov 1 00:52:53.085700 dracut-cmdline[220]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=c4c72a4f851a6da01cbc7150799371516ef8311ea786098908d8eb164df01ee2 Nov 1 00:52:53.136171 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:52:53.153165 kernel: iscsi: registered transport (tcp) Nov 1 00:52:53.174244 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:52:53.174287 kernel: QLogic iSCSI HBA Driver Nov 1 00:52:53.200403 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:52:53.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.202683 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:52:53.248177 kernel: raid6: avx2x4 gen() 28936 MB/s Nov 1 00:52:53.266165 kernel: raid6: avx2x4 xor() 7090 MB/s Nov 1 00:52:53.284164 kernel: raid6: avx2x2 gen() 28195 MB/s Nov 1 00:52:53.302171 kernel: raid6: avx2x2 xor() 18443 MB/s Nov 1 00:52:53.320168 kernel: raid6: avx2x1 gen() 25926 MB/s Nov 1 00:52:53.338168 kernel: raid6: avx2x1 xor() 14987 MB/s Nov 1 00:52:53.356164 kernel: raid6: sse2x4 gen() 14449 MB/s Nov 1 00:52:53.374168 kernel: raid6: sse2x4 xor() 6924 MB/s Nov 1 00:52:53.392163 kernel: raid6: sse2x2 gen() 16239 MB/s Nov 1 00:52:53.410162 kernel: raid6: sse2x2 xor() 9776 MB/s Nov 1 00:52:53.428167 kernel: raid6: sse2x1 gen() 11583 MB/s Nov 1 00:52:53.446708 kernel: raid6: sse2x1 xor() 7456 MB/s Nov 1 00:52:53.446746 kernel: raid6: using algorithm avx2x4 gen() 28936 MB/s Nov 1 00:52:53.446756 kernel: raid6: .... xor() 7090 MB/s, rmw enabled Nov 1 00:52:53.447973 kernel: raid6: using avx2x2 recovery algorithm Nov 1 00:52:53.465159 kernel: xor: automatically using best checksumming function avx Nov 1 00:52:53.556167 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Nov 1 00:52:53.563685 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:52:53.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.566000 audit: BPF prog-id=7 op=LOAD Nov 1 00:52:53.566000 audit: BPF prog-id=8 op=LOAD Nov 1 00:52:53.566707 systemd[1]: Starting systemd-udevd.service... Nov 1 00:52:53.579943 systemd-udevd[397]: Using default interface naming scheme 'v252'. Nov 1 00:52:53.583698 systemd[1]: Started systemd-udevd.service. Nov 1 00:52:53.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.587225 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:52:53.598038 dracut-pre-trigger[407]: rd.md=0: removing MD RAID activation Nov 1 00:52:53.618968 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:52:53.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.621151 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:52:53.654309 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:52:53.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:53.687500 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Nov 1 00:52:53.711286 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:52:53.711305 kernel: AVX2 version of gcm_enc/dec engaged. Nov 1 00:52:53.711314 kernel: AES CTR mode by8 optimization enabled Nov 1 00:52:53.711323 kernel: libata version 3.00 loaded. Nov 1 00:52:53.711332 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Nov 1 00:52:53.711341 kernel: GPT:9289727 != 19775487 Nov 1 00:52:53.711355 kernel: GPT:Alternate GPT header not at the end of the disk. Nov 1 00:52:53.711363 kernel: GPT:9289727 != 19775487 Nov 1 00:52:53.711372 kernel: GPT: Use GNU Parted to correct GPT errors. Nov 1 00:52:53.711380 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:52:53.716166 kernel: ahci 0000:00:1f.2: version 3.0 Nov 1 00:52:53.735126 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Nov 1 00:52:53.735175 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Nov 1 00:52:53.735282 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Nov 1 00:52:53.735376 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (454) Nov 1 00:52:53.735386 kernel: scsi host0: ahci Nov 1 00:52:53.735481 kernel: scsi host1: ahci Nov 1 00:52:53.735564 kernel: scsi host2: ahci Nov 1 00:52:53.735665 kernel: scsi host3: ahci Nov 1 00:52:53.735751 kernel: scsi host4: ahci Nov 1 00:52:53.735845 kernel: scsi host5: ahci Nov 1 00:52:53.735946 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Nov 1 00:52:53.735957 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Nov 1 00:52:53.735966 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Nov 1 00:52:53.735974 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Nov 1 00:52:53.735983 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Nov 1 00:52:53.735991 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Nov 1 00:52:53.728750 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:52:53.810198 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:52:53.818575 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:52:53.826083 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:52:53.836566 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:52:53.840461 systemd[1]: Starting disk-uuid.service... Nov 1 00:52:53.849295 disk-uuid[525]: Primary Header is updated. Nov 1 00:52:53.849295 disk-uuid[525]: Secondary Entries is updated. Nov 1 00:52:53.849295 disk-uuid[525]: Secondary Header is updated. Nov 1 00:52:53.856822 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:52:53.856842 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:52:54.044477 kernel: ata4: SATA link down (SStatus 0 SControl 300) Nov 1 00:52:54.044557 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Nov 1 00:52:54.045151 kernel: ata5: SATA link down (SStatus 0 SControl 300) Nov 1 00:52:54.048173 kernel: ata2: SATA link down (SStatus 0 SControl 300) Nov 1 00:52:54.048213 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Nov 1 00:52:54.050671 kernel: ata3.00: applying bridge limits Nov 1 00:52:54.051169 kernel: ata1: SATA link down (SStatus 0 SControl 300) Nov 1 00:52:54.054171 kernel: ata6: SATA link down (SStatus 0 SControl 300) Nov 1 00:52:54.054190 kernel: ata3.00: configured for UDMA/100 Nov 1 00:52:54.058167 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Nov 1 00:52:54.089479 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Nov 1 00:52:54.106805 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Nov 1 00:52:54.106817 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Nov 1 00:52:54.857729 disk-uuid[526]: The operation has completed successfully. Nov 1 00:52:54.860176 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:52:54.880623 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:52:54.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:54.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:54.880704 systemd[1]: Finished disk-uuid.service. Nov 1 00:52:54.885638 systemd[1]: Starting verity-setup.service... Nov 1 00:52:54.900172 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Nov 1 00:52:54.926849 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:52:54.929204 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:52:54.933455 systemd[1]: Finished verity-setup.service. Nov 1 00:52:54.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:54.992153 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:52:54.992488 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:52:54.993656 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:52:54.994328 systemd[1]: Starting ignition-setup.service... Nov 1 00:52:54.996107 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:52:55.008366 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:52:55.008399 kernel: BTRFS info (device vda6): using free space tree Nov 1 00:52:55.008409 kernel: BTRFS info (device vda6): has skinny extents Nov 1 00:52:55.018491 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:52:55.029949 systemd[1]: Finished ignition-setup.service. Nov 1 00:52:55.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.033396 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:52:55.070120 ignition[650]: Ignition 2.14.0 Nov 1 00:52:55.070131 ignition[650]: Stage: fetch-offline Nov 1 00:52:55.070218 ignition[650]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:52:55.070228 ignition[650]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:52:55.070332 ignition[650]: parsed url from cmdline: "" Nov 1 00:52:55.074855 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:52:55.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.070335 ignition[650]: no config URL provided Nov 1 00:52:55.078000 audit: BPF prog-id=9 op=LOAD Nov 1 00:52:55.079250 systemd[1]: Starting systemd-networkd.service... Nov 1 00:52:55.070338 ignition[650]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:52:55.070344 ignition[650]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:52:55.070360 ignition[650]: op(1): [started] loading QEMU firmware config module Nov 1 00:52:55.070364 ignition[650]: op(1): executing: "modprobe" "qemu_fw_cfg" Nov 1 00:52:55.081787 ignition[650]: op(1): [finished] loading QEMU firmware config module Nov 1 00:52:55.081805 ignition[650]: QEMU firmware config was not found. Ignoring... Nov 1 00:52:55.132425 systemd-networkd[718]: lo: Link UP Nov 1 00:52:55.132436 systemd-networkd[718]: lo: Gained carrier Nov 1 00:52:55.132833 systemd-networkd[718]: Enumeration completed Nov 1 00:52:55.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.132903 systemd[1]: Started systemd-networkd.service. Nov 1 00:52:55.133907 systemd-networkd[718]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:52:55.134698 systemd-networkd[718]: eth0: Link UP Nov 1 00:52:55.134700 systemd-networkd[718]: eth0: Gained carrier Nov 1 00:52:55.139942 systemd[1]: Reached target network.target. Nov 1 00:52:55.148790 systemd[1]: Starting iscsiuio.service... Nov 1 00:52:55.153576 systemd[1]: Started iscsiuio.service. Nov 1 00:52:55.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.156853 systemd[1]: Starting iscsid.service... Nov 1 00:52:55.160380 iscsid[723]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:52:55.160380 iscsid[723]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:52:55.160380 iscsid[723]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:52:55.160380 iscsid[723]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:52:55.160380 iscsid[723]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:52:55.174131 iscsid[723]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:52:55.172780 systemd[1]: Started iscsid.service. Nov 1 00:52:55.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.184401 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:52:55.193809 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:52:55.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.197082 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:52:55.200286 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:52:55.203650 systemd[1]: Reached target remote-fs.target. Nov 1 00:52:55.205243 ignition[650]: parsing config with SHA512: c9911883c43cc84ee69f97a7c319af720c19a2aa3ef1a4ee383c273ebff3cab039e995d95ee0bd021efcb12467c6034669df26fdeea5f3d56eb8510bbbb05f6e Nov 1 00:52:55.207111 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:52:55.211904 unknown[650]: fetched base config from "system" Nov 1 00:52:55.211918 unknown[650]: fetched user config from "qemu" Nov 1 00:52:55.212507 ignition[650]: fetch-offline: fetch-offline passed Nov 1 00:52:55.212570 ignition[650]: Ignition finished successfully Nov 1 00:52:55.218324 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:52:55.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.219238 systemd-networkd[718]: eth0: DHCPv4 address 10.0.0.5/16, gateway 10.0.0.1 acquired from 10.0.0.1 Nov 1 00:52:55.223501 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:52:55.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.226231 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Nov 1 00:52:55.229588 systemd[1]: Starting ignition-kargs.service... Nov 1 00:52:55.240685 ignition[738]: Ignition 2.14.0 Nov 1 00:52:55.240696 ignition[738]: Stage: kargs Nov 1 00:52:55.240782 ignition[738]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:52:55.240792 ignition[738]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:52:55.246354 ignition[738]: kargs: kargs passed Nov 1 00:52:55.246398 ignition[738]: Ignition finished successfully Nov 1 00:52:55.249401 systemd[1]: Finished ignition-kargs.service. Nov 1 00:52:55.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.250807 systemd[1]: Starting ignition-disks.service... Nov 1 00:52:55.257195 ignition[744]: Ignition 2.14.0 Nov 1 00:52:55.257203 ignition[744]: Stage: disks Nov 1 00:52:55.257286 ignition[744]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:52:55.257294 ignition[744]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:52:55.258235 ignition[744]: disks: disks passed Nov 1 00:52:55.258267 ignition[744]: Ignition finished successfully Nov 1 00:52:55.265081 systemd[1]: Finished ignition-disks.service. Nov 1 00:52:55.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.265800 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:52:55.268075 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:52:55.270722 systemd[1]: Reached target local-fs.target. Nov 1 00:52:55.273702 systemd[1]: Reached target sysinit.target. Nov 1 00:52:55.275925 systemd[1]: Reached target basic.target. Nov 1 00:52:55.278900 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:52:55.288768 systemd-fsck[752]: ROOT: clean, 637/553520 files, 56032/553472 blocks Nov 1 00:52:55.293944 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:52:55.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.298769 systemd[1]: Mounting sysroot.mount... Nov 1 00:52:55.306927 systemd[1]: Mounted sysroot.mount. Nov 1 00:52:55.309080 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:52:55.309112 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:52:55.312519 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:52:55.314942 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Nov 1 00:52:55.314977 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:52:55.314996 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:52:55.323748 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:52:55.326814 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:52:55.331521 initrd-setup-root[762]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:52:55.336699 initrd-setup-root[770]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:52:55.341500 initrd-setup-root[778]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:52:55.346373 initrd-setup-root[786]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:52:55.374072 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:52:55.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.377646 systemd[1]: Starting ignition-mount.service... Nov 1 00:52:55.380620 systemd[1]: Starting sysroot-boot.service... Nov 1 00:52:55.384835 bash[803]: umount: /sysroot/usr/share/oem: not mounted. Nov 1 00:52:55.395981 systemd[1]: Finished sysroot-boot.service. Nov 1 00:52:55.396740 ignition[805]: INFO : Ignition 2.14.0 Nov 1 00:52:55.396740 ignition[805]: INFO : Stage: mount Nov 1 00:52:55.397516 ignition[805]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:52:55.397516 ignition[805]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:52:55.398912 ignition[805]: INFO : mount: mount passed Nov 1 00:52:55.398912 ignition[805]: INFO : Ignition finished successfully Nov 1 00:52:55.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.406128 systemd[1]: Finished ignition-mount.service. Nov 1 00:52:55.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:55.938669 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:52:55.946168 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (814) Nov 1 00:52:55.946195 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Nov 1 00:52:55.950250 kernel: BTRFS info (device vda6): using free space tree Nov 1 00:52:55.950309 kernel: BTRFS info (device vda6): has skinny extents Nov 1 00:52:55.955661 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:52:55.958262 systemd[1]: Starting ignition-files.service... Nov 1 00:52:55.975053 ignition[834]: INFO : Ignition 2.14.0 Nov 1 00:52:55.975053 ignition[834]: INFO : Stage: files Nov 1 00:52:55.977448 ignition[834]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:52:55.977448 ignition[834]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:52:55.977448 ignition[834]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:52:55.983275 ignition[834]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:52:55.983275 ignition[834]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:52:55.987654 ignition[834]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:52:55.989832 ignition[834]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:52:55.992342 unknown[834]: wrote ssh authorized keys file for user: core Nov 1 00:52:55.993882 ignition[834]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:52:55.996185 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Nov 1 00:52:55.999086 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Nov 1 00:52:56.044762 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Nov 1 00:52:56.138554 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Nov 1 00:52:56.138554 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:52:56.144489 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:52:56.147269 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:52:56.150059 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:52:56.152753 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:52:56.155489 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:52:56.158192 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:52:56.161423 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:52:56.164452 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:52:56.167486 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:52:56.170570 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:52:56.170570 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:52:56.170570 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:52:56.170570 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Nov 1 00:52:56.613119 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Nov 1 00:52:56.891284 systemd-networkd[718]: eth0: Gained IPv6LL Nov 1 00:52:56.994946 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Nov 1 00:52:56.994946 ignition[834]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Nov 1 00:52:56.994946 ignition[834]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Nov 1 00:52:57.006658 ignition[834]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Nov 1 00:52:57.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.015861 systemd[1]: Finished ignition-files.service. Nov 1 00:52:57.044234 ignition[834]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Nov 1 00:52:57.044234 ignition[834]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Nov 1 00:52:57.044234 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:52:57.044234 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:52:57.044234 ignition[834]: INFO : files: files passed Nov 1 00:52:57.044234 ignition[834]: INFO : Ignition finished successfully Nov 1 00:52:57.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.021115 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:52:57.025149 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:52:57.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.067680 initrd-setup-root-after-ignition[857]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Nov 1 00:52:57.025612 systemd[1]: Starting ignition-quench.service... Nov 1 00:52:57.072406 initrd-setup-root-after-ignition[859]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:52:57.028447 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:52:57.032188 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:52:57.032244 systemd[1]: Finished ignition-quench.service. Nov 1 00:52:57.035638 systemd[1]: Reached target ignition-complete.target. Nov 1 00:52:57.092961 kernel: kauditd_printk_skb: 32 callbacks suppressed Nov 1 00:52:57.092984 kernel: audit: type=1131 audit(1761958377.084:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.039595 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:52:57.049129 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:52:57.049203 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:52:57.053110 systemd[1]: Reached target initrd-fs.target. Nov 1 00:52:57.056948 systemd[1]: Reached target initrd.target. Nov 1 00:52:57.057556 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:52:57.058046 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:52:57.066196 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:52:57.068108 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:52:57.075461 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:52:57.077726 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:52:57.127334 kernel: audit: type=1131 audit(1761958377.119:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.079158 systemd[1]: Stopped target timers.target. Nov 1 00:52:57.081802 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:52:57.137315 kernel: audit: type=1131 audit(1761958377.129:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.081886 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:52:57.144535 kernel: audit: type=1131 audit(1761958377.137:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.084376 systemd[1]: Stopped target initrd.target. Nov 1 00:52:57.093021 systemd[1]: Stopped target basic.target. Nov 1 00:52:57.094237 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:52:57.096857 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:52:57.099773 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:52:57.102345 systemd[1]: Stopped target remote-fs.target. Nov 1 00:52:57.104767 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:52:57.107207 systemd[1]: Stopped target sysinit.target. Nov 1 00:52:57.110381 systemd[1]: Stopped target local-fs.target. Nov 1 00:52:57.169270 kernel: audit: type=1131 audit(1761958377.161:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.112837 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:52:57.177212 kernel: audit: type=1131 audit(1761958377.169:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.115305 systemd[1]: Stopped target swap.target. Nov 1 00:52:57.179670 ignition[874]: INFO : Ignition 2.14.0 Nov 1 00:52:57.179670 ignition[874]: INFO : Stage: umount Nov 1 00:52:57.179670 ignition[874]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:52:57.179670 ignition[874]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:52:57.179670 ignition[874]: INFO : umount: umount passed Nov 1 00:52:57.179670 ignition[874]: INFO : Ignition finished successfully Nov 1 00:52:57.212871 kernel: audit: type=1131 audit(1761958377.179:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.212892 kernel: audit: type=1131 audit(1761958377.189:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.212902 kernel: audit: type=1131 audit(1761958377.197:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.212912 kernel: audit: type=1131 audit(1761958377.205:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.117652 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:52:57.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.117737 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:52:57.120173 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:52:57.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.127370 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:52:57.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.127453 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:52:57.129857 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:52:57.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.129938 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:52:57.137421 systemd[1]: Stopped target paths.target. Nov 1 00:52:57.144564 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:52:57.148171 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:52:57.149715 systemd[1]: Stopped target slices.target. Nov 1 00:52:57.152187 systemd[1]: Stopped target sockets.target. Nov 1 00:52:57.154717 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:52:57.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.154778 systemd[1]: Closed iscsid.socket. Nov 1 00:52:57.156934 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:52:57.156997 systemd[1]: Closed iscsiuio.socket. Nov 1 00:52:57.159261 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:52:57.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.159346 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:52:57.161925 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:52:57.162004 systemd[1]: Stopped ignition-files.service. Nov 1 00:52:57.169915 systemd[1]: Stopping ignition-mount.service... Nov 1 00:52:57.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.177233 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:52:57.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.177443 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:52:57.180394 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:52:57.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.187307 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:52:57.187415 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:52:57.189994 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:52:57.190133 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:52:57.199641 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:52:57.200156 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:52:57.200383 systemd[1]: Stopped ignition-mount.service. Nov 1 00:52:57.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.206643 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:52:57.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.275000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:52:57.206705 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:52:57.215844 systemd[1]: Stopped target network.target. Nov 1 00:52:57.217115 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:52:57.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.217173 systemd[1]: Stopped ignition-disks.service. Nov 1 00:52:57.219691 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:52:57.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.219722 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:52:57.221823 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:52:57.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.221856 systemd[1]: Stopped ignition-setup.service. Nov 1 00:52:57.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.224620 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:52:57.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.227406 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:52:57.235168 systemd-networkd[718]: eth0: DHCPv6 lease lost Nov 1 00:52:57.297000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:52:57.237569 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:52:57.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.237634 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:52:57.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:57.238802 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:52:57.238865 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:52:57.246715 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:52:57.246737 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:52:57.247899 systemd[1]: Stopping network-cleanup.service... Nov 1 00:52:57.250153 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:52:57.250195 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:52:57.253416 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:52:57.253449 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:52:57.257955 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:52:57.257987 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:52:57.258935 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:52:57.264959 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:52:57.270476 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:52:57.270564 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:52:57.272332 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:52:57.272364 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:52:57.277321 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:52:57.277412 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:52:57.279550 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:52:57.279609 systemd[1]: Stopped network-cleanup.service. Nov 1 00:52:57.340784 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Nov 1 00:52:57.340816 iscsid[723]: iscsid shutting down. Nov 1 00:52:57.282157 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:52:57.282215 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:52:57.282897 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:52:57.282920 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:52:57.286627 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:52:57.286659 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:52:57.288754 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:52:57.288787 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:52:57.291650 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:52:57.291682 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:52:57.294152 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:52:57.295977 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:52:57.296018 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:52:57.300636 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:52:57.300711 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:52:57.303184 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:52:57.306355 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:52:57.319515 systemd[1]: Switching root. Nov 1 00:52:57.348980 systemd-journald[198]: Journal stopped Nov 1 00:53:00.005671 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:53:00.005736 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:53:00.005749 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:53:00.005758 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:53:00.005767 kernel: SELinux: policy capability open_perms=1 Nov 1 00:53:00.005776 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:53:00.005786 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:53:00.005795 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:53:00.005804 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:53:00.005813 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:53:00.005828 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:53:00.005840 systemd[1]: Successfully loaded SELinux policy in 49.599ms. Nov 1 00:53:00.005863 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.438ms. Nov 1 00:53:00.005878 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:53:00.005891 systemd[1]: Detected virtualization kvm. Nov 1 00:53:00.005904 systemd[1]: Detected architecture x86-64. Nov 1 00:53:00.005919 systemd[1]: Detected first boot. Nov 1 00:53:00.005930 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:53:00.005942 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:53:00.005956 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:53:00.005970 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:53:00.005989 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:53:00.006003 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:53:00.006022 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:53:00.006036 systemd[1]: Stopped iscsiuio.service. Nov 1 00:53:00.006048 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:53:00.006062 systemd[1]: Stopped iscsid.service. Nov 1 00:53:00.006075 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:53:00.006087 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:53:00.006100 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:53:00.006115 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:53:00.006125 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:53:00.006148 systemd[1]: Created slice system-getty.slice. Nov 1 00:53:00.006159 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:53:00.006169 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:53:00.006183 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:53:00.006193 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:53:00.006203 systemd[1]: Created slice user.slice. Nov 1 00:53:00.006213 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:53:00.006223 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:53:00.006233 systemd[1]: Set up automount boot.automount. Nov 1 00:53:00.006245 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:53:00.006255 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:53:00.006264 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:53:00.006274 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:53:00.006284 systemd[1]: Reached target integritysetup.target. Nov 1 00:53:00.006294 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:53:00.006303 systemd[1]: Reached target remote-fs.target. Nov 1 00:53:00.006314 systemd[1]: Reached target slices.target. Nov 1 00:53:00.006324 systemd[1]: Reached target swap.target. Nov 1 00:53:00.006334 systemd[1]: Reached target torcx.target. Nov 1 00:53:00.006344 systemd[1]: Reached target veritysetup.target. Nov 1 00:53:00.006353 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:53:00.006364 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:53:00.006374 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:53:00.006384 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:53:00.006393 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:53:00.006403 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:53:00.006423 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:53:00.006434 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:53:00.006444 systemd[1]: Mounting media.mount... Nov 1 00:53:00.006454 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:00.006463 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:53:00.006473 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:53:00.006483 systemd[1]: Mounting tmp.mount... Nov 1 00:53:00.006493 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:53:00.006503 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:53:00.006514 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:53:00.006524 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:53:00.006534 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:53:00.006543 systemd[1]: Starting modprobe@drm.service... Nov 1 00:53:00.006553 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:53:00.006563 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:53:00.006573 systemd[1]: Starting modprobe@loop.service... Nov 1 00:53:00.006583 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:53:00.006593 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:53:00.006604 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:53:00.006614 kernel: fuse: init (API version 7.34) Nov 1 00:53:00.006623 kernel: loop: module loaded Nov 1 00:53:00.006632 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:53:00.006642 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:53:00.006652 systemd[1]: Stopped systemd-journald.service. Nov 1 00:53:00.006662 systemd[1]: Starting systemd-journald.service... Nov 1 00:53:00.006672 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:53:00.006683 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:53:00.006694 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:53:00.006704 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:53:00.006718 systemd-journald[996]: Journal started Nov 1 00:53:00.006757 systemd-journald[996]: Runtime Journal (/run/log/journal/b33035aec59f4484b48d72c9b73941ab) is 6.0M, max 48.5M, 42.5M free. Nov 1 00:52:57.409000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:52:57.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:52:57.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:52:57.707000 audit: BPF prog-id=10 op=LOAD Nov 1 00:52:57.707000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:52:57.707000 audit: BPF prog-id=11 op=LOAD Nov 1 00:52:57.707000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:52:57.736000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:52:57.736000 audit[907]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001058d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:52:57.736000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:52:57.739000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:52:57.739000 audit[907]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001059a9 a2=1ed a3=0 items=2 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:52:57.739000 audit: CWD cwd="/" Nov 1 00:52:57.739000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:52:57.739000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:52:57.739000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:52:59.808000 audit: BPF prog-id=12 op=LOAD Nov 1 00:52:59.808000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:52:59.808000 audit: BPF prog-id=13 op=LOAD Nov 1 00:52:59.808000 audit: BPF prog-id=14 op=LOAD Nov 1 00:52:59.808000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:52:59.808000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:52:59.808000 audit: BPF prog-id=15 op=LOAD Nov 1 00:52:59.808000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:52:59.808000 audit: BPF prog-id=16 op=LOAD Nov 1 00:52:59.808000 audit: BPF prog-id=17 op=LOAD Nov 1 00:52:59.808000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:52:59.808000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:52:59.809000 audit: BPF prog-id=18 op=LOAD Nov 1 00:52:59.809000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:52:59.809000 audit: BPF prog-id=19 op=LOAD Nov 1 00:52:59.809000 audit: BPF prog-id=20 op=LOAD Nov 1 00:52:59.809000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:52:59.809000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:52:59.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.822000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:52:59.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:52:59.986000 audit: BPF prog-id=21 op=LOAD Nov 1 00:52:59.986000 audit: BPF prog-id=22 op=LOAD Nov 1 00:52:59.986000 audit: BPF prog-id=23 op=LOAD Nov 1 00:52:59.986000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:52:59.986000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:53:00.003000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:53:00.003000 audit[996]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7fffbebe83f0 a2=4000 a3=7fffbebe848c items=0 ppid=1 pid=996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:00.003000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:52:57.734997 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:52:59.806208 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:52:57.735220 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:52:59.806220 systemd[1]: Unnecessary job was removed for dev-vda6.device. Nov 1 00:52:57.735239 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:52:59.810345 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:52:57.735264 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:52:57.735273 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:52:57.735303 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:52:57.735318 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:52:57.735555 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:52:57.735600 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:52:57.735615 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:52:57.736167 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:52:57.736206 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:52:57.736225 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:52:57.736241 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:52:57.736260 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:52:57.736275 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:57Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:52:59.537152 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:59Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:52:59.537398 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:59Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:52:59.537508 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:59Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:52:59.537650 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:59Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:52:59.537691 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:59Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:52:59.537741 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-11-01T00:52:59Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:53:00.011974 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:53:00.011998 systemd[1]: Stopped verity-setup.service. Nov 1 00:53:00.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.017235 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:00.020454 systemd[1]: Started systemd-journald.service. Nov 1 00:53:00.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.021964 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:53:00.023390 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:53:00.024697 systemd[1]: Mounted media.mount. Nov 1 00:53:00.025922 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:53:00.027321 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:53:00.028798 systemd[1]: Mounted tmp.mount. Nov 1 00:53:00.030164 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:53:00.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.031886 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:53:00.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.033607 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:53:00.033746 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:53:00.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.035408 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:53:00.035554 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:53:00.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.037168 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:53:00.037312 systemd[1]: Finished modprobe@drm.service. Nov 1 00:53:00.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.038955 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:53:00.039079 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:53:00.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.040695 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:53:00.040819 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:53:00.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.042477 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:53:00.042570 systemd[1]: Finished modprobe@loop.service. Nov 1 00:53:00.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.044083 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:53:00.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.045867 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:53:00.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.047764 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:53:00.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.049773 systemd[1]: Reached target network-pre.target. Nov 1 00:53:00.052339 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:53:00.054559 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:53:00.056112 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:53:00.057315 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:53:00.059578 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:53:00.061259 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:53:00.062267 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:53:00.064345 systemd-journald[996]: Time spent on flushing to /var/log/journal/b33035aec59f4484b48d72c9b73941ab is 20.108ms for 1100 entries. Nov 1 00:53:00.064345 systemd-journald[996]: System Journal (/var/log/journal/b33035aec59f4484b48d72c9b73941ab) is 8.0M, max 195.6M, 187.6M free. Nov 1 00:53:00.099937 systemd-journald[996]: Received client request to flush runtime journal. Nov 1 00:53:00.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.064199 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:53:00.065208 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:53:00.069271 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:53:00.073532 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:53:00.100816 udevadm[1012]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Nov 1 00:53:00.075517 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:53:00.078314 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:53:00.081066 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:53:00.083186 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:53:00.084978 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:53:00.087939 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:53:00.089970 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:53:00.100977 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:53:00.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.518192 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:53:00.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.520000 audit: BPF prog-id=24 op=LOAD Nov 1 00:53:00.520000 audit: BPF prog-id=25 op=LOAD Nov 1 00:53:00.520000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:53:00.520000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:53:00.520965 systemd[1]: Starting systemd-udevd.service... Nov 1 00:53:00.537188 systemd-udevd[1014]: Using default interface naming scheme 'v252'. Nov 1 00:53:00.552280 systemd[1]: Started systemd-udevd.service. Nov 1 00:53:00.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.556000 audit: BPF prog-id=26 op=LOAD Nov 1 00:53:00.557350 systemd[1]: Starting systemd-networkd.service... Nov 1 00:53:00.560000 audit: BPF prog-id=27 op=LOAD Nov 1 00:53:00.560000 audit: BPF prog-id=28 op=LOAD Nov 1 00:53:00.561000 audit: BPF prog-id=29 op=LOAD Nov 1 00:53:00.561739 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:53:00.580783 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Nov 1 00:53:00.600885 systemd[1]: Started systemd-userdbd.service. Nov 1 00:53:00.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.613795 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:53:00.623165 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Nov 1 00:53:00.632226 kernel: ACPI: button: Power Button [PWRF] Nov 1 00:53:00.646635 systemd-networkd[1024]: lo: Link UP Nov 1 00:53:00.646653 systemd-networkd[1024]: lo: Gained carrier Nov 1 00:53:00.646994 systemd-networkd[1024]: Enumeration completed Nov 1 00:53:00.647096 systemd[1]: Started systemd-networkd.service. Nov 1 00:53:00.648443 systemd-networkd[1024]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:53:00.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.649717 systemd-networkd[1024]: eth0: Link UP Nov 1 00:53:00.649723 systemd-networkd[1024]: eth0: Gained carrier Nov 1 00:53:00.656000 audit[1033]: AVC avc: denied { confidentiality } for pid=1033 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:53:00.662422 systemd-networkd[1024]: eth0: DHCPv4 address 10.0.0.5/16, gateway 10.0.0.1 acquired from 10.0.0.1 Nov 1 00:53:00.656000 audit[1033]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55fa4c8ff3c0 a1=338ec a2=7fd7e899ebc5 a3=5 items=110 ppid=1014 pid=1033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:00.656000 audit: CWD cwd="/" Nov 1 00:53:00.656000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=1 name=(null) inode=15614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=2 name=(null) inode=15614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=3 name=(null) inode=15615 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=4 name=(null) inode=15614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=5 name=(null) inode=15616 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=6 name=(null) inode=15614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=7 name=(null) inode=15617 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=8 name=(null) inode=15617 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=9 name=(null) inode=15618 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=10 name=(null) inode=15617 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=11 name=(null) inode=15619 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=12 name=(null) inode=15617 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=13 name=(null) inode=15620 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=14 name=(null) inode=15617 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=15 name=(null) inode=15621 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=16 name=(null) inode=15617 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=17 name=(null) inode=15622 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=18 name=(null) inode=15614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=19 name=(null) inode=15623 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=20 name=(null) inode=15623 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=21 name=(null) inode=15624 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=22 name=(null) inode=15623 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=23 name=(null) inode=15625 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=24 name=(null) inode=15623 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=25 name=(null) inode=15626 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=26 name=(null) inode=15623 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=27 name=(null) inode=15627 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=28 name=(null) inode=15623 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=29 name=(null) inode=15628 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=30 name=(null) inode=15614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=31 name=(null) inode=15629 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=32 name=(null) inode=15629 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=33 name=(null) inode=15630 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=34 name=(null) inode=15629 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=35 name=(null) inode=15631 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=36 name=(null) inode=15629 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=37 name=(null) inode=15632 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=38 name=(null) inode=15629 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=39 name=(null) inode=15633 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=40 name=(null) inode=15629 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=41 name=(null) inode=15634 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=42 name=(null) inode=15614 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=43 name=(null) inode=15635 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=44 name=(null) inode=15635 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=45 name=(null) inode=15636 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=46 name=(null) inode=15635 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=47 name=(null) inode=15637 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=48 name=(null) inode=15635 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=49 name=(null) inode=15638 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=50 name=(null) inode=15635 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=51 name=(null) inode=15639 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=52 name=(null) inode=15635 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=53 name=(null) inode=15640 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=55 name=(null) inode=15641 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=56 name=(null) inode=15641 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=57 name=(null) inode=15642 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=58 name=(null) inode=15641 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=59 name=(null) inode=15643 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=60 name=(null) inode=15641 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=61 name=(null) inode=15644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=62 name=(null) inode=15644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=63 name=(null) inode=15645 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=64 name=(null) inode=15644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=65 name=(null) inode=15646 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=66 name=(null) inode=15644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=67 name=(null) inode=15647 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=68 name=(null) inode=15644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=69 name=(null) inode=15648 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=70 name=(null) inode=15644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=71 name=(null) inode=15649 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=72 name=(null) inode=15641 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=73 name=(null) inode=15650 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=74 name=(null) inode=15650 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=75 name=(null) inode=15651 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=76 name=(null) inode=15650 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=77 name=(null) inode=15652 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=78 name=(null) inode=15650 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=79 name=(null) inode=15653 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=80 name=(null) inode=15650 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=81 name=(null) inode=15654 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=82 name=(null) inode=15650 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=83 name=(null) inode=15655 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=84 name=(null) inode=15641 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=85 name=(null) inode=15656 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=86 name=(null) inode=15656 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=87 name=(null) inode=15657 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=88 name=(null) inode=15656 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=89 name=(null) inode=15658 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=90 name=(null) inode=15656 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=91 name=(null) inode=15659 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=92 name=(null) inode=15656 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=93 name=(null) inode=15660 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=94 name=(null) inode=15656 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=95 name=(null) inode=15661 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=96 name=(null) inode=15641 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=97 name=(null) inode=15662 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=98 name=(null) inode=15662 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=99 name=(null) inode=15663 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=100 name=(null) inode=15662 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=101 name=(null) inode=15664 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=102 name=(null) inode=15662 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=103 name=(null) inode=15665 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=104 name=(null) inode=15662 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=105 name=(null) inode=15666 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=106 name=(null) inode=15662 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=107 name=(null) inode=15667 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PATH item=109 name=(null) inode=14608 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:53:00.656000 audit: PROCTITLE proctitle="(udev-worker)" Nov 1 00:53:00.674313 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Nov 1 00:53:00.690457 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Nov 1 00:53:00.690617 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Nov 1 00:53:00.690711 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Nov 1 00:53:00.695165 kernel: mousedev: PS/2 mouse device common for all mice Nov 1 00:53:00.744182 kernel: kvm: Nested Virtualization enabled Nov 1 00:53:00.744339 kernel: SVM: kvm: Nested Paging enabled Nov 1 00:53:00.744403 kernel: SVM: Virtual VMLOAD VMSAVE supported Nov 1 00:53:00.744431 kernel: SVM: Virtual GIF supported Nov 1 00:53:00.776171 kernel: EDAC MC: Ver: 3.0.0 Nov 1 00:53:00.798756 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:53:00.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.802232 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:53:00.810795 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:53:00.841471 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:53:00.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.843229 systemd[1]: Reached target cryptsetup.target. Nov 1 00:53:00.845705 systemd[1]: Starting lvm2-activation.service... Nov 1 00:53:00.850428 lvm[1050]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:53:00.880434 systemd[1]: Finished lvm2-activation.service. Nov 1 00:53:00.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.881989 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:53:00.883379 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:53:00.883414 systemd[1]: Reached target local-fs.target. Nov 1 00:53:00.884701 systemd[1]: Reached target machines.target. Nov 1 00:53:00.887098 systemd[1]: Starting ldconfig.service... Nov 1 00:53:00.888660 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:53:00.888729 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:53:00.890128 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:53:00.893170 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:53:00.896589 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:53:00.899936 systemd[1]: Starting systemd-sysext.service... Nov 1 00:53:00.901758 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1052 (bootctl) Nov 1 00:53:00.903186 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:53:00.909230 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:53:00.912998 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:53:00.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.918724 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:53:00.918915 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:53:00.930159 kernel: loop0: detected capacity change from 0 to 224512 Nov 1 00:53:00.958462 systemd-fsck[1061]: fsck.fat 4.2 (2021-01-31) Nov 1 00:53:00.958462 systemd-fsck[1061]: /dev/vda1: 790 files, 120773/258078 clusters Nov 1 00:53:00.960631 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:53:00.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:00.965610 systemd[1]: Mounting boot.mount... Nov 1 00:53:01.184905 systemd[1]: Mounted boot.mount. Nov 1 00:53:01.197182 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:53:01.197281 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:53:01.197781 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:53:01.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.202033 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:53:01.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.215161 kernel: loop1: detected capacity change from 0 to 224512 Nov 1 00:53:01.219112 (sd-sysext)[1065]: Using extensions 'kubernetes'. Nov 1 00:53:01.219579 (sd-sysext)[1065]: Merged extensions into '/usr'. Nov 1 00:53:01.235268 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:01.236632 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:53:01.238506 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.239767 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:53:01.242366 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:53:01.244667 systemd[1]: Starting modprobe@loop.service... Nov 1 00:53:01.245959 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.246086 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:53:01.246247 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:01.249398 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:53:01.251512 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:53:01.251650 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:53:01.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.253617 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:53:01.253717 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:53:01.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.255669 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:53:01.255767 systemd[1]: Finished modprobe@loop.service. Nov 1 00:53:01.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.257666 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:53:01.257789 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.258724 systemd[1]: Finished systemd-sysext.service. Nov 1 00:53:01.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.261211 systemd[1]: Starting ensure-sysext.service... Nov 1 00:53:01.263194 ldconfig[1051]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:53:01.263419 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:53:01.268813 systemd[1]: Reloading. Nov 1 00:53:01.279549 systemd-tmpfiles[1072]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:53:01.281946 systemd-tmpfiles[1072]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:53:01.284649 systemd-tmpfiles[1072]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:53:01.317900 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-11-01T00:53:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:53:01.318305 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-11-01T00:53:01Z" level=info msg="torcx already run" Nov 1 00:53:01.380955 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:53:01.380971 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:53:01.397471 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:53:01.448000 audit: BPF prog-id=30 op=LOAD Nov 1 00:53:01.448000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:53:01.448000 audit: BPF prog-id=31 op=LOAD Nov 1 00:53:01.449000 audit: BPF prog-id=32 op=LOAD Nov 1 00:53:01.449000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:53:01.449000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:53:01.449000 audit: BPF prog-id=33 op=LOAD Nov 1 00:53:01.449000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:53:01.450000 audit: BPF prog-id=34 op=LOAD Nov 1 00:53:01.450000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:53:01.450000 audit: BPF prog-id=35 op=LOAD Nov 1 00:53:01.450000 audit: BPF prog-id=36 op=LOAD Nov 1 00:53:01.450000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:53:01.450000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:53:01.451000 audit: BPF prog-id=37 op=LOAD Nov 1 00:53:01.451000 audit: BPF prog-id=38 op=LOAD Nov 1 00:53:01.451000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:53:01.451000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:53:01.453664 systemd[1]: Finished ldconfig.service. Nov 1 00:53:01.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.455779 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:53:01.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.459600 systemd[1]: Starting audit-rules.service... Nov 1 00:53:01.461579 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:53:01.464084 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:53:01.466000 audit: BPF prog-id=39 op=LOAD Nov 1 00:53:01.467008 systemd[1]: Starting systemd-resolved.service... Nov 1 00:53:01.468000 audit: BPF prog-id=40 op=LOAD Nov 1 00:53:01.469765 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:53:01.472001 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:53:01.473889 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:53:01.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.478000 audit[1144]: SYSTEM_BOOT pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.477431 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:53:01.481880 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:01.482263 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.483829 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:53:01.486209 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:53:01.488662 systemd[1]: Starting modprobe@loop.service... Nov 1 00:53:01.489849 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.490030 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:53:01.490336 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:53:01.490580 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:01.492366 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:53:01.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.494795 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:53:01.494924 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:53:01.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.496959 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:53:01.497086 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:53:01.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.499206 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:53:01.499330 systemd[1]: Finished modprobe@loop.service. Nov 1 00:53:01.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.503743 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:53:01.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.506505 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:01.506743 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.508268 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:53:01.510764 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:53:01.513367 systemd[1]: Starting modprobe@loop.service... Nov 1 00:53:01.514864 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.515037 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:53:01.516802 systemd[1]: Starting systemd-update-done.service... Nov 1 00:53:01.518744 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:53:01.518873 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:01.520397 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:53:01.520555 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:53:01.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.523032 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:53:01.523182 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:53:01.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.527480 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:53:01.527605 systemd[1]: Finished modprobe@loop.service. Nov 1 00:53:01.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:01.529000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:53:01.529000 audit[1156]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff38c01c70 a2=420 a3=0 items=0 ppid=1133 pid=1156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:01.529000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:53:01.530271 augenrules[1156]: No rules Nov 1 00:53:01.530438 systemd[1]: Finished systemd-update-done.service. Nov 1 00:53:01.532789 systemd[1]: Finished audit-rules.service. Nov 1 00:53:01.537454 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:01.537859 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.539987 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:53:01.543096 systemd[1]: Starting modprobe@drm.service... Nov 1 00:53:01.545971 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:53:01.549107 systemd[1]: Starting modprobe@loop.service... Nov 1 00:53:01.550547 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:53:01.550676 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:53:02.199119 systemd-timesyncd[1143]: Contacted time server 10.0.0.1:123 (10.0.0.1). Nov 1 00:53:02.199174 systemd-timesyncd[1143]: Initial clock synchronization to Sat 2025-11-01 00:53:02.199037 UTC. Nov 1 00:53:02.199685 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:53:02.201899 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:53:02.202030 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Nov 1 00:53:02.203209 systemd-resolved[1137]: Positive Trust Anchors: Nov 1 00:53:02.203384 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:53:02.204078 systemd-resolved[1137]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:53:02.206686 systemd-resolved[1137]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:53:02.207288 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:53:02.207473 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:53:02.210354 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:53:02.210513 systemd[1]: Finished modprobe@drm.service. Nov 1 00:53:02.212359 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:53:02.212507 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:53:02.215068 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:53:02.215206 systemd[1]: Finished modprobe@loop.service. Nov 1 00:53:02.218468 systemd[1]: Reached target time-set.target. Nov 1 00:53:02.219883 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:53:02.219925 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:53:02.220271 systemd[1]: Finished ensure-sysext.service. Nov 1 00:53:02.224201 systemd-resolved[1137]: Defaulting to hostname 'linux'. Nov 1 00:53:02.226089 systemd[1]: Started systemd-resolved.service. Nov 1 00:53:02.227695 systemd[1]: Reached target network.target. Nov 1 00:53:02.229318 systemd[1]: Reached target nss-lookup.target. Nov 1 00:53:02.230988 systemd[1]: Reached target sysinit.target. Nov 1 00:53:02.232592 systemd[1]: Started motdgen.path. Nov 1 00:53:02.233838 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:53:02.235943 systemd[1]: Started logrotate.timer. Nov 1 00:53:02.237376 systemd[1]: Started mdadm.timer. Nov 1 00:53:02.238630 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:53:02.240367 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:53:02.240398 systemd[1]: Reached target paths.target. Nov 1 00:53:02.241887 systemd[1]: Reached target timers.target. Nov 1 00:53:02.243692 systemd[1]: Listening on dbus.socket. Nov 1 00:53:02.246224 systemd[1]: Starting docker.socket... Nov 1 00:53:02.250121 systemd[1]: Listening on sshd.socket. Nov 1 00:53:02.251530 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:53:02.252021 systemd[1]: Listening on docker.socket. Nov 1 00:53:02.253434 systemd[1]: Reached target sockets.target. Nov 1 00:53:02.254840 systemd[1]: Reached target basic.target. Nov 1 00:53:02.256613 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:53:02.256648 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:53:02.257946 systemd[1]: Starting containerd.service... Nov 1 00:53:02.260282 systemd[1]: Starting dbus.service... Nov 1 00:53:02.262738 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:53:02.265871 systemd[1]: Starting extend-filesystems.service... Nov 1 00:53:02.268081 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:53:02.272255 jq[1175]: false Nov 1 00:53:02.269432 systemd[1]: Starting motdgen.service... Nov 1 00:53:02.273408 systemd[1]: Starting prepare-helm.service... Nov 1 00:53:02.278690 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:53:02.281499 systemd[1]: Starting sshd-keygen.service... Nov 1 00:53:02.282730 extend-filesystems[1176]: Found loop1 Nov 1 00:53:02.284438 extend-filesystems[1176]: Found sr0 Nov 1 00:53:02.284438 extend-filesystems[1176]: Found vda Nov 1 00:53:02.284438 extend-filesystems[1176]: Found vda1 Nov 1 00:53:02.284438 extend-filesystems[1176]: Found vda2 Nov 1 00:53:02.284438 extend-filesystems[1176]: Found vda3 Nov 1 00:53:02.284438 extend-filesystems[1176]: Found usr Nov 1 00:53:02.284438 extend-filesystems[1176]: Found vda4 Nov 1 00:53:02.284438 extend-filesystems[1176]: Found vda6 Nov 1 00:53:02.284438 extend-filesystems[1176]: Found vda7 Nov 1 00:53:02.284438 extend-filesystems[1176]: Found vda9 Nov 1 00:53:02.284438 extend-filesystems[1176]: Checking size of /dev/vda9 Nov 1 00:53:02.288911 dbus-daemon[1174]: [system] SELinux support is enabled Nov 1 00:53:02.289237 systemd[1]: Starting systemd-logind.service... Nov 1 00:53:02.295623 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:53:02.295690 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:53:02.296315 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:53:02.297218 systemd[1]: Starting update-engine.service... Nov 1 00:53:02.299885 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:53:02.304118 systemd[1]: Started dbus.service. Nov 1 00:53:02.312251 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:53:02.312457 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:53:02.312852 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:53:02.313026 systemd[1]: Finished motdgen.service. Nov 1 00:53:02.317102 jq[1195]: true Nov 1 00:53:02.315775 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:53:02.340932 tar[1200]: linux-amd64/LICENSE Nov 1 00:53:02.340932 tar[1200]: linux-amd64/helm Nov 1 00:53:02.341275 extend-filesystems[1176]: Resized partition /dev/vda9 Nov 1 00:53:02.319526 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:53:02.351923 jq[1203]: true Nov 1 00:53:02.352117 extend-filesystems[1201]: resize2fs 1.46.5 (30-Dec-2021) Nov 1 00:53:02.326180 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:53:02.326209 systemd[1]: Reached target system-config.target. Nov 1 00:53:02.327972 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:53:02.327995 systemd[1]: Reached target user-config.target. Nov 1 00:53:02.339014 systemd-networkd[1024]: eth0: Gained IPv6LL Nov 1 00:53:02.341496 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:53:02.348912 systemd[1]: Reached target network-online.target. Nov 1 00:53:02.369792 env[1204]: time="2025-11-01T00:53:02.369736837Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:53:02.381190 systemd[1]: Starting kubelet.service... Nov 1 00:53:02.385585 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Nov 1 00:53:02.405493 update_engine[1194]: I1101 00:53:02.405162 1194 main.cc:92] Flatcar Update Engine starting Nov 1 00:53:02.417159 update_engine[1194]: I1101 00:53:02.407517 1194 update_check_scheduler.cc:74] Next update check in 7m23s Nov 1 00:53:02.417263 env[1204]: time="2025-11-01T00:53:02.409112821Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:53:02.407903 systemd[1]: Started update-engine.service. Nov 1 00:53:02.412127 systemd[1]: Started locksmithd.service. Nov 1 00:53:02.421230 systemd-logind[1185]: Watching system buttons on /dev/input/event1 (Power Button) Nov 1 00:53:02.421778 env[1204]: time="2025-11-01T00:53:02.421411545Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:53:02.421247 systemd-logind[1185]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 1 00:53:02.422799 systemd-logind[1185]: New seat seat0. Nov 1 00:53:02.422925 env[1204]: time="2025-11-01T00:53:02.422858889Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:53:02.422925 env[1204]: time="2025-11-01T00:53:02.422894957Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:53:02.423568 env[1204]: time="2025-11-01T00:53:02.423126712Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:53:02.423568 env[1204]: time="2025-11-01T00:53:02.423155425Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:53:02.423568 env[1204]: time="2025-11-01T00:53:02.423175724Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:53:02.423568 env[1204]: time="2025-11-01T00:53:02.423189469Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:53:02.423568 env[1204]: time="2025-11-01T00:53:02.423284357Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:53:02.423568 env[1204]: time="2025-11-01T00:53:02.423513317Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:53:02.423749 env[1204]: time="2025-11-01T00:53:02.423668177Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:53:02.423749 env[1204]: time="2025-11-01T00:53:02.423691411Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:53:02.423829 env[1204]: time="2025-11-01T00:53:02.423749029Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:53:02.423829 env[1204]: time="2025-11-01T00:53:02.423764928Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:53:02.428325 systemd[1]: Started systemd-logind.service. Nov 1 00:53:02.437102 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Nov 1 00:53:02.464899 extend-filesystems[1201]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Nov 1 00:53:02.464899 extend-filesystems[1201]: old_desc_blocks = 1, new_desc_blocks = 1 Nov 1 00:53:02.464899 extend-filesystems[1201]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Nov 1 00:53:02.490231 extend-filesystems[1176]: Resized filesystem in /dev/vda9 Nov 1 00:53:02.492348 bash[1223]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.465720400Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.465798056Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.465866183Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.465962574Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466103388Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466134527Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466185953Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466217873Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466276152Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466304045Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466357084Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466382492Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466601983Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:53:02.492444 env[1204]: time="2025-11-01T00:53:02.466769948Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:53:02.469963 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467239519Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467305973Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467360906Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467460563Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467486222Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467537067Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467563847Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467585718Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467631304Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467647835Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467662181Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.467677029Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.468252268Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.468305278Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.493012 env[1204]: time="2025-11-01T00:53:02.468333370Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.470174 systemd[1]: Finished extend-filesystems.service. Nov 1 00:53:02.493461 env[1204]: time="2025-11-01T00:53:02.468388193Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:53:02.493461 env[1204]: time="2025-11-01T00:53:02.468419151Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:53:02.493461 env[1204]: time="2025-11-01T00:53:02.468442264Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:53:02.493461 env[1204]: time="2025-11-01T00:53:02.468504621Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:53:02.493461 env[1204]: time="2025-11-01T00:53:02.468578811Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:53:02.482179 systemd[1]: Started containerd.service. Nov 1 00:53:02.484544 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.470148083Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.470264051Z" level=info msg="Connect containerd service" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.470330245Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.471895821Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.472082952Z" level=info msg="Start subscribing containerd event" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.472173071Z" level=info msg="Start recovering state" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.472264172Z" level=info msg="Start event monitor" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.472280743Z" level=info msg="Start snapshots syncer" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.472292946Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.472303165Z" level=info msg="Start streaming server" Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.472951110Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.472998218Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:53:02.493688 env[1204]: time="2025-11-01T00:53:02.473089029Z" level=info msg="containerd successfully booted in 0.104213s" Nov 1 00:53:02.515991 locksmithd[1231]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:53:02.887670 tar[1200]: linux-amd64/README.md Nov 1 00:53:02.893212 systemd[1]: Finished prepare-helm.service. Nov 1 00:53:03.247690 sshd_keygen[1196]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:53:03.267401 systemd[1]: Finished sshd-keygen.service. Nov 1 00:53:03.271134 systemd[1]: Starting issuegen.service... Nov 1 00:53:03.276345 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:53:03.276533 systemd[1]: Finished issuegen.service. Nov 1 00:53:03.280680 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:53:03.284644 systemd[1]: Started kubelet.service. Nov 1 00:53:03.289485 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:53:03.292928 systemd[1]: Started getty@tty1.service. Nov 1 00:53:03.295717 systemd[1]: Started serial-getty@ttyS0.service. Nov 1 00:53:03.297663 systemd[1]: Reached target getty.target. Nov 1 00:53:03.299322 systemd[1]: Reached target multi-user.target. Nov 1 00:53:03.302304 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:53:03.309636 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:53:03.309842 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:53:03.311874 systemd[1]: Startup finished in 771ms (kernel) + 4.628s (initrd) + 5.306s (userspace) = 10.706s. Nov 1 00:53:03.712157 kubelet[1254]: E1101 00:53:03.711991 1254 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:53:03.714337 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:53:03.714482 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:53:03.714788 systemd[1]: kubelet.service: Consumed 1.075s CPU time. Nov 1 00:53:06.355758 systemd[1]: Created slice system-sshd.slice. Nov 1 00:53:06.356699 systemd[1]: Started sshd@0-10.0.0.5:22-10.0.0.1:54698.service. Nov 1 00:53:06.394459 sshd[1265]: Accepted publickey for core from 10.0.0.1 port 54698 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:53:06.395764 sshd[1265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:53:06.403941 systemd-logind[1185]: New session 1 of user core. Nov 1 00:53:06.404719 systemd[1]: Created slice user-500.slice. Nov 1 00:53:06.405696 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:53:06.413576 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:53:06.415021 systemd[1]: Starting user@500.service... Nov 1 00:53:06.417354 (systemd)[1268]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:53:06.486199 systemd[1268]: Queued start job for default target default.target. Nov 1 00:53:06.486574 systemd[1268]: Reached target paths.target. Nov 1 00:53:06.486590 systemd[1268]: Reached target sockets.target. Nov 1 00:53:06.486601 systemd[1268]: Reached target timers.target. Nov 1 00:53:06.486612 systemd[1268]: Reached target basic.target. Nov 1 00:53:06.486644 systemd[1268]: Reached target default.target. Nov 1 00:53:06.486663 systemd[1268]: Startup finished in 63ms. Nov 1 00:53:06.486766 systemd[1]: Started user@500.service. Nov 1 00:53:06.487751 systemd[1]: Started session-1.scope. Nov 1 00:53:06.537288 systemd[1]: Started sshd@1-10.0.0.5:22-10.0.0.1:54708.service. Nov 1 00:53:06.574927 sshd[1277]: Accepted publickey for core from 10.0.0.1 port 54708 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:53:06.576075 sshd[1277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:53:06.580017 systemd-logind[1185]: New session 2 of user core. Nov 1 00:53:06.580860 systemd[1]: Started session-2.scope. Nov 1 00:53:06.633315 sshd[1277]: pam_unix(sshd:session): session closed for user core Nov 1 00:53:06.636189 systemd[1]: sshd@1-10.0.0.5:22-10.0.0.1:54708.service: Deactivated successfully. Nov 1 00:53:06.636744 systemd[1]: session-2.scope: Deactivated successfully. Nov 1 00:53:06.637211 systemd-logind[1185]: Session 2 logged out. Waiting for processes to exit. Nov 1 00:53:06.638143 systemd[1]: Started sshd@2-10.0.0.5:22-10.0.0.1:54712.service. Nov 1 00:53:06.638892 systemd-logind[1185]: Removed session 2. Nov 1 00:53:06.673008 sshd[1283]: Accepted publickey for core from 10.0.0.1 port 54712 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:53:06.674018 sshd[1283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:53:06.678201 systemd-logind[1185]: New session 3 of user core. Nov 1 00:53:06.679993 systemd[1]: Started session-3.scope. Nov 1 00:53:06.730530 sshd[1283]: pam_unix(sshd:session): session closed for user core Nov 1 00:53:06.733956 systemd[1]: sshd@2-10.0.0.5:22-10.0.0.1:54712.service: Deactivated successfully. Nov 1 00:53:06.734695 systemd[1]: session-3.scope: Deactivated successfully. Nov 1 00:53:06.735547 systemd-logind[1185]: Session 3 logged out. Waiting for processes to exit. Nov 1 00:53:06.736894 systemd[1]: Started sshd@3-10.0.0.5:22-10.0.0.1:54726.service. Nov 1 00:53:06.737936 systemd-logind[1185]: Removed session 3. Nov 1 00:53:06.774523 sshd[1290]: Accepted publickey for core from 10.0.0.1 port 54726 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:53:06.775724 sshd[1290]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:53:06.779076 systemd-logind[1185]: New session 4 of user core. Nov 1 00:53:06.779843 systemd[1]: Started session-4.scope. Nov 1 00:53:06.833449 sshd[1290]: pam_unix(sshd:session): session closed for user core Nov 1 00:53:06.836280 systemd[1]: Started sshd@4-10.0.0.5:22-10.0.0.1:54730.service. Nov 1 00:53:06.836708 systemd[1]: sshd@3-10.0.0.5:22-10.0.0.1:54726.service: Deactivated successfully. Nov 1 00:53:06.837205 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:53:06.837659 systemd-logind[1185]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:53:06.838831 systemd-logind[1185]: Removed session 4. Nov 1 00:53:06.874061 sshd[1295]: Accepted publickey for core from 10.0.0.1 port 54730 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:53:06.875433 sshd[1295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:53:06.878920 systemd-logind[1185]: New session 5 of user core. Nov 1 00:53:06.879647 systemd[1]: Started session-5.scope. Nov 1 00:53:06.935181 sudo[1299]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:53:06.935353 sudo[1299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:53:06.945049 dbus-daemon[1174]: \xd0\xfd\x982\xd2U: received setenforce notice (enforcing=1807364096) Nov 1 00:53:06.947427 sudo[1299]: pam_unix(sudo:session): session closed for user root Nov 1 00:53:06.949380 sshd[1295]: pam_unix(sshd:session): session closed for user core Nov 1 00:53:06.953408 systemd[1]: sshd@4-10.0.0.5:22-10.0.0.1:54730.service: Deactivated successfully. Nov 1 00:53:06.954272 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:53:06.955028 systemd-logind[1185]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:53:06.956958 systemd[1]: Started sshd@5-10.0.0.5:22-10.0.0.1:54740.service. Nov 1 00:53:06.957857 systemd-logind[1185]: Removed session 5. Nov 1 00:53:06.991553 sshd[1303]: Accepted publickey for core from 10.0.0.1 port 54740 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:53:06.992993 sshd[1303]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:53:06.996915 systemd-logind[1185]: New session 6 of user core. Nov 1 00:53:06.997444 systemd[1]: Started session-6.scope. Nov 1 00:53:07.055147 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:53:07.055542 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:53:07.058038 sudo[1307]: pam_unix(sudo:session): session closed for user root Nov 1 00:53:07.061790 sudo[1306]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:53:07.061999 sudo[1306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:53:07.070280 systemd[1]: Stopping audit-rules.service... Nov 1 00:53:07.071000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:53:07.072118 auditctl[1310]: No rules Nov 1 00:53:07.072397 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:53:07.072522 systemd[1]: Stopped audit-rules.service. Nov 1 00:53:07.073458 kernel: kauditd_printk_skb: 278 callbacks suppressed Nov 1 00:53:07.073496 kernel: audit: type=1305 audit(1761958387.071:207): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:53:07.073691 systemd[1]: Starting audit-rules.service... Nov 1 00:53:07.071000 audit[1310]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffee78584e0 a2=420 a3=0 items=0 ppid=1 pid=1310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:07.084867 kernel: audit: type=1300 audit(1761958387.071:207): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffee78584e0 a2=420 a3=0 items=0 ppid=1 pid=1310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:07.084927 kernel: audit: type=1327 audit(1761958387.071:207): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:53:07.071000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:53:07.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.089016 augenrules[1327]: No rules Nov 1 00:53:07.089609 systemd[1]: Finished audit-rules.service. Nov 1 00:53:07.090440 sudo[1306]: pam_unix(sudo:session): session closed for user root Nov 1 00:53:07.092912 kernel: audit: type=1131 audit(1761958387.071:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.093270 sshd[1303]: pam_unix(sshd:session): session closed for user core Nov 1 00:53:07.095436 systemd[1]: sshd@5-10.0.0.5:22-10.0.0.1:54740.service: Deactivated successfully. Nov 1 00:53:07.095976 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:53:07.096436 systemd-logind[1185]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:53:07.097064 systemd-logind[1185]: Removed session 6. Nov 1 00:53:07.098512 kernel: audit: type=1130 audit(1761958387.087:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.087000 audit[1306]: USER_END pid=1306 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.101307 systemd[1]: Started sshd@6-10.0.0.5:22-10.0.0.1:54744.service. Nov 1 00:53:07.104632 kernel: audit: type=1106 audit(1761958387.087:210): pid=1306 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.104670 kernel: audit: type=1104 audit(1761958387.087:211): pid=1306 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.087000 audit[1306]: CRED_DISP pid=1306 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.092000 audit[1303]: USER_END pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:07.117432 kernel: audit: type=1106 audit(1761958387.092:212): pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:07.117458 kernel: audit: type=1104 audit(1761958387.092:213): pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:07.092000 audit[1303]: CRED_DISP pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:07.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.5:22-10.0.0.1:54740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.129231 kernel: audit: type=1131 audit(1761958387.092:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.5:22-10.0.0.1:54740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.5:22-10.0.0.1:54744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.150000 audit[1333]: USER_ACCT pid=1333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:07.151547 sshd[1333]: Accepted publickey for core from 10.0.0.1 port 54744 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:53:07.151000 audit[1333]: CRED_ACQ pid=1333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:07.151000 audit[1333]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5907eaa0 a2=3 a3=0 items=0 ppid=1 pid=1333 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:07.151000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:53:07.152487 sshd[1333]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:53:07.155186 systemd-logind[1185]: New session 7 of user core. Nov 1 00:53:07.155834 systemd[1]: Started session-7.scope. Nov 1 00:53:07.158000 audit[1333]: USER_START pid=1333 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:07.158000 audit[1335]: CRED_ACQ pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:07.205000 audit[1336]: USER_ACCT pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.205000 audit[1336]: CRED_REFR pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.206532 sudo[1336]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:53:07.206707 sudo[1336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:53:07.207000 audit[1336]: USER_START pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:07.225600 systemd[1]: Starting docker.service... Nov 1 00:53:07.259613 env[1348]: time="2025-11-01T00:53:07.259561193Z" level=info msg="Starting up" Nov 1 00:53:07.260802 env[1348]: time="2025-11-01T00:53:07.260757125Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:53:07.260802 env[1348]: time="2025-11-01T00:53:07.260782323Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:53:07.260889 env[1348]: time="2025-11-01T00:53:07.260825073Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:53:07.260889 env[1348]: time="2025-11-01T00:53:07.260835693Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:53:07.262358 env[1348]: time="2025-11-01T00:53:07.262334894Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:53:07.262441 env[1348]: time="2025-11-01T00:53:07.262420715Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:53:07.262521 env[1348]: time="2025-11-01T00:53:07.262501397Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:53:07.262588 env[1348]: time="2025-11-01T00:53:07.262571197Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:53:07.940536 env[1348]: time="2025-11-01T00:53:07.940462886Z" level=info msg="Loading containers: start." Nov 1 00:53:07.992000 audit[1382]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:07.992000 audit[1382]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff2c802f30 a2=0 a3=7fff2c802f1c items=0 ppid=1348 pid=1382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:07.992000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:53:07.994000 audit[1384]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:07.994000 audit[1384]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fffa1e5a630 a2=0 a3=7fffa1e5a61c items=0 ppid=1348 pid=1384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:07.994000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:53:07.995000 audit[1386]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:07.995000 audit[1386]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdb518e7e0 a2=0 a3=7ffdb518e7cc items=0 ppid=1348 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:07.995000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:53:07.997000 audit[1388]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:07.997000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe37716260 a2=0 a3=7ffe3771624c items=0 ppid=1348 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:07.997000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:53:07.999000 audit[1390]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:07.999000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff80e8d890 a2=0 a3=7fff80e8d87c items=0 ppid=1348 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:07.999000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:53:08.022000 audit[1395]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.022000 audit[1395]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd019d3c20 a2=0 a3=7ffd019d3c0c items=0 ppid=1348 pid=1395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.022000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:53:08.031000 audit[1397]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.031000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff3a335560 a2=0 a3=7fff3a33554c items=0 ppid=1348 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.031000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:53:08.032000 audit[1399]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.032000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffeca87bde0 a2=0 a3=7ffeca87bdcc items=0 ppid=1348 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.032000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:53:08.034000 audit[1401]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.034000 audit[1401]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc69b357b0 a2=0 a3=7ffc69b3579c items=0 ppid=1348 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.034000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:53:08.043000 audit[1405]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.043000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd9093f0b0 a2=0 a3=7ffd9093f09c items=0 ppid=1348 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.043000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:53:08.048000 audit[1406]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.048000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd22f22600 a2=0 a3=7ffd22f225ec items=0 ppid=1348 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.048000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:53:08.058917 kernel: Initializing XFRM netlink socket Nov 1 00:53:08.086844 env[1348]: time="2025-11-01T00:53:08.086796484Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:53:08.101000 audit[1414]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.101000 audit[1414]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffdadc13f40 a2=0 a3=7ffdadc13f2c items=0 ppid=1348 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.101000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:53:08.121000 audit[1417]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.121000 audit[1417]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffcedffe7e0 a2=0 a3=7ffcedffe7cc items=0 ppid=1348 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:53:08.123000 audit[1420]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.123000 audit[1420]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe20775a90 a2=0 a3=7ffe20775a7c items=0 ppid=1348 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.123000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:53:08.125000 audit[1422]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.125000 audit[1422]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcdb03fad0 a2=0 a3=7ffcdb03fabc items=0 ppid=1348 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.125000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:53:08.126000 audit[1424]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.126000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe4a96dde0 a2=0 a3=7ffe4a96ddcc items=0 ppid=1348 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.126000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:53:08.128000 audit[1426]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.128000 audit[1426]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd50a514e0 a2=0 a3=7ffd50a514cc items=0 ppid=1348 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.128000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:53:08.130000 audit[1428]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.130000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffde21e6e40 a2=0 a3=7ffde21e6e2c items=0 ppid=1348 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.130000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:53:08.136000 audit[1431]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.136000 audit[1431]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc839d3150 a2=0 a3=7ffc839d313c items=0 ppid=1348 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.136000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:53:08.137000 audit[1433]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.137000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd02bcecd0 a2=0 a3=7ffd02bcecbc items=0 ppid=1348 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.137000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:53:08.139000 audit[1435]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.139000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc09245030 a2=0 a3=7ffc0924501c items=0 ppid=1348 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.139000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:53:08.140000 audit[1437]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.140000 audit[1437]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcaab98a00 a2=0 a3=7ffcaab989ec items=0 ppid=1348 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.140000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:53:08.141983 systemd-networkd[1024]: docker0: Link UP Nov 1 00:53:08.149000 audit[1441]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.149000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc5eed92d0 a2=0 a3=7ffc5eed92bc items=0 ppid=1348 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.149000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:53:08.153000 audit[1442]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:08.153000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd4cb61e70 a2=0 a3=7ffd4cb61e5c items=0 ppid=1348 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:08.153000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:53:08.154766 env[1348]: time="2025-11-01T00:53:08.154735494Z" level=info msg="Loading containers: done." Nov 1 00:53:08.163115 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2723971002-merged.mount: Deactivated successfully. Nov 1 00:53:08.169635 env[1348]: time="2025-11-01T00:53:08.169594760Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:53:08.169754 env[1348]: time="2025-11-01T00:53:08.169733891Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:53:08.169832 env[1348]: time="2025-11-01T00:53:08.169819081Z" level=info msg="Daemon has completed initialization" Nov 1 00:53:08.186320 systemd[1]: Started docker.service. Nov 1 00:53:08.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:08.191470 env[1348]: time="2025-11-01T00:53:08.191371920Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:53:08.883671 env[1204]: time="2025-11-01T00:53:08.883616466Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Nov 1 00:53:09.465404 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3021572764.mount: Deactivated successfully. Nov 1 00:53:10.997094 env[1204]: time="2025-11-01T00:53:10.997012488Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:10.999249 env[1204]: time="2025-11-01T00:53:10.999178219Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:abd2b525baf428ffb8b8b7d1e09761dc5cdb7ed0c7896a9427e29e84f8eafc59,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:11.001453 env[1204]: time="2025-11-01T00:53:11.001403913Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:11.003695 env[1204]: time="2025-11-01T00:53:11.003625109Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:11.005051 env[1204]: time="2025-11-01T00:53:11.005009355Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:abd2b525baf428ffb8b8b7d1e09761dc5cdb7ed0c7896a9427e29e84f8eafc59\"" Nov 1 00:53:11.005721 env[1204]: time="2025-11-01T00:53:11.005695472Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Nov 1 00:53:12.628426 env[1204]: time="2025-11-01T00:53:12.628376858Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:12.630580 env[1204]: time="2025-11-01T00:53:12.630554943Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0debe32fbb7223500fcf8c312f2a568a5abd3ed9274d8ec6780cfb30b8861e91,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:12.632556 env[1204]: time="2025-11-01T00:53:12.632532261Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:12.634658 env[1204]: time="2025-11-01T00:53:12.634631718Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:12.635442 env[1204]: time="2025-11-01T00:53:12.635402153Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:0debe32fbb7223500fcf8c312f2a568a5abd3ed9274d8ec6780cfb30b8861e91\"" Nov 1 00:53:12.635993 env[1204]: time="2025-11-01T00:53:12.635973184Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Nov 1 00:53:13.965334 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:53:13.965514 systemd[1]: Stopped kubelet.service. Nov 1 00:53:13.965559 systemd[1]: kubelet.service: Consumed 1.075s CPU time. Nov 1 00:53:13.966926 systemd[1]: Starting kubelet.service... Nov 1 00:53:13.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:13.968482 kernel: kauditd_printk_skb: 84 callbacks suppressed Nov 1 00:53:13.968577 kernel: audit: type=1130 audit(1761958393.964:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:13.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:13.979205 kernel: audit: type=1131 audit(1761958393.964:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:14.057940 systemd[1]: Started kubelet.service. Nov 1 00:53:14.064924 kernel: audit: type=1130 audit(1761958394.057:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:14.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:14.095772 kubelet[1485]: E1101 00:53:14.095714 1485 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:53:14.098225 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:53:14.098333 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:53:14.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:53:14.104830 kernel: audit: type=1131 audit(1761958394.097:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:53:14.753738 env[1204]: time="2025-11-01T00:53:14.753671314Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:14.755603 env[1204]: time="2025-11-01T00:53:14.755569103Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6934c23b154fcb9bf54ed5913782de746735a49f4daa4732285915050cd44ad5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:14.757380 env[1204]: time="2025-11-01T00:53:14.757340215Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:14.759399 env[1204]: time="2025-11-01T00:53:14.759361646Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:14.760060 env[1204]: time="2025-11-01T00:53:14.760027715Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:6934c23b154fcb9bf54ed5913782de746735a49f4daa4732285915050cd44ad5\"" Nov 1 00:53:14.760648 env[1204]: time="2025-11-01T00:53:14.760594648Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Nov 1 00:53:15.897948 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1784104986.mount: Deactivated successfully. Nov 1 00:53:16.994397 env[1204]: time="2025-11-01T00:53:16.994326342Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:16.996366 env[1204]: time="2025-11-01T00:53:16.996329659Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fa3fdca615a501743d8deb39729a96e731312aac8d96accec061d5265360332f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:16.997909 env[1204]: time="2025-11-01T00:53:16.997866020Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:16.999177 env[1204]: time="2025-11-01T00:53:16.999144398Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:16.999649 env[1204]: time="2025-11-01T00:53:16.999601816Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:fa3fdca615a501743d8deb39729a96e731312aac8d96accec061d5265360332f\"" Nov 1 00:53:17.000087 env[1204]: time="2025-11-01T00:53:17.000031992Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Nov 1 00:53:17.657716 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount340149921.mount: Deactivated successfully. Nov 1 00:53:18.695791 env[1204]: time="2025-11-01T00:53:18.695741343Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:18.697637 env[1204]: time="2025-11-01T00:53:18.697615437Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:18.702006 env[1204]: time="2025-11-01T00:53:18.701975985Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:18.703170 env[1204]: time="2025-11-01T00:53:18.703113087Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Nov 1 00:53:18.703665 env[1204]: time="2025-11-01T00:53:18.703646528Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:53:18.703964 env[1204]: time="2025-11-01T00:53:18.703940078Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:19.469624 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3954957906.mount: Deactivated successfully. Nov 1 00:53:19.475677 env[1204]: time="2025-11-01T00:53:19.475613852Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:19.477756 env[1204]: time="2025-11-01T00:53:19.477726524Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:19.479519 env[1204]: time="2025-11-01T00:53:19.479474161Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:19.481135 env[1204]: time="2025-11-01T00:53:19.481088940Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:19.481735 env[1204]: time="2025-11-01T00:53:19.481702130Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Nov 1 00:53:19.482289 env[1204]: time="2025-11-01T00:53:19.482265807Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Nov 1 00:53:19.910331 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2080418361.mount: Deactivated successfully. Nov 1 00:53:22.894645 env[1204]: time="2025-11-01T00:53:22.894587378Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:22.896563 env[1204]: time="2025-11-01T00:53:22.896514251Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:22.898293 env[1204]: time="2025-11-01T00:53:22.898261899Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:22.900092 env[1204]: time="2025-11-01T00:53:22.900066333Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:22.900801 env[1204]: time="2025-11-01T00:53:22.900765784Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Nov 1 00:53:24.259584 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:53:24.259764 systemd[1]: Stopped kubelet.service. Nov 1 00:53:24.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:24.260967 systemd[1]: Starting kubelet.service... Nov 1 00:53:24.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:24.270594 kernel: audit: type=1130 audit(1761958404.258:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:24.270649 kernel: audit: type=1131 audit(1761958404.259:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:24.349181 systemd[1]: Started kubelet.service. Nov 1 00:53:24.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:24.354853 kernel: audit: type=1130 audit(1761958404.348:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:24.385592 kubelet[1518]: E1101 00:53:24.385538 1518 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:53:24.387143 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:53:24.387256 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:53:24.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:53:24.393844 kernel: audit: type=1131 audit(1761958404.386:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:53:25.426855 systemd[1]: Stopped kubelet.service. Nov 1 00:53:25.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:25.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:25.432674 systemd[1]: Starting kubelet.service... Nov 1 00:53:25.437861 kernel: audit: type=1130 audit(1761958405.426:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:25.437953 kernel: audit: type=1131 audit(1761958405.426:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:25.454875 systemd[1]: Reloading. Nov 1 00:53:25.516119 /usr/lib/systemd/system-generators/torcx-generator[1552]: time="2025-11-01T00:53:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:53:25.516434 /usr/lib/systemd/system-generators/torcx-generator[1552]: time="2025-11-01T00:53:25Z" level=info msg="torcx already run" Nov 1 00:53:26.193001 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:53:26.193017 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:53:26.209748 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:53:26.278865 kernel: audit: type=1400 audit(1761958406.268:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.278981 kernel: audit: type=1400 audit(1761958406.268:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.284072 kernel: audit: type=1400 audit(1761958406.268:261): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.284140 kernel: audit: type=1400 audit(1761958406.268:262): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.278000 audit: BPF prog-id=46 op=LOAD Nov 1 00:53:26.278000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit: BPF prog-id=47 op=LOAD Nov 1 00:53:26.283000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit: BPF prog-id=48 op=LOAD Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit: BPF prog-id=49 op=LOAD Nov 1 00:53:26.288000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:53:26.288000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit: BPF prog-id=50 op=LOAD Nov 1 00:53:26.289000 audit: BPF prog-id=33 op=UNLOAD Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit: BPF prog-id=51 op=LOAD Nov 1 00:53:26.290000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit: BPF prog-id=52 op=LOAD Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit: BPF prog-id=53 op=LOAD Nov 1 00:53:26.290000 audit: BPF prog-id=42 op=UNLOAD Nov 1 00:53:26.290000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit: BPF prog-id=54 op=LOAD Nov 1 00:53:26.291000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit: BPF prog-id=55 op=LOAD Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.291000 audit: BPF prog-id=56 op=LOAD Nov 1 00:53:26.291000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:53:26.291000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit: BPF prog-id=57 op=LOAD Nov 1 00:53:26.292000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.292000 audit: BPF prog-id=58 op=LOAD Nov 1 00:53:26.293000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit: BPF prog-id=59 op=LOAD Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.293000 audit: BPF prog-id=60 op=LOAD Nov 1 00:53:26.293000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:53:26.293000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:53:26.303517 systemd[1]: Started kubelet.service. Nov 1 00:53:26.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:26.304619 systemd[1]: Stopping kubelet.service... Nov 1 00:53:26.304848 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:53:26.304984 systemd[1]: Stopped kubelet.service. Nov 1 00:53:26.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:26.306283 systemd[1]: Starting kubelet.service... Nov 1 00:53:26.390139 systemd[1]: Started kubelet.service. Nov 1 00:53:26.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:26.430133 kubelet[1600]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:53:26.430133 kubelet[1600]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:53:26.430133 kubelet[1600]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:53:26.430598 kubelet[1600]: I1101 00:53:26.430208 1600 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:53:26.735901 kubelet[1600]: I1101 00:53:26.735844 1600 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:53:26.735901 kubelet[1600]: I1101 00:53:26.735879 1600 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:53:26.736187 kubelet[1600]: I1101 00:53:26.736164 1600 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:53:26.759625 kubelet[1600]: E1101 00:53:26.759578 1600 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.5:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:26.760732 kubelet[1600]: I1101 00:53:26.760712 1600 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:53:26.765790 kubelet[1600]: E1101 00:53:26.765754 1600 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:53:26.765790 kubelet[1600]: I1101 00:53:26.765784 1600 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:53:26.769225 kubelet[1600]: I1101 00:53:26.769195 1600 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:53:26.770980 kubelet[1600]: I1101 00:53:26.770944 1600 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:53:26.771126 kubelet[1600]: I1101 00:53:26.770972 1600 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:53:26.771126 kubelet[1600]: I1101 00:53:26.771124 1600 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:53:26.771251 kubelet[1600]: I1101 00:53:26.771133 1600 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:53:26.771251 kubelet[1600]: I1101 00:53:26.771240 1600 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:53:26.773679 kubelet[1600]: I1101 00:53:26.773658 1600 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:53:26.773711 kubelet[1600]: I1101 00:53:26.773687 1600 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:53:26.773711 kubelet[1600]: I1101 00:53:26.773707 1600 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:53:26.773751 kubelet[1600]: I1101 00:53:26.773718 1600 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:53:26.779275 kubelet[1600]: I1101 00:53:26.779256 1600 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:53:26.779867 kubelet[1600]: I1101 00:53:26.779833 1600 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:53:26.786884 kubelet[1600]: W1101 00:53:26.786842 1600 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.5:6443: connect: connection refused Nov 1 00:53:26.786950 kubelet[1600]: E1101 00:53:26.786894 1600 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:26.787431 kubelet[1600]: W1101 00:53:26.787400 1600 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:53:26.788172 kubelet[1600]: W1101 00:53:26.788127 1600 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.5:6443: connect: connection refused Nov 1 00:53:26.788172 kubelet[1600]: E1101 00:53:26.788164 1600 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:26.794614 kubelet[1600]: I1101 00:53:26.794585 1600 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:53:26.794659 kubelet[1600]: I1101 00:53:26.794633 1600 server.go:1287] "Started kubelet" Nov 1 00:53:26.794976 kubelet[1600]: I1101 00:53:26.794931 1600 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:53:26.796691 kubelet[1600]: I1101 00:53:26.796663 1600 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:53:26.806000 audit[1600]: AVC avc: denied { mac_admin } for pid=1600 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.806000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:53:26.806000 audit[1600]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d60450 a1=c0009c30e0 a2=c000d60420 a3=25 items=0 ppid=1 pid=1600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.806000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:53:26.806000 audit[1600]: AVC avc: denied { mac_admin } for pid=1600 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:26.806000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:53:26.806000 audit[1600]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d12b40 a1=c0009c30f8 a2=c000d604e0 a3=25 items=0 ppid=1 pid=1600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.806000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:53:26.807351 kubelet[1600]: I1101 00:53:26.806978 1600 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:53:26.807351 kubelet[1600]: I1101 00:53:26.807014 1600 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:53:26.807351 kubelet[1600]: I1101 00:53:26.807064 1600 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:53:26.808723 kubelet[1600]: I1101 00:53:26.808695 1600 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:53:26.808929 kubelet[1600]: I1101 00:53:26.808899 1600 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:53:26.809178 kubelet[1600]: E1101 00:53:26.809151 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:26.809487 kubelet[1600]: I1101 00:53:26.809412 1600 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:53:26.810195 kubelet[1600]: I1101 00:53:26.809934 1600 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:53:26.810195 kubelet[1600]: I1101 00:53:26.810025 1600 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:53:26.810195 kubelet[1600]: I1101 00:53:26.810075 1600 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:53:26.811696 kubelet[1600]: W1101 00:53:26.811662 1600 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.5:6443: connect: connection refused Nov 1 00:53:26.811830 kubelet[1600]: E1101 00:53:26.811787 1600 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:26.812000 audit[1613]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1613 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:26.812000 audit[1613]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe1d4c5d70 a2=0 a3=7ffe1d4c5d5c items=0 ppid=1600 pid=1613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.812000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:53:26.813000 audit[1614]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1614 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:26.813000 audit[1614]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9a842d30 a2=0 a3=7ffd9a842d1c items=0 ppid=1600 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.813000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:53:26.815841 kubelet[1600]: E1101 00:53:26.815780 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.5:6443: connect: connection refused" interval="200ms" Nov 1 00:53:26.815000 audit[1616]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:26.815000 audit[1616]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd9d091160 a2=0 a3=7ffd9d09114c items=0 ppid=1600 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.815000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:53:26.817000 audit[1618]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:26.817000 audit[1618]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdbd480160 a2=0 a3=7ffdbd48014c items=0 ppid=1600 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.817000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:53:26.818657 kubelet[1600]: E1101 00:53:26.812036 1600 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.5:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.5:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1873bbd5f20184d0 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-11-01 00:53:26.794609872 +0000 UTC m=+0.400856330,LastTimestamp:2025-11-01 00:53:26.794609872 +0000 UTC m=+0.400856330,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Nov 1 00:53:26.819211 kubelet[1600]: I1101 00:53:26.818786 1600 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:53:26.819211 kubelet[1600]: I1101 00:53:26.818861 1600 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:53:26.819685 kubelet[1600]: I1101 00:53:26.819669 1600 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:53:26.820719 kubelet[1600]: E1101 00:53:26.820674 1600 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:53:26.823000 audit[1621]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:26.823000 audit[1621]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff2abb72a0 a2=0 a3=7fff2abb728c items=0 ppid=1600 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.823000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:53:26.824412 kubelet[1600]: I1101 00:53:26.824278 1600 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:53:26.824000 audit[1622]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:26.824000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd5f2b9330 a2=0 a3=7ffd5f2b931c items=0 ppid=1600 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.824000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:53:26.825231 kubelet[1600]: I1101 00:53:26.825215 1600 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:53:26.825231 kubelet[1600]: I1101 00:53:26.825231 1600 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:53:26.825281 kubelet[1600]: I1101 00:53:26.825249 1600 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:53:26.825281 kubelet[1600]: I1101 00:53:26.825260 1600 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:53:26.825328 kubelet[1600]: E1101 00:53:26.825311 1600 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:53:26.825000 audit[1625]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:26.825000 audit[1625]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd1f7ef010 a2=0 a3=7ffd1f7eeffc items=0 ppid=1600 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.825000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:53:26.826000 audit[1627]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:26.826000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe3aaa3ca0 a2=0 a3=7ffe3aaa3c8c items=0 ppid=1600 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:53:26.827000 audit[1628]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:26.827000 audit[1628]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf6c635c0 a2=0 a3=7ffdf6c635ac items=0 ppid=1600 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.827000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:53:26.828000 audit[1629]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:26.828000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdc163f8b0 a2=0 a3=7ffdc163f89c items=0 ppid=1600 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:53:26.828000 audit[1630]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:26.828000 audit[1630]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffdb13c3c80 a2=0 a3=7ffdb13c3c6c items=0 ppid=1600 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:53:26.829917 kubelet[1600]: W1101 00:53:26.829703 1600 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.5:6443: connect: connection refused Nov 1 00:53:26.829917 kubelet[1600]: E1101 00:53:26.829742 1600 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:26.829000 audit[1631]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:26.829000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe1f396bb0 a2=0 a3=7ffe1f396b9c items=0 ppid=1600 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:26.829000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:53:26.830735 kubelet[1600]: I1101 00:53:26.830656 1600 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:53:26.830735 kubelet[1600]: I1101 00:53:26.830669 1600 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:53:26.830735 kubelet[1600]: I1101 00:53:26.830686 1600 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:53:26.909268 kubelet[1600]: E1101 00:53:26.909244 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:26.926306 kubelet[1600]: E1101 00:53:26.926262 1600 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:53:27.009534 kubelet[1600]: E1101 00:53:27.009508 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:27.017228 kubelet[1600]: E1101 00:53:27.017186 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.5:6443: connect: connection refused" interval="400ms" Nov 1 00:53:27.110423 kubelet[1600]: E1101 00:53:27.110311 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:27.126732 kubelet[1600]: E1101 00:53:27.126670 1600 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:53:27.204667 kubelet[1600]: I1101 00:53:27.204612 1600 policy_none.go:49] "None policy: Start" Nov 1 00:53:27.204667 kubelet[1600]: I1101 00:53:27.204644 1600 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:53:27.204667 kubelet[1600]: I1101 00:53:27.204658 1600 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:53:27.210192 systemd[1]: Created slice kubepods.slice. Nov 1 00:53:27.210529 kubelet[1600]: E1101 00:53:27.210405 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:27.213715 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:53:27.215735 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:53:27.220336 kubelet[1600]: I1101 00:53:27.220300 1600 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:53:27.219000 audit[1600]: AVC avc: denied { mac_admin } for pid=1600 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:27.219000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:53:27.219000 audit[1600]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c44c90 a1=c000c41608 a2=c000c44c60 a3=25 items=0 ppid=1 pid=1600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:27.219000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:53:27.220527 kubelet[1600]: I1101 00:53:27.220361 1600 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:53:27.220527 kubelet[1600]: I1101 00:53:27.220441 1600 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:53:27.220527 kubelet[1600]: I1101 00:53:27.220450 1600 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:53:27.220685 kubelet[1600]: I1101 00:53:27.220655 1600 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:53:27.221749 kubelet[1600]: E1101 00:53:27.221727 1600 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:53:27.221801 kubelet[1600]: E1101 00:53:27.221760 1600 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Nov 1 00:53:27.322392 kubelet[1600]: I1101 00:53:27.322276 1600 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:53:27.322605 kubelet[1600]: E1101 00:53:27.322574 1600 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.5:6443/api/v1/nodes\": dial tcp 10.0.0.5:6443: connect: connection refused" node="localhost" Nov 1 00:53:27.418462 kubelet[1600]: E1101 00:53:27.418406 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.5:6443: connect: connection refused" interval="800ms" Nov 1 00:53:27.523896 kubelet[1600]: I1101 00:53:27.523851 1600 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:53:27.524257 kubelet[1600]: E1101 00:53:27.524175 1600 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.5:6443/api/v1/nodes\": dial tcp 10.0.0.5:6443: connect: connection refused" node="localhost" Nov 1 00:53:27.532376 systemd[1]: Created slice kubepods-burstable-pod43c11b4a96b1ba60c91524e00f4204a9.slice. Nov 1 00:53:27.539281 kubelet[1600]: E1101 00:53:27.539258 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:27.541162 systemd[1]: Created slice kubepods-burstable-pod4654b122dbb389158fe3c0766e603624.slice. Nov 1 00:53:27.542528 kubelet[1600]: E1101 00:53:27.542509 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:27.544138 systemd[1]: Created slice kubepods-burstable-poda1d51be1ff02022474f2598f6e43038f.slice. Nov 1 00:53:27.545330 kubelet[1600]: E1101 00:53:27.545310 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:27.615744 kubelet[1600]: I1101 00:53:27.615681 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:27.615744 kubelet[1600]: I1101 00:53:27.615713 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a1d51be1ff02022474f2598f6e43038f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a1d51be1ff02022474f2598f6e43038f\") " pod="kube-system/kube-scheduler-localhost" Nov 1 00:53:27.615744 kubelet[1600]: I1101 00:53:27.615733 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/43c11b4a96b1ba60c91524e00f4204a9-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"43c11b4a96b1ba60c91524e00f4204a9\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:27.615859 kubelet[1600]: I1101 00:53:27.615749 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:27.615859 kubelet[1600]: I1101 00:53:27.615768 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:27.615859 kubelet[1600]: I1101 00:53:27.615786 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:27.615859 kubelet[1600]: I1101 00:53:27.615818 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:27.615859 kubelet[1600]: I1101 00:53:27.615837 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/43c11b4a96b1ba60c91524e00f4204a9-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"43c11b4a96b1ba60c91524e00f4204a9\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:27.615958 kubelet[1600]: I1101 00:53:27.615858 1600 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/43c11b4a96b1ba60c91524e00f4204a9-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"43c11b4a96b1ba60c91524e00f4204a9\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:27.672149 kubelet[1600]: W1101 00:53:27.672132 1600 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.5:6443: connect: connection refused Nov 1 00:53:27.672194 kubelet[1600]: E1101 00:53:27.672158 1600 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.5:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:27.740118 kubelet[1600]: E1101 00:53:27.740017 1600 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.5:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.5:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1873bbd5f20184d0 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-11-01 00:53:26.794609872 +0000 UTC m=+0.400856330,LastTimestamp:2025-11-01 00:53:26.794609872 +0000 UTC m=+0.400856330,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Nov 1 00:53:27.757516 kubelet[1600]: W1101 00:53:27.757475 1600 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.5:6443: connect: connection refused Nov 1 00:53:27.757601 kubelet[1600]: E1101 00:53:27.757519 1600 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.5:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:27.840272 kubelet[1600]: E1101 00:53:27.840248 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:27.840752 env[1204]: time="2025-11-01T00:53:27.840717657Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:43c11b4a96b1ba60c91524e00f4204a9,Namespace:kube-system,Attempt:0,}" Nov 1 00:53:27.842890 kubelet[1600]: E1101 00:53:27.842860 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:27.843100 env[1204]: time="2025-11-01T00:53:27.843077293Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:4654b122dbb389158fe3c0766e603624,Namespace:kube-system,Attempt:0,}" Nov 1 00:53:27.846411 kubelet[1600]: E1101 00:53:27.846378 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:27.846638 env[1204]: time="2025-11-01T00:53:27.846608305Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a1d51be1ff02022474f2598f6e43038f,Namespace:kube-system,Attempt:0,}" Nov 1 00:53:27.846795 kubelet[1600]: W1101 00:53:27.846536 1600 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.5:6443: connect: connection refused Nov 1 00:53:27.846869 kubelet[1600]: E1101 00:53:27.846802 1600 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.5:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:27.925559 kubelet[1600]: I1101 00:53:27.925459 1600 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:53:27.925759 kubelet[1600]: E1101 00:53:27.925731 1600 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.5:6443/api/v1/nodes\": dial tcp 10.0.0.5:6443: connect: connection refused" node="localhost" Nov 1 00:53:28.135775 kubelet[1600]: W1101 00:53:28.135685 1600 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.5:6443: connect: connection refused Nov 1 00:53:28.135775 kubelet[1600]: E1101 00:53:28.135765 1600 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.5:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:28.219724 kubelet[1600]: E1101 00:53:28.219632 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.5:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.5:6443: connect: connection refused" interval="1.6s" Nov 1 00:53:28.727590 kubelet[1600]: I1101 00:53:28.727556 1600 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:53:28.727940 kubelet[1600]: E1101 00:53:28.727882 1600 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.5:6443/api/v1/nodes\": dial tcp 10.0.0.5:6443: connect: connection refused" node="localhost" Nov 1 00:53:28.802330 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2380051146.mount: Deactivated successfully. Nov 1 00:53:28.808020 env[1204]: time="2025-11-01T00:53:28.807966454Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.811735 env[1204]: time="2025-11-01T00:53:28.811701028Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.813443 env[1204]: time="2025-11-01T00:53:28.813404713Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.814655 env[1204]: time="2025-11-01T00:53:28.814634219Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.815456 env[1204]: time="2025-11-01T00:53:28.815425843Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.816672 env[1204]: time="2025-11-01T00:53:28.816640812Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.818118 env[1204]: time="2025-11-01T00:53:28.818095981Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.820138 env[1204]: time="2025-11-01T00:53:28.820114737Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.821579 env[1204]: time="2025-11-01T00:53:28.821557182Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.822882 env[1204]: time="2025-11-01T00:53:28.822858773Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.824716 env[1204]: time="2025-11-01T00:53:28.824680810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.830158 env[1204]: time="2025-11-01T00:53:28.830133886Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:28.839989 env[1204]: time="2025-11-01T00:53:28.839913597Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:53:28.839989 env[1204]: time="2025-11-01T00:53:28.839964632Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:53:28.839989 env[1204]: time="2025-11-01T00:53:28.839979270Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:53:28.840326 env[1204]: time="2025-11-01T00:53:28.840252973Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b26128153a2175697fe86d1bfd233850b5454630362952709f9ddf93946046e1 pid=1640 runtime=io.containerd.runc.v2 Nov 1 00:53:28.855137 systemd[1]: Started cri-containerd-b26128153a2175697fe86d1bfd233850b5454630362952709f9ddf93946046e1.scope. Nov 1 00:53:28.862561 env[1204]: time="2025-11-01T00:53:28.862461552Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:53:28.862561 env[1204]: time="2025-11-01T00:53:28.862521094Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:53:28.862561 env[1204]: time="2025-11-01T00:53:28.862534689Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:53:28.863213 env[1204]: time="2025-11-01T00:53:28.863150785Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a2755106fb70edc5b3e5ebb0b8921c3eeef02a20ecf1e95bd54edd35ee8d30d5 pid=1686 runtime=io.containerd.runc.v2 Nov 1 00:53:28.864224 env[1204]: time="2025-11-01T00:53:28.864162722Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:53:28.865337 env[1204]: time="2025-11-01T00:53:28.864206344Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:53:28.865337 env[1204]: time="2025-11-01T00:53:28.864259213Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:53:28.865337 env[1204]: time="2025-11-01T00:53:28.864451053Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b0948d072233025e3a3605792785a672ad9b03ae15261fe3d973fe95673019b5 pid=1677 runtime=io.containerd.runc.v2 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.865000 audit: BPF prog-id=61 op=LOAD Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1640 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363132383135336132313735363937666538366431626664323333 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1640 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363132383135336132313735363937666538366431626664323333 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit: BPF prog-id=62 op=LOAD Nov 1 00:53:28.866000 audit[1650]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003d8580 items=0 ppid=1640 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363132383135336132313735363937666538366431626664323333 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.866000 audit: BPF prog-id=63 op=LOAD Nov 1 00:53:28.866000 audit[1650]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003d85c8 items=0 ppid=1640 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363132383135336132313735363937666538366431626664323333 Nov 1 00:53:28.867000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:53:28.867000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { perfmon } for pid=1650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit[1650]: AVC avc: denied { bpf } for pid=1650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.867000 audit: BPF prog-id=64 op=LOAD Nov 1 00:53:28.867000 audit[1650]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d89d8 items=0 ppid=1640 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.867000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232363132383135336132313735363937666538366431626664323333 Nov 1 00:53:28.873929 systemd[1]: Started cri-containerd-a2755106fb70edc5b3e5ebb0b8921c3eeef02a20ecf1e95bd54edd35ee8d30d5.scope. Nov 1 00:53:28.879657 systemd[1]: Started cri-containerd-b0948d072233025e3a3605792785a672ad9b03ae15261fe3d973fe95673019b5.scope. Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.886000 audit: BPF prog-id=65 op=LOAD Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1686 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132373535313036666237306564633562336535656262306238393231 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1686 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132373535313036666237306564633562336535656262306238393231 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit: BPF prog-id=66 op=LOAD Nov 1 00:53:28.887000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003092e0 items=0 ppid=1686 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132373535313036666237306564633562336535656262306238393231 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.887000 audit: BPF prog-id=67 op=LOAD Nov 1 00:53:28.887000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000309328 items=0 ppid=1686 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132373535313036666237306564633562336535656262306238393231 Nov 1 00:53:28.887000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:53:28.887000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.888000 audit: BPF prog-id=68 op=LOAD Nov 1 00:53:28.888000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000309738 items=0 ppid=1686 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132373535313036666237306564633562336535656262306238393231 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit: BPF prog-id=69 op=LOAD Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=1677 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230393438643037323233333032356533613336303537393237383561 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00023d6b0 a2=3c a3=c items=0 ppid=1677 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230393438643037323233333032356533613336303537393237383561 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.889000 audit: BPF prog-id=70 op=LOAD Nov 1 00:53:28.889000 audit[1705]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023d9d8 a2=78 a3=c0002c86d0 items=0 ppid=1677 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230393438643037323233333032356533613336303537393237383561 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit: BPF prog-id=71 op=LOAD Nov 1 00:53:28.890000 audit[1705]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023d770 a2=78 a3=c0002c8718 items=0 ppid=1677 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230393438643037323233333032356533613336303537393237383561 Nov 1 00:53:28.890000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:53:28.890000 audit: BPF prog-id=70 op=UNLOAD Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { perfmon } for pid=1705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit[1705]: AVC avc: denied { bpf } for pid=1705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.890000 audit: BPF prog-id=72 op=LOAD Nov 1 00:53:28.890000 audit[1705]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023dc30 a2=78 a3=c0002c8b28 items=0 ppid=1677 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230393438643037323233333032356533613336303537393237383561 Nov 1 00:53:28.917445 env[1204]: time="2025-11-01T00:53:28.917388950Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a1d51be1ff02022474f2598f6e43038f,Namespace:kube-system,Attempt:0,} returns sandbox id \"b26128153a2175697fe86d1bfd233850b5454630362952709f9ddf93946046e1\"" Nov 1 00:53:28.917580 env[1204]: time="2025-11-01T00:53:28.917549361Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:4654b122dbb389158fe3c0766e603624,Namespace:kube-system,Attempt:0,} returns sandbox id \"a2755106fb70edc5b3e5ebb0b8921c3eeef02a20ecf1e95bd54edd35ee8d30d5\"" Nov 1 00:53:28.918294 kubelet[1600]: E1101 00:53:28.918263 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:28.918454 kubelet[1600]: E1101 00:53:28.918436 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:28.920177 env[1204]: time="2025-11-01T00:53:28.920147925Z" level=info msg="CreateContainer within sandbox \"a2755106fb70edc5b3e5ebb0b8921c3eeef02a20ecf1e95bd54edd35ee8d30d5\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:53:28.920575 env[1204]: time="2025-11-01T00:53:28.920547524Z" level=info msg="CreateContainer within sandbox \"b26128153a2175697fe86d1bfd233850b5454630362952709f9ddf93946046e1\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:53:28.922447 env[1204]: time="2025-11-01T00:53:28.922401972Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:43c11b4a96b1ba60c91524e00f4204a9,Namespace:kube-system,Attempt:0,} returns sandbox id \"b0948d072233025e3a3605792785a672ad9b03ae15261fe3d973fe95673019b5\"" Nov 1 00:53:28.922804 kubelet[1600]: E1101 00:53:28.922789 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:28.924047 env[1204]: time="2025-11-01T00:53:28.924027901Z" level=info msg="CreateContainer within sandbox \"b0948d072233025e3a3605792785a672ad9b03ae15261fe3d973fe95673019b5\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:53:28.951786 env[1204]: time="2025-11-01T00:53:28.951731475Z" level=info msg="CreateContainer within sandbox \"b0948d072233025e3a3605792785a672ad9b03ae15261fe3d973fe95673019b5\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"20fbd5fa3f26c8e66c771f6a59f992cdd8a476c0b36147a75dd8acc6c6eba56e\"" Nov 1 00:53:28.952454 env[1204]: time="2025-11-01T00:53:28.952429875Z" level=info msg="StartContainer for \"20fbd5fa3f26c8e66c771f6a59f992cdd8a476c0b36147a75dd8acc6c6eba56e\"" Nov 1 00:53:28.953049 env[1204]: time="2025-11-01T00:53:28.953015583Z" level=info msg="CreateContainer within sandbox \"a2755106fb70edc5b3e5ebb0b8921c3eeef02a20ecf1e95bd54edd35ee8d30d5\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"d04b3ac7f175cf86df564e266a56f5f18033c56f462ecf64f15ee5f2d96afd29\"" Nov 1 00:53:28.953419 env[1204]: time="2025-11-01T00:53:28.953379836Z" level=info msg="StartContainer for \"d04b3ac7f175cf86df564e266a56f5f18033c56f462ecf64f15ee5f2d96afd29\"" Nov 1 00:53:28.954879 env[1204]: time="2025-11-01T00:53:28.954842760Z" level=info msg="CreateContainer within sandbox \"b26128153a2175697fe86d1bfd233850b5454630362952709f9ddf93946046e1\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"792fb7f2416fea3416285108c518e05376baaccedcc261b777a4eb6d646b0aaf\"" Nov 1 00:53:28.955305 env[1204]: time="2025-11-01T00:53:28.955267065Z" level=info msg="StartContainer for \"792fb7f2416fea3416285108c518e05376baaccedcc261b777a4eb6d646b0aaf\"" Nov 1 00:53:28.958618 kubelet[1600]: E1101 00:53:28.958589 1600 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.5:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.5:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:53:28.967534 systemd[1]: Started cri-containerd-d04b3ac7f175cf86df564e266a56f5f18033c56f462ecf64f15ee5f2d96afd29.scope. Nov 1 00:53:28.971081 systemd[1]: Started cri-containerd-20fbd5fa3f26c8e66c771f6a59f992cdd8a476c0b36147a75dd8acc6c6eba56e.scope. Nov 1 00:53:28.977562 systemd[1]: Started cri-containerd-792fb7f2416fea3416285108c518e05376baaccedcc261b777a4eb6d646b0aaf.scope. Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.980000 audit: BPF prog-id=73 op=LOAD Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1686 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430346233616337663137356366383664663536346532363661353666 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1686 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430346233616337663137356366383664663536346532363661353666 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.981000 audit: BPF prog-id=74 op=LOAD Nov 1 00:53:28.981000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000245db0 items=0 ppid=1686 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430346233616337663137356366383664663536346532363661353666 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit: BPF prog-id=75 op=LOAD Nov 1 00:53:28.983000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000245df8 items=0 ppid=1686 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430346233616337663137356366383664663536346532363661353666 Nov 1 00:53:28.983000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:53:28.983000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit: BPF prog-id=76 op=LOAD Nov 1 00:53:28.983000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00027e208 items=0 ppid=1686 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430346233616337663137356366383664663536346532363661353666 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.984000 audit: BPF prog-id=77 op=LOAD Nov 1 00:53:28.985000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.985000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1677 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230666264356661336632366338653636633737316636613539663939 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1677 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230666264356661336632366338653636633737316636613539663939 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.986000 audit: BPF prog-id=78 op=LOAD Nov 1 00:53:28.986000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001fa630 items=0 ppid=1677 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230666264356661336632366338653636633737316636613539663939 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.987000 audit: BPF prog-id=79 op=LOAD Nov 1 00:53:28.987000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001fa678 items=0 ppid=1677 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230666264356661336632366338653636633737316636613539663939 Nov 1 00:53:28.987000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:53:28.987000 audit: BPF prog-id=78 op=UNLOAD Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.988000 audit: BPF prog-id=80 op=LOAD Nov 1 00:53:28.988000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001faa88 items=0 ppid=1677 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230666264356661336632366338653636633737316636613539663939 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit: BPF prog-id=81 op=LOAD Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1640 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739326662376632343136666561333431363238353130386335313865 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1640 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739326662376632343136666561333431363238353130386335313865 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit: BPF prog-id=82 op=LOAD Nov 1 00:53:28.995000 audit[1793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002139f0 items=0 ppid=1640 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739326662376632343136666561333431363238353130386335313865 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit: BPF prog-id=83 op=LOAD Nov 1 00:53:28.995000 audit[1793]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000213a38 items=0 ppid=1640 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739326662376632343136666561333431363238353130386335313865 Nov 1 00:53:28.995000 audit: BPF prog-id=83 op=UNLOAD Nov 1 00:53:28.995000 audit: BPF prog-id=82 op=UNLOAD Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:28.995000 audit: BPF prog-id=84 op=LOAD Nov 1 00:53:28.995000 audit[1793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000213e48 items=0 ppid=1640 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:28.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739326662376632343136666561333431363238353130386335313865 Nov 1 00:53:29.013928 env[1204]: time="2025-11-01T00:53:29.013890275Z" level=info msg="StartContainer for \"d04b3ac7f175cf86df564e266a56f5f18033c56f462ecf64f15ee5f2d96afd29\" returns successfully" Nov 1 00:53:29.020031 env[1204]: time="2025-11-01T00:53:29.019985636Z" level=info msg="StartContainer for \"20fbd5fa3f26c8e66c771f6a59f992cdd8a476c0b36147a75dd8acc6c6eba56e\" returns successfully" Nov 1 00:53:29.027216 env[1204]: time="2025-11-01T00:53:29.027176010Z" level=info msg="StartContainer for \"792fb7f2416fea3416285108c518e05376baaccedcc261b777a4eb6d646b0aaf\" returns successfully" Nov 1 00:53:29.677865 kernel: kauditd_printk_skb: 561 callbacks suppressed Nov 1 00:53:29.678024 kernel: audit: type=1400 audit(1761958409.661:557): avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.678052 kernel: audit: type=1400 audit(1761958409.662:558): avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.661000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.662000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.678216 kernel: audit: type=1300 audit(1761958409.662:558): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00014d5c0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:29.662000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00014d5c0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:29.662000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:29.694588 kernel: audit: type=1327 audit(1761958409.662:558): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:29.694634 kernel: audit: type=1300 audit(1761958409.661:557): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000638930 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:29.661000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000638930 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:29.661000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:29.709631 kernel: audit: type=1327 audit(1761958409.661:557): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:29.836897 kubelet[1600]: E1101 00:53:29.836870 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:29.837238 kubelet[1600]: E1101 00:53:29.836990 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:29.838531 kubelet[1600]: E1101 00:53:29.838515 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:29.838599 kubelet[1600]: E1101 00:53:29.838591 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:29.839986 kubelet[1600]: E1101 00:53:29.839968 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:29.840063 kubelet[1600]: E1101 00:53:29.840053 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:29.931000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.931000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c006bfb500 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:53:29.947079 kernel: audit: type=1400 audit(1761958409.931:559): avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.947120 kernel: audit: type=1300 audit(1761958409.931:559): arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c006bfb500 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:53:29.947141 kernel: audit: type=1327 audit(1761958409.931:559): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:53:29.931000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:53:29.931000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.960361 kernel: audit: type=1400 audit(1761958409.931:560): avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.931000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c002bdc2a0 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:53:29.931000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:53:29.960000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.960000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c008098960 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:53:29.960000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:53:29.960000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.960000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c0048aa9f0 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:53:29.960000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:53:29.960000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.960000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002649540 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:53:29.960000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:53:29.960000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:29.960000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c006bfb890 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:53:29.960000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:53:29.994036 kubelet[1600]: E1101 00:53:29.993980 1600 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Nov 1 00:53:30.321499 kubelet[1600]: E1101 00:53:30.321470 1600 csi_plugin.go:308] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Nov 1 00:53:30.329595 kubelet[1600]: I1101 00:53:30.329577 1600 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:53:30.338281 kubelet[1600]: I1101 00:53:30.338214 1600 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Nov 1 00:53:30.338281 kubelet[1600]: E1101 00:53:30.338235 1600 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Nov 1 00:53:30.344120 kubelet[1600]: E1101 00:53:30.344088 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:30.444506 kubelet[1600]: E1101 00:53:30.444451 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:30.545328 kubelet[1600]: E1101 00:53:30.545289 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:30.645997 kubelet[1600]: E1101 00:53:30.645919 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:30.746485 kubelet[1600]: E1101 00:53:30.746440 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:30.841518 kubelet[1600]: E1101 00:53:30.841494 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:30.841914 kubelet[1600]: E1101 00:53:30.841564 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:30.841914 kubelet[1600]: E1101 00:53:30.841613 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:30.841914 kubelet[1600]: E1101 00:53:30.841650 1600 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:53:30.841914 kubelet[1600]: E1101 00:53:30.841652 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:30.841914 kubelet[1600]: E1101 00:53:30.841719 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:30.846928 kubelet[1600]: E1101 00:53:30.846905 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:30.947528 kubelet[1600]: E1101 00:53:30.947441 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:31.048085 kubelet[1600]: E1101 00:53:31.048031 1600 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:31.209836 kubelet[1600]: I1101 00:53:31.209715 1600 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:31.215007 kubelet[1600]: I1101 00:53:31.214986 1600 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:31.218607 kubelet[1600]: I1101 00:53:31.218570 1600 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:53:31.779738 kubelet[1600]: I1101 00:53:31.779711 1600 apiserver.go:52] "Watching apiserver" Nov 1 00:53:31.810911 kubelet[1600]: I1101 00:53:31.810890 1600 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:53:31.842154 kubelet[1600]: E1101 00:53:31.842121 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:31.842508 kubelet[1600]: E1101 00:53:31.842321 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:31.842508 kubelet[1600]: I1101 00:53:31.842359 1600 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:31.968548 kubelet[1600]: E1101 00:53:31.968513 1600 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:31.968701 kubelet[1600]: E1101 00:53:31.968673 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:32.031032 systemd[1]: Reloading. Nov 1 00:53:32.086938 /usr/lib/systemd/system-generators/torcx-generator[1904]: time="2025-11-01T00:53:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:53:32.086973 /usr/lib/systemd/system-generators/torcx-generator[1904]: time="2025-11-01T00:53:32Z" level=info msg="torcx already run" Nov 1 00:53:32.142210 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:53:32.142225 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:53:32.159241 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit: BPF prog-id=85 op=LOAD Nov 1 00:53:32.230000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.230000 audit: BPF prog-id=86 op=LOAD Nov 1 00:53:32.230000 audit: BPF prog-id=65 op=UNLOAD Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.232000 audit: BPF prog-id=87 op=LOAD Nov 1 00:53:32.232000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit: BPF prog-id=88 op=LOAD Nov 1 00:53:32.233000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit: BPF prog-id=89 op=LOAD Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.233000 audit: BPF prog-id=90 op=LOAD Nov 1 00:53:32.233000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:53:32.233000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit: BPF prog-id=91 op=LOAD Nov 1 00:53:32.234000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit: BPF prog-id=92 op=LOAD Nov 1 00:53:32.235000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit: BPF prog-id=93 op=LOAD Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit: BPF prog-id=94 op=LOAD Nov 1 00:53:32.235000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:53:32.235000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit: BPF prog-id=95 op=LOAD Nov 1 00:53:32.236000 audit: BPF prog-id=81 op=UNLOAD Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit: BPF prog-id=96 op=LOAD Nov 1 00:53:32.236000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.236000 audit: BPF prog-id=97 op=LOAD Nov 1 00:53:32.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit: BPF prog-id=98 op=LOAD Nov 1 00:53:32.237000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:53:32.237000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit: BPF prog-id=99 op=LOAD Nov 1 00:53:32.237000 audit: BPF prog-id=73 op=UNLOAD Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit: BPF prog-id=100 op=LOAD Nov 1 00:53:32.238000 audit: BPF prog-id=69 op=UNLOAD Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit: BPF prog-id=101 op=LOAD Nov 1 00:53:32.239000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit: BPF prog-id=102 op=LOAD Nov 1 00:53:32.239000 audit: BPF prog-id=77 op=UNLOAD Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit: BPF prog-id=103 op=LOAD Nov 1 00:53:32.240000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit: BPF prog-id=104 op=LOAD Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.240000 audit: BPF prog-id=105 op=LOAD Nov 1 00:53:32.240000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:53:32.240000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:53:32.250793 systemd[1]: Stopping kubelet.service... Nov 1 00:53:32.282052 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:53:32.282263 systemd[1]: Stopped kubelet.service. Nov 1 00:53:32.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:32.284467 systemd[1]: Starting kubelet.service... Nov 1 00:53:32.379038 systemd[1]: Started kubelet.service. Nov 1 00:53:32.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:32.417403 kubelet[1949]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:53:32.417403 kubelet[1949]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:53:32.417403 kubelet[1949]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:53:32.417733 kubelet[1949]: I1101 00:53:32.417439 1949 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:53:32.423332 kubelet[1949]: I1101 00:53:32.423311 1949 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:53:32.423450 kubelet[1949]: I1101 00:53:32.423436 1949 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:53:32.423727 kubelet[1949]: I1101 00:53:32.423714 1949 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:53:32.424741 kubelet[1949]: I1101 00:53:32.424726 1949 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Nov 1 00:53:32.427875 kubelet[1949]: I1101 00:53:32.427850 1949 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:53:32.430109 kubelet[1949]: E1101 00:53:32.430091 1949 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:53:32.430109 kubelet[1949]: I1101 00:53:32.430108 1949 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:53:32.432945 kubelet[1949]: I1101 00:53:32.432928 1949 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:53:32.433081 kubelet[1949]: I1101 00:53:32.433057 1949 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:53:32.433222 kubelet[1949]: I1101 00:53:32.433077 1949 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:53:32.433316 kubelet[1949]: I1101 00:53:32.433222 1949 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:53:32.433316 kubelet[1949]: I1101 00:53:32.433231 1949 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:53:32.433316 kubelet[1949]: I1101 00:53:32.433261 1949 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:53:32.433376 kubelet[1949]: I1101 00:53:32.433345 1949 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:53:32.433376 kubelet[1949]: I1101 00:53:32.433361 1949 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:53:32.433376 kubelet[1949]: I1101 00:53:32.433374 1949 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:53:32.433440 kubelet[1949]: I1101 00:53:32.433385 1949 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:53:32.433739 kubelet[1949]: I1101 00:53:32.433723 1949 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:53:32.434210 kubelet[1949]: I1101 00:53:32.434159 1949 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:53:32.435450 kubelet[1949]: I1101 00:53:32.435438 1949 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:53:32.435523 kubelet[1949]: I1101 00:53:32.435466 1949 server.go:1287] "Started kubelet" Nov 1 00:53:32.436000 audit[1949]: AVC avc: denied { mac_admin } for pid=1949 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.436000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:53:32.436000 audit[1949]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c0b950 a1=c000c603f0 a2=c000c0b920 a3=25 items=0 ppid=1 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:32.436000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:53:32.436000 audit[1949]: AVC avc: denied { mac_admin } for pid=1949 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.436000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:53:32.436000 audit[1949]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c08e40 a1=c000c60408 a2=c000c0b9e0 a3=25 items=0 ppid=1 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:32.436000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:53:32.437474 kubelet[1949]: I1101 00:53:32.437056 1949 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:53:32.437474 kubelet[1949]: I1101 00:53:32.437087 1949 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:53:32.437474 kubelet[1949]: I1101 00:53:32.437138 1949 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:53:32.442270 kubelet[1949]: E1101 00:53:32.442247 1949 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:53:32.442456 kubelet[1949]: I1101 00:53:32.442295 1949 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:53:32.442844 kubelet[1949]: I1101 00:53:32.442308 1949 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:53:32.443110 kubelet[1949]: I1101 00:53:32.443092 1949 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:53:32.443228 kubelet[1949]: I1101 00:53:32.443204 1949 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:53:32.443774 kubelet[1949]: I1101 00:53:32.443695 1949 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:53:32.443931 kubelet[1949]: I1101 00:53:32.443864 1949 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:53:32.444218 kubelet[1949]: I1101 00:53:32.444199 1949 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:53:32.444454 kubelet[1949]: I1101 00:53:32.443094 1949 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:53:32.444540 kubelet[1949]: I1101 00:53:32.444498 1949 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:53:32.447271 kubelet[1949]: I1101 00:53:32.447257 1949 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:53:32.449998 kubelet[1949]: I1101 00:53:32.449975 1949 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:53:32.450645 kubelet[1949]: I1101 00:53:32.450626 1949 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:53:32.451695 kubelet[1949]: I1101 00:53:32.451681 1949 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:53:32.451798 kubelet[1949]: I1101 00:53:32.451780 1949 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:53:32.451958 kubelet[1949]: I1101 00:53:32.451944 1949 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:53:32.452025 kubelet[1949]: I1101 00:53:32.452011 1949 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:53:32.452140 kubelet[1949]: E1101 00:53:32.452116 1949 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:53:32.478088 kubelet[1949]: I1101 00:53:32.478043 1949 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:53:32.478088 kubelet[1949]: I1101 00:53:32.478082 1949 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:53:32.478282 kubelet[1949]: I1101 00:53:32.478102 1949 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:53:32.478318 kubelet[1949]: I1101 00:53:32.478290 1949 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:53:32.478318 kubelet[1949]: I1101 00:53:32.478302 1949 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:53:32.478383 kubelet[1949]: I1101 00:53:32.478321 1949 policy_none.go:49] "None policy: Start" Nov 1 00:53:32.478383 kubelet[1949]: I1101 00:53:32.478331 1949 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:53:32.478383 kubelet[1949]: I1101 00:53:32.478342 1949 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:53:32.478480 kubelet[1949]: I1101 00:53:32.478451 1949 state_mem.go:75] "Updated machine memory state" Nov 1 00:53:32.481352 kubelet[1949]: I1101 00:53:32.481334 1949 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:53:32.480000 audit[1949]: AVC avc: denied { mac_admin } for pid=1949 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:32.480000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:53:32.480000 audit[1949]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d1eb10 a1=c000c616b0 a2=c000d1eab0 a3=25 items=0 ppid=1 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:32.480000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:53:32.481637 kubelet[1949]: I1101 00:53:32.481392 1949 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:53:32.481637 kubelet[1949]: I1101 00:53:32.481521 1949 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:53:32.481637 kubelet[1949]: I1101 00:53:32.481533 1949 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:53:32.482253 kubelet[1949]: I1101 00:53:32.481931 1949 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:53:32.482878 kubelet[1949]: E1101 00:53:32.482790 1949 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:53:32.553048 kubelet[1949]: I1101 00:53:32.552929 1949 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:32.553048 kubelet[1949]: I1101 00:53:32.552930 1949 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:53:32.553048 kubelet[1949]: I1101 00:53:32.553013 1949 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:32.557935 kubelet[1949]: E1101 00:53:32.557911 1949 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:32.558326 kubelet[1949]: E1101 00:53:32.558285 1949 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:32.558326 kubelet[1949]: E1101 00:53:32.558324 1949 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Nov 1 00:53:32.584920 kubelet[1949]: I1101 00:53:32.584902 1949 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:53:32.590094 kubelet[1949]: I1101 00:53:32.590061 1949 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Nov 1 00:53:32.590220 kubelet[1949]: I1101 00:53:32.590118 1949 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Nov 1 00:53:32.645883 kubelet[1949]: I1101 00:53:32.645853 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/43c11b4a96b1ba60c91524e00f4204a9-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"43c11b4a96b1ba60c91524e00f4204a9\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:32.646031 kubelet[1949]: I1101 00:53:32.645894 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/43c11b4a96b1ba60c91524e00f4204a9-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"43c11b4a96b1ba60c91524e00f4204a9\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:32.646031 kubelet[1949]: I1101 00:53:32.645923 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:32.646031 kubelet[1949]: I1101 00:53:32.645942 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:32.646031 kubelet[1949]: I1101 00:53:32.645963 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:32.646031 kubelet[1949]: I1101 00:53:32.645988 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/43c11b4a96b1ba60c91524e00f4204a9-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"43c11b4a96b1ba60c91524e00f4204a9\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:32.646163 kubelet[1949]: I1101 00:53:32.646006 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:32.646163 kubelet[1949]: I1101 00:53:32.646023 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:53:32.646163 kubelet[1949]: I1101 00:53:32.646042 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a1d51be1ff02022474f2598f6e43038f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a1d51be1ff02022474f2598f6e43038f\") " pod="kube-system/kube-scheduler-localhost" Nov 1 00:53:32.858865 kubelet[1949]: E1101 00:53:32.858764 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:32.858865 kubelet[1949]: E1101 00:53:32.858782 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:32.858865 kubelet[1949]: E1101 00:53:32.858764 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:33.434651 kubelet[1949]: I1101 00:53:33.434607 1949 apiserver.go:52] "Watching apiserver" Nov 1 00:53:33.443240 kubelet[1949]: I1101 00:53:33.443199 1949 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:53:33.465755 kubelet[1949]: E1101 00:53:33.465725 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:33.466074 kubelet[1949]: I1101 00:53:33.466058 1949 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:53:33.467868 kubelet[1949]: I1101 00:53:33.466353 1949 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:33.470996 kubelet[1949]: E1101 00:53:33.470972 1949 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Nov 1 00:53:33.471255 kubelet[1949]: E1101 00:53:33.471239 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:33.471503 kubelet[1949]: E1101 00:53:33.471424 1949 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Nov 1 00:53:33.471669 kubelet[1949]: E1101 00:53:33.471653 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:33.531179 kubelet[1949]: I1101 00:53:33.531091 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.531071662 podStartE2EDuration="2.531071662s" podCreationTimestamp="2025-11-01 00:53:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:53:33.485919857 +0000 UTC m=+1.103486733" watchObservedRunningTime="2025-11-01 00:53:33.531071662 +0000 UTC m=+1.148638458" Nov 1 00:53:33.531519 kubelet[1949]: I1101 00:53:33.531483 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.53147587 podStartE2EDuration="2.53147587s" podCreationTimestamp="2025-11-01 00:53:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:53:33.531055923 +0000 UTC m=+1.148622719" watchObservedRunningTime="2025-11-01 00:53:33.53147587 +0000 UTC m=+1.149042666" Nov 1 00:53:33.559517 kubelet[1949]: I1101 00:53:33.559446 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.559424384 podStartE2EDuration="2.559424384s" podCreationTimestamp="2025-11-01 00:53:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:53:33.539045907 +0000 UTC m=+1.156612723" watchObservedRunningTime="2025-11-01 00:53:33.559424384 +0000 UTC m=+1.176991180" Nov 1 00:53:34.467175 kubelet[1949]: E1101 00:53:34.467148 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:34.467175 kubelet[1949]: E1101 00:53:34.467171 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:34.928605 kubelet[1949]: E1101 00:53:34.928575 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:38.455851 kubelet[1949]: E1101 00:53:38.455823 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:38.630000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:53:38.633322 kernel: kauditd_printk_skb: 272 callbacks suppressed Nov 1 00:53:38.633407 kernel: audit: type=1400 audit(1761958418.630:814): avc: denied { watch } for pid=1815 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:53:38.630000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000882d40 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:38.649036 kernel: audit: type=1300 audit(1761958418.630:814): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000882d40 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:38.649088 kernel: audit: type=1327 audit(1761958418.630:814): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:38.630000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:39.280000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:39.280000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00181bca0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:39.299833 kernel: audit: type=1400 audit(1761958419.280:815): avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:39.299968 kernel: audit: type=1300 audit(1761958419.280:815): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00181bca0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:39.280000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:39.310847 kernel: audit: type=1327 audit(1761958419.280:815): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:39.280000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:39.280000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00181bce0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:39.326091 kernel: audit: type=1400 audit(1761958419.280:816): avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:39.326139 kernel: audit: type=1300 audit(1761958419.280:816): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00181bce0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:39.326181 kernel: audit: type=1327 audit(1761958419.280:816): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:39.280000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:39.333041 kernel: audit: type=1400 audit(1761958419.280:817): avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:39.280000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:39.280000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00181bea0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:39.280000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:39.280000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:53:39.280000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00181bee0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:53:39.280000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:53:39.403154 kubelet[1949]: I1101 00:53:39.403128 1949 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:53:39.403436 env[1204]: time="2025-11-01T00:53:39.403406190Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:53:39.403690 kubelet[1949]: I1101 00:53:39.403554 1949 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:53:40.047874 systemd[1]: Created slice kubepods-besteffort-pod9c11eca1_f3f4_49ca_9bde_da168f44e6b9.slice. Nov 1 00:53:40.186055 kubelet[1949]: I1101 00:53:40.186009 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/9c11eca1-f3f4-49ca-9bde-da168f44e6b9-kube-proxy\") pod \"kube-proxy-nm7wx\" (UID: \"9c11eca1-f3f4-49ca-9bde-da168f44e6b9\") " pod="kube-system/kube-proxy-nm7wx" Nov 1 00:53:40.186055 kubelet[1949]: I1101 00:53:40.186047 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9c11eca1-f3f4-49ca-9bde-da168f44e6b9-xtables-lock\") pod \"kube-proxy-nm7wx\" (UID: \"9c11eca1-f3f4-49ca-9bde-da168f44e6b9\") " pod="kube-system/kube-proxy-nm7wx" Nov 1 00:53:40.186055 kubelet[1949]: I1101 00:53:40.186060 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9c11eca1-f3f4-49ca-9bde-da168f44e6b9-lib-modules\") pod \"kube-proxy-nm7wx\" (UID: \"9c11eca1-f3f4-49ca-9bde-da168f44e6b9\") " pod="kube-system/kube-proxy-nm7wx" Nov 1 00:53:40.186442 kubelet[1949]: I1101 00:53:40.186075 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bbk6l\" (UniqueName: \"kubernetes.io/projected/9c11eca1-f3f4-49ca-9bde-da168f44e6b9-kube-api-access-bbk6l\") pod \"kube-proxy-nm7wx\" (UID: \"9c11eca1-f3f4-49ca-9bde-da168f44e6b9\") " pod="kube-system/kube-proxy-nm7wx" Nov 1 00:53:40.290450 kubelet[1949]: I1101 00:53:40.290407 1949 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:53:40.355899 kubelet[1949]: E1101 00:53:40.355744 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:40.356374 env[1204]: time="2025-11-01T00:53:40.356336371Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nm7wx,Uid:9c11eca1-f3f4-49ca-9bde-da168f44e6b9,Namespace:kube-system,Attempt:0,}" Nov 1 00:53:40.370330 env[1204]: time="2025-11-01T00:53:40.370278898Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:53:40.370330 env[1204]: time="2025-11-01T00:53:40.370310388Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:53:40.370330 env[1204]: time="2025-11-01T00:53:40.370319555Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:53:40.370494 env[1204]: time="2025-11-01T00:53:40.370449474Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0c3301875553c3e2d59a4c9c1f45e2b861583d744297f6253d0aefc3e6aed0bf pid=2005 runtime=io.containerd.runc.v2 Nov 1 00:53:40.383927 systemd[1]: Started cri-containerd-0c3301875553c3e2d59a4c9c1f45e2b861583d744297f6253d0aefc3e6aed0bf.scope. Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit: BPF prog-id=106 op=LOAD Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2005 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333330313837353535336333653264353961346339633166343565 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2005 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333330313837353535336333653264353961346339633166343565 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit: BPF prog-id=107 op=LOAD Nov 1 00:53:40.395000 audit[2015]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000206630 items=0 ppid=2005 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333330313837353535336333653264353961346339633166343565 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.395000 audit: BPF prog-id=108 op=LOAD Nov 1 00:53:40.395000 audit[2015]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000206678 items=0 ppid=2005 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333330313837353535336333653264353961346339633166343565 Nov 1 00:53:40.396000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:53:40.396000 audit: BPF prog-id=107 op=UNLOAD Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { perfmon } for pid=2015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit[2015]: AVC avc: denied { bpf } for pid=2015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.396000 audit: BPF prog-id=109 op=LOAD Nov 1 00:53:40.396000 audit[2015]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000206a88 items=0 ppid=2005 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063333330313837353535336333653264353961346339633166343565 Nov 1 00:53:40.407818 env[1204]: time="2025-11-01T00:53:40.407742225Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nm7wx,Uid:9c11eca1-f3f4-49ca-9bde-da168f44e6b9,Namespace:kube-system,Attempt:0,} returns sandbox id \"0c3301875553c3e2d59a4c9c1f45e2b861583d744297f6253d0aefc3e6aed0bf\"" Nov 1 00:53:40.408671 kubelet[1949]: E1101 00:53:40.408643 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:40.410672 env[1204]: time="2025-11-01T00:53:40.410444437Z" level=info msg="CreateContainer within sandbox \"0c3301875553c3e2d59a4c9c1f45e2b861583d744297f6253d0aefc3e6aed0bf\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:53:40.424090 systemd[1]: Created slice kubepods-besteffort-pod1c21ddfb_5fcb_4cdf_910f_385ef92a7dc0.slice. Nov 1 00:53:40.435586 env[1204]: time="2025-11-01T00:53:40.435543008Z" level=info msg="CreateContainer within sandbox \"0c3301875553c3e2d59a4c9c1f45e2b861583d744297f6253d0aefc3e6aed0bf\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"1228e8a68ee3a2208b19f55a03df5952d6379800a1acc8703ce9037c78e9a50b\"" Nov 1 00:53:40.436018 env[1204]: time="2025-11-01T00:53:40.436000753Z" level=info msg="StartContainer for \"1228e8a68ee3a2208b19f55a03df5952d6379800a1acc8703ce9037c78e9a50b\"" Nov 1 00:53:40.450589 systemd[1]: Started cri-containerd-1228e8a68ee3a2208b19f55a03df5952d6379800a1acc8703ce9037c78e9a50b.scope. Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f70bfbd5108 items=0 ppid=2005 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132323865386136386565336132323038623139663535613033646635 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit: BPF prog-id=110 op=LOAD Nov 1 00:53:40.462000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002c9f98 items=0 ppid=2005 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132323865386136386565336132323038623139663535613033646635 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit: BPF prog-id=111 op=LOAD Nov 1 00:53:40.462000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002c9fe8 items=0 ppid=2005 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132323865386136386565336132323038623139663535613033646635 Nov 1 00:53:40.462000 audit: BPF prog-id=111 op=UNLOAD Nov 1 00:53:40.462000 audit: BPF prog-id=110 op=UNLOAD Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.462000 audit: BPF prog-id=112 op=LOAD Nov 1 00:53:40.462000 audit[2046]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00033a078 items=0 ppid=2005 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132323865386136386565336132323038623139663535613033646635 Nov 1 00:53:40.473499 env[1204]: time="2025-11-01T00:53:40.473458540Z" level=info msg="StartContainer for \"1228e8a68ee3a2208b19f55a03df5952d6379800a1acc8703ce9037c78e9a50b\" returns successfully" Nov 1 00:53:40.476076 kubelet[1949]: E1101 00:53:40.476048 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:40.487594 kubelet[1949]: I1101 00:53:40.484766 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-nm7wx" podStartSLOduration=0.484755934 podStartE2EDuration="484.755934ms" podCreationTimestamp="2025-11-01 00:53:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:53:40.484601328 +0000 UTC m=+8.102168124" watchObservedRunningTime="2025-11-01 00:53:40.484755934 +0000 UTC m=+8.102322730" Nov 1 00:53:40.488010 kubelet[1949]: I1101 00:53:40.487977 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/1c21ddfb-5fcb-4cdf-910f-385ef92a7dc0-var-lib-calico\") pod \"tigera-operator-7dcd859c48-5nqrb\" (UID: \"1c21ddfb-5fcb-4cdf-910f-385ef92a7dc0\") " pod="tigera-operator/tigera-operator-7dcd859c48-5nqrb" Nov 1 00:53:40.488010 kubelet[1949]: I1101 00:53:40.488010 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l8qdx\" (UniqueName: \"kubernetes.io/projected/1c21ddfb-5fcb-4cdf-910f-385ef92a7dc0-kube-api-access-l8qdx\") pod \"tigera-operator-7dcd859c48-5nqrb\" (UID: \"1c21ddfb-5fcb-4cdf-910f-385ef92a7dc0\") " pod="tigera-operator/tigera-operator-7dcd859c48-5nqrb" Nov 1 00:53:40.563000 audit[2105]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.563000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffedb0eefb0 a2=0 a3=7ffedb0eef9c items=0 ppid=2055 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.563000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:53:40.564000 audit[2107]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=2107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.564000 audit[2107]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9eceea40 a2=0 a3=7ffe9eceea2c items=0 ppid=2055 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.564000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:53:40.565000 audit[2106]: NETFILTER_CFG table=mangle:40 family=2 entries=1 op=nft_register_chain pid=2106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.565000 audit[2106]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff671931e0 a2=0 a3=7fff671931cc items=0 ppid=2055 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:53:40.565000 audit[2110]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.566000 audit[2111]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.566000 audit[2111]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4f4ada10 a2=0 a3=7fff4f4ad9fc items=0 ppid=2055 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:53:40.565000 audit[2110]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff0a0c0910 a2=0 a3=7fff0a0c08fc items=0 ppid=2055 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.565000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:53:40.567000 audit[2112]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2112 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.567000 audit[2112]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe4df9d8b0 a2=0 a3=7ffe4df9d89c items=0 ppid=2055 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:53:40.664000 audit[2114]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.664000 audit[2114]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffeba4b9b80 a2=0 a3=7ffeba4b9b6c items=0 ppid=2055 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.664000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:53:40.666000 audit[2116]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.666000 audit[2116]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd04fe6de0 a2=0 a3=7ffd04fe6dcc items=0 ppid=2055 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.666000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:53:40.670000 audit[2119]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.670000 audit[2119]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff15ff5e80 a2=0 a3=7fff15ff5e6c items=0 ppid=2055 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.670000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:53:40.670000 audit[2120]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.670000 audit[2120]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0e13a870 a2=0 a3=7ffd0e13a85c items=0 ppid=2055 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.670000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:53:40.672000 audit[2122]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2122 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.672000 audit[2122]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcff41ed70 a2=0 a3=7ffcff41ed5c items=0 ppid=2055 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:53:40.673000 audit[2123]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2123 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.673000 audit[2123]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeca77c690 a2=0 a3=7ffeca77c67c items=0 ppid=2055 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.673000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:53:40.675000 audit[2125]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2125 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.675000 audit[2125]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff264870c0 a2=0 a3=7fff264870ac items=0 ppid=2055 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.675000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:53:40.678000 audit[2128]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2128 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.678000 audit[2128]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcc4639840 a2=0 a3=7ffcc463982c items=0 ppid=2055 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.678000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:53:40.679000 audit[2129]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.679000 audit[2129]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3bc169b0 a2=0 a3=7ffd3bc1699c items=0 ppid=2055 pid=2129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.679000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:53:40.680000 audit[2131]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2131 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.680000 audit[2131]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc13e20bd0 a2=0 a3=7ffc13e20bbc items=0 ppid=2055 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.680000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:53:40.681000 audit[2132]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.681000 audit[2132]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffce06423c0 a2=0 a3=7ffce06423ac items=0 ppid=2055 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.681000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:53:40.683000 audit[2134]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2134 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.683000 audit[2134]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc70891390 a2=0 a3=7ffc7089137c items=0 ppid=2055 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.683000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:53:40.686000 audit[2137]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.686000 audit[2137]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcc98b5af0 a2=0 a3=7ffcc98b5adc items=0 ppid=2055 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.686000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:53:40.689000 audit[2140]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2140 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.689000 audit[2140]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffe0289350 a2=0 a3=7fffe028933c items=0 ppid=2055 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.689000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:53:40.690000 audit[2141]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.690000 audit[2141]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe7db68030 a2=0 a3=7ffe7db6801c items=0 ppid=2055 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.690000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:53:40.692000 audit[2143]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.692000 audit[2143]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffda24d26e0 a2=0 a3=7ffda24d26cc items=0 ppid=2055 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.692000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:53:40.695189 kubelet[1949]: E1101 00:53:40.695154 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:40.694000 audit[2146]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.694000 audit[2146]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdba3ea400 a2=0 a3=7ffdba3ea3ec items=0 ppid=2055 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.694000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:53:40.695000 audit[2147]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.695000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe13633dc0 a2=0 a3=7ffe13633dac items=0 ppid=2055 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.695000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:53:40.697000 audit[2149]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:53:40.697000 audit[2149]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff87445830 a2=0 a3=7fff8744581c items=0 ppid=2055 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.697000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:53:40.718000 audit[2156]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:40.718000 audit[2156]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff29401b50 a2=0 a3=7fff29401b3c items=0 ppid=2055 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.718000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:40.726400 env[1204]: time="2025-11-01T00:53:40.726339973Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-5nqrb,Uid:1c21ddfb-5fcb-4cdf-910f-385ef92a7dc0,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:53:40.726000 audit[2156]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:40.726000 audit[2156]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fff29401b50 a2=0 a3=7fff29401b3c items=0 ppid=2055 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.726000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:40.727000 audit[2161]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.727000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc882c42b0 a2=0 a3=7ffc882c429c items=0 ppid=2055 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:53:40.729000 audit[2163]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.729000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe137ad7a0 a2=0 a3=7ffe137ad78c items=0 ppid=2055 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:53:40.732000 audit[2166]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.732000 audit[2166]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdad613850 a2=0 a3=7ffdad61383c items=0 ppid=2055 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.732000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:53:40.733000 audit[2167]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.733000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe64760560 a2=0 a3=7ffe6476054c items=0 ppid=2055 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.733000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:53:40.734000 audit[2169]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.734000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcc13ab0f0 a2=0 a3=7ffcc13ab0dc items=0 ppid=2055 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.734000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:53:40.735000 audit[2170]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.735000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc484c1970 a2=0 a3=7ffc484c195c items=0 ppid=2055 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:53:40.737000 audit[2172]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.737000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff1b480980 a2=0 a3=7fff1b48096c items=0 ppid=2055 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.737000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:53:40.741000 audit[2187]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.741000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd2c82e340 a2=0 a3=7ffd2c82e32c items=0 ppid=2055 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.741000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:53:40.742912 env[1204]: time="2025-11-01T00:53:40.742855654Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:53:40.742912 env[1204]: time="2025-11-01T00:53:40.742893978Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:53:40.742912 env[1204]: time="2025-11-01T00:53:40.742904859Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:53:40.743081 env[1204]: time="2025-11-01T00:53:40.743042552Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e48719e2351938d250ec589fd945ce7e3d2a649406c06211da512dc6ab0134f6 pid=2181 runtime=io.containerd.runc.v2 Nov 1 00:53:40.742000 audit[2192]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2192 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.742000 audit[2192]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff191e2980 a2=0 a3=7fff191e296c items=0 ppid=2055 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.742000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:53:40.746000 audit[2200]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.746000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdd98c7c70 a2=0 a3=7ffdd98c7c5c items=0 ppid=2055 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.746000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:53:40.746000 audit[2201]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.746000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff8f691290 a2=0 a3=7fff8f69127c items=0 ppid=2055 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.746000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:53:40.748000 audit[2205]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.748000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcc219bfd0 a2=0 a3=7ffcc219bfbc items=0 ppid=2055 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.748000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:53:40.752960 systemd[1]: Started cri-containerd-e48719e2351938d250ec589fd945ce7e3d2a649406c06211da512dc6ab0134f6.scope. Nov 1 00:53:40.754000 audit[2208]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.754000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf1ff8b30 a2=0 a3=7ffcf1ff8b1c items=0 ppid=2055 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.754000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:53:40.762000 audit[2218]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.762000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe5bf40410 a2=0 a3=7ffe5bf403fc items=0 ppid=2055 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.762000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:53:40.764000 audit[2220]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.764000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffe78e5690 a2=0 a3=7fffe78e567c items=0 ppid=2055 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.764000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit: BPF prog-id=113 op=LOAD Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2181 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383731396532333531393338643235306563353839666439343563 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2181 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383731396532333531393338643235306563353839666439343563 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit: BPF prog-id=114 op=LOAD Nov 1 00:53:40.765000 audit[2193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a1100 items=0 ppid=2181 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383731396532333531393338643235306563353839666439343563 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit: BPF prog-id=115 op=LOAD Nov 1 00:53:40.765000 audit[2193]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a1148 items=0 ppid=2181 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383731396532333531393338643235306563353839666439343563 Nov 1 00:53:40.765000 audit: BPF prog-id=115 op=UNLOAD Nov 1 00:53:40.765000 audit: BPF prog-id=114 op=UNLOAD Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:40.765000 audit: BPF prog-id=116 op=LOAD Nov 1 00:53:40.765000 audit[2193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a1558 items=0 ppid=2181 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383731396532333531393338643235306563353839666439343563 Nov 1 00:53:40.766000 audit[2222]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.766000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffed52b46a0 a2=0 a3=7ffed52b468c items=0 ppid=2055 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.766000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:53:40.769000 audit[2225]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.769000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffefccf5970 a2=0 a3=7ffefccf595c items=0 ppid=2055 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.769000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:53:40.769000 audit[2226]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.769000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd10b97a10 a2=0 a3=7ffd10b979fc items=0 ppid=2055 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.769000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:53:40.771000 audit[2228]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.771000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff3f148530 a2=0 a3=7fff3f14851c items=0 ppid=2055 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.771000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:53:40.772000 audit[2229]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.772000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc61420e10 a2=0 a3=7ffc61420dfc items=0 ppid=2055 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:53:40.774000 audit[2231]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.774000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd1c6ecfd0 a2=0 a3=7ffd1c6ecfbc items=0 ppid=2055 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.774000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:53:40.776000 audit[2234]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:53:40.776000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc90cb8f50 a2=0 a3=7ffc90cb8f3c items=0 ppid=2055 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.776000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:53:40.778000 audit[2236]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:53:40.778000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffe80d19d00 a2=0 a3=7ffe80d19cec items=0 ppid=2055 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.778000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:40.779000 audit[2236]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:53:40.779000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffe80d19d00 a2=0 a3=7ffe80d19cec items=0 ppid=2055 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:40.779000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:40.789552 env[1204]: time="2025-11-01T00:53:40.789491719Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-5nqrb,Uid:1c21ddfb-5fcb-4cdf-910f-385ef92a7dc0,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"e48719e2351938d250ec589fd945ce7e3d2a649406c06211da512dc6ab0134f6\"" Nov 1 00:53:40.791099 env[1204]: time="2025-11-01T00:53:40.791083727Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:53:41.477576 kubelet[1949]: E1101 00:53:41.477537 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:42.478736 kubelet[1949]: E1101 00:53:42.478700 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:42.621006 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount433986569.mount: Deactivated successfully. Nov 1 00:53:43.362478 env[1204]: time="2025-11-01T00:53:43.362421922Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:43.364378 env[1204]: time="2025-11-01T00:53:43.364328157Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:43.365883 env[1204]: time="2025-11-01T00:53:43.365830433Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:43.367357 env[1204]: time="2025-11-01T00:53:43.367333349Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:43.367767 env[1204]: time="2025-11-01T00:53:43.367724646Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\"" Nov 1 00:53:43.369926 env[1204]: time="2025-11-01T00:53:43.369896037Z" level=info msg="CreateContainer within sandbox \"e48719e2351938d250ec589fd945ce7e3d2a649406c06211da512dc6ab0134f6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:53:43.381265 env[1204]: time="2025-11-01T00:53:43.381216468Z" level=info msg="CreateContainer within sandbox \"e48719e2351938d250ec589fd945ce7e3d2a649406c06211da512dc6ab0134f6\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"457f65a09e9678ffb18187989037fd983ef5334f737ca0161a56b5c80c98c95c\"" Nov 1 00:53:43.381622 env[1204]: time="2025-11-01T00:53:43.381593918Z" level=info msg="StartContainer for \"457f65a09e9678ffb18187989037fd983ef5334f737ca0161a56b5c80c98c95c\"" Nov 1 00:53:43.393776 systemd[1]: Started cri-containerd-457f65a09e9678ffb18187989037fd983ef5334f737ca0161a56b5c80c98c95c.scope. Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit: BPF prog-id=117 op=LOAD Nov 1 00:53:43.405000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.405000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2181 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:43.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435376636356130396539363738666662313831383739383930333766 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2181 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:43.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435376636356130396539363738666662313831383739383930333766 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit: BPF prog-id=118 op=LOAD Nov 1 00:53:43.406000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003146c0 items=0 ppid=2181 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:43.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435376636356130396539363738666662313831383739383930333766 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit: BPF prog-id=119 op=LOAD Nov 1 00:53:43.406000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000314708 items=0 ppid=2181 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:43.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435376636356130396539363738666662313831383739383930333766 Nov 1 00:53:43.406000 audit: BPF prog-id=119 op=UNLOAD Nov 1 00:53:43.406000 audit: BPF prog-id=118 op=UNLOAD Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:43.406000 audit: BPF prog-id=120 op=LOAD Nov 1 00:53:43.406000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000314b18 items=0 ppid=2181 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:43.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435376636356130396539363738666662313831383739383930333766 Nov 1 00:53:43.554706 env[1204]: time="2025-11-01T00:53:43.554643808Z" level=info msg="StartContainer for \"457f65a09e9678ffb18187989037fd983ef5334f737ca0161a56b5c80c98c95c\" returns successfully" Nov 1 00:53:44.935372 kubelet[1949]: E1101 00:53:44.935328 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:44.965891 kubelet[1949]: I1101 00:53:44.965823 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-5nqrb" podStartSLOduration=2.388058046 podStartE2EDuration="4.965789818s" podCreationTimestamp="2025-11-01 00:53:40 +0000 UTC" firstStartedPulling="2025-11-01 00:53:40.790643534 +0000 UTC m=+8.408210330" lastFinishedPulling="2025-11-01 00:53:43.368375306 +0000 UTC m=+10.985942102" observedRunningTime="2025-11-01 00:53:44.566332008 +0000 UTC m=+12.183898804" watchObservedRunningTime="2025-11-01 00:53:44.965789818 +0000 UTC m=+12.583356614" Nov 1 00:53:47.607738 update_engine[1194]: I1101 00:53:47.607669 1194 update_attempter.cc:509] Updating boot flags... Nov 1 00:53:48.460745 kubelet[1949]: E1101 00:53:48.460715 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:49.068129 sudo[1336]: pam_unix(sudo:session): session closed for user root Nov 1 00:53:49.067000 audit[1336]: USER_END pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:49.076241 kernel: kauditd_printk_skb: 372 callbacks suppressed Nov 1 00:53:49.076396 kernel: audit: type=1106 audit(1761958429.067:930): pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:49.082433 kernel: audit: type=1104 audit(1761958429.067:931): pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:49.067000 audit[1336]: CRED_DISP pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:53:49.083703 sshd[1333]: pam_unix(sshd:session): session closed for user core Nov 1 00:53:49.083000 audit[1333]: USER_END pid=1333 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:49.085766 systemd[1]: sshd@6-10.0.0.5:22-10.0.0.1:54744.service: Deactivated successfully. Nov 1 00:53:49.086609 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:53:49.086676 systemd-logind[1185]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:53:49.086754 systemd[1]: session-7.scope: Consumed 4.092s CPU time. Nov 1 00:53:49.087613 systemd-logind[1185]: Removed session 7. Nov 1 00:53:49.083000 audit[1333]: CRED_DISP pid=1333 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:49.099291 kernel: audit: type=1106 audit(1761958429.083:932): pid=1333 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:49.099358 kernel: audit: type=1104 audit(1761958429.083:933): pid=1333 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:53:49.099382 kernel: audit: type=1131 audit(1761958429.085:934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.5:22-10.0.0.1:54744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:49.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.5:22-10.0.0.1:54744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:53:49.377000 audit[2352]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:49.377000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff855bab80 a2=0 a3=7fff855bab6c items=0 ppid=2055 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:49.393313 kernel: audit: type=1325 audit(1761958429.377:935): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:49.393401 kernel: audit: type=1300 audit(1761958429.377:935): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff855bab80 a2=0 a3=7fff855bab6c items=0 ppid=2055 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:49.393423 kernel: audit: type=1327 audit(1761958429.377:935): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:49.377000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:49.394000 audit[2352]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:49.401725 kernel: audit: type=1325 audit(1761958429.394:936): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:49.401765 kernel: audit: type=1300 audit(1761958429.394:936): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff855bab80 a2=0 a3=0 items=0 ppid=2055 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:49.394000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff855bab80 a2=0 a3=0 items=0 ppid=2055 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:49.394000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:49.413000 audit[2354]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:49.413000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe299e1b20 a2=0 a3=7ffe299e1b0c items=0 ppid=2055 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:49.413000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:49.418000 audit[2354]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:49.418000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe299e1b20 a2=0 a3=0 items=0 ppid=2055 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:49.418000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:51.278000 audit[2356]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:51.278000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffedd0f1140 a2=0 a3=7ffedd0f112c items=0 ppid=2055 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:51.278000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:51.283000 audit[2356]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:51.283000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffedd0f1140 a2=0 a3=0 items=0 ppid=2055 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:51.283000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:51.568000 audit[2358]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:51.568000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc46c68b90 a2=0 a3=7ffc46c68b7c items=0 ppid=2055 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:51.568000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:51.574000 audit[2358]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:51.574000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc46c68b90 a2=0 a3=0 items=0 ppid=2055 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:51.574000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:52.587000 audit[2360]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:52.587000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffcc5099b0 a2=0 a3=7fffcc50999c items=0 ppid=2055 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:52.587000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:52.594000 audit[2360]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:52.594000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffcc5099b0 a2=0 a3=0 items=0 ppid=2055 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:52.594000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:53.124025 systemd[1]: Created slice kubepods-besteffort-pod581c06c8_5c99_4d1d_8262_5298d74130e7.slice. Nov 1 00:53:53.265529 kubelet[1949]: I1101 00:53:53.265499 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/581c06c8-5c99-4d1d-8262-5298d74130e7-tigera-ca-bundle\") pod \"calico-typha-75d8d9844b-h8w8p\" (UID: \"581c06c8-5c99-4d1d-8262-5298d74130e7\") " pod="calico-system/calico-typha-75d8d9844b-h8w8p" Nov 1 00:53:53.265529 kubelet[1949]: I1101 00:53:53.265528 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h6bm8\" (UniqueName: \"kubernetes.io/projected/581c06c8-5c99-4d1d-8262-5298d74130e7-kube-api-access-h6bm8\") pod \"calico-typha-75d8d9844b-h8w8p\" (UID: \"581c06c8-5c99-4d1d-8262-5298d74130e7\") " pod="calico-system/calico-typha-75d8d9844b-h8w8p" Nov 1 00:53:53.265892 kubelet[1949]: I1101 00:53:53.265546 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/581c06c8-5c99-4d1d-8262-5298d74130e7-typha-certs\") pod \"calico-typha-75d8d9844b-h8w8p\" (UID: \"581c06c8-5c99-4d1d-8262-5298d74130e7\") " pod="calico-system/calico-typha-75d8d9844b-h8w8p" Nov 1 00:53:53.313521 systemd[1]: Created slice kubepods-besteffort-pod7712583c_b6b0_4c4b_8473_d6bbd6d35b8f.slice. Nov 1 00:53:53.365699 kubelet[1949]: I1101 00:53:53.365670 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-flexvol-driver-host\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.365699 kubelet[1949]: I1101 00:53:53.365697 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-lib-modules\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.365931 kubelet[1949]: I1101 00:53:53.365728 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nrwwc\" (UniqueName: \"kubernetes.io/projected/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-kube-api-access-nrwwc\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.365931 kubelet[1949]: I1101 00:53:53.365741 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-cni-log-dir\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.365931 kubelet[1949]: I1101 00:53:53.365753 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-var-lib-calico\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.365931 kubelet[1949]: I1101 00:53:53.365764 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-xtables-lock\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.365931 kubelet[1949]: I1101 00:53:53.365824 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-node-certs\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.366095 kubelet[1949]: I1101 00:53:53.365839 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-var-run-calico\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.366095 kubelet[1949]: I1101 00:53:53.365856 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-cni-net-dir\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.366095 kubelet[1949]: I1101 00:53:53.365869 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-cni-bin-dir\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.366095 kubelet[1949]: I1101 00:53:53.365915 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-policysync\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.366095 kubelet[1949]: I1101 00:53:53.365929 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7712583c-b6b0-4c4b-8473-d6bbd6d35b8f-tigera-ca-bundle\") pod \"calico-node-tldw6\" (UID: \"7712583c-b6b0-4c4b-8473-d6bbd6d35b8f\") " pod="calico-system/calico-node-tldw6" Nov 1 00:53:53.427028 kubelet[1949]: E1101 00:53:53.426921 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:53.427529 env[1204]: time="2025-11-01T00:53:53.427481567Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-75d8d9844b-h8w8p,Uid:581c06c8-5c99-4d1d-8262-5298d74130e7,Namespace:calico-system,Attempt:0,}" Nov 1 00:53:53.443170 env[1204]: time="2025-11-01T00:53:53.443106270Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:53:53.443170 env[1204]: time="2025-11-01T00:53:53.443150303Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:53:53.443355 env[1204]: time="2025-11-01T00:53:53.443163047Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:53:53.443393 env[1204]: time="2025-11-01T00:53:53.443351514Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a06691b74948414cb90b77da5dd4b342a9b816281cb5b89a27201aec5d1c8b57 pid=2369 runtime=io.containerd.runc.v2 Nov 1 00:53:53.458779 systemd[1]: Started cri-containerd-a06691b74948414cb90b77da5dd4b342a9b816281cb5b89a27201aec5d1c8b57.scope. Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.466000 audit: BPF prog-id=121 op=LOAD Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2369 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363639316237343934383431346362393062373764613564643462 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2369 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363639316237343934383431346362393062373764613564643462 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit: BPF prog-id=122 op=LOAD Nov 1 00:53:53.467000 audit[2381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000323280 items=0 ppid=2369 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363639316237343934383431346362393062373764613564643462 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit: BPF prog-id=123 op=LOAD Nov 1 00:53:53.467000 audit[2381]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003232c8 items=0 ppid=2369 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363639316237343934383431346362393062373764613564643462 Nov 1 00:53:53.467000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:53:53.467000 audit: BPF prog-id=122 op=UNLOAD Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { perfmon } for pid=2381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit[2381]: AVC avc: denied { bpf } for pid=2381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.467000 audit: BPF prog-id=124 op=LOAD Nov 1 00:53:53.467000 audit[2381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003236d8 items=0 ppid=2369 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363639316237343934383431346362393062373764613564643462 Nov 1 00:53:53.471470 kubelet[1949]: E1101 00:53:53.471450 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.471470 kubelet[1949]: W1101 00:53:53.471467 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.471584 kubelet[1949]: E1101 00:53:53.471499 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.474420 kubelet[1949]: E1101 00:53:53.474369 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.474420 kubelet[1949]: W1101 00:53:53.474381 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.474420 kubelet[1949]: E1101 00:53:53.474397 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.497145 env[1204]: time="2025-11-01T00:53:53.497101033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-75d8d9844b-h8w8p,Uid:581c06c8-5c99-4d1d-8262-5298d74130e7,Namespace:calico-system,Attempt:0,} returns sandbox id \"a06691b74948414cb90b77da5dd4b342a9b816281cb5b89a27201aec5d1c8b57\"" Nov 1 00:53:53.504711 kubelet[1949]: E1101 00:53:53.503408 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:53:53.504711 kubelet[1949]: E1101 00:53:53.504262 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:53.505482 env[1204]: time="2025-11-01T00:53:53.505439320Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:53:53.566453 kubelet[1949]: E1101 00:53:53.566407 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.566453 kubelet[1949]: W1101 00:53:53.566427 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.566453 kubelet[1949]: E1101 00:53:53.566448 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.566681 kubelet[1949]: E1101 00:53:53.566590 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.566681 kubelet[1949]: W1101 00:53:53.566598 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.566681 kubelet[1949]: E1101 00:53:53.566608 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.566777 kubelet[1949]: E1101 00:53:53.566760 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.566836 kubelet[1949]: W1101 00:53:53.566770 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.566836 kubelet[1949]: E1101 00:53:53.566792 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.567008 kubelet[1949]: E1101 00:53:53.566986 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.567008 kubelet[1949]: W1101 00:53:53.566996 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.567008 kubelet[1949]: E1101 00:53:53.567006 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.567214 kubelet[1949]: E1101 00:53:53.567187 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.567214 kubelet[1949]: W1101 00:53:53.567209 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.567305 kubelet[1949]: E1101 00:53:53.567218 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.567454 kubelet[1949]: E1101 00:53:53.567434 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.567454 kubelet[1949]: W1101 00:53:53.567443 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.567454 kubelet[1949]: E1101 00:53:53.567450 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.567617 kubelet[1949]: E1101 00:53:53.567600 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.567617 kubelet[1949]: W1101 00:53:53.567607 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.567617 kubelet[1949]: E1101 00:53:53.567616 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.567835 kubelet[1949]: E1101 00:53:53.567790 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.567835 kubelet[1949]: W1101 00:53:53.567829 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.567927 kubelet[1949]: E1101 00:53:53.567853 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.568100 kubelet[1949]: E1101 00:53:53.568077 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.568100 kubelet[1949]: W1101 00:53:53.568090 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.568100 kubelet[1949]: E1101 00:53:53.568099 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.568295 kubelet[1949]: E1101 00:53:53.568279 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.568295 kubelet[1949]: W1101 00:53:53.568293 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.568377 kubelet[1949]: E1101 00:53:53.568306 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.568497 kubelet[1949]: E1101 00:53:53.568483 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.568497 kubelet[1949]: W1101 00:53:53.568497 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.568568 kubelet[1949]: E1101 00:53:53.568508 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.568689 kubelet[1949]: E1101 00:53:53.568670 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.568689 kubelet[1949]: W1101 00:53:53.568684 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.568772 kubelet[1949]: E1101 00:53:53.568694 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.568962 kubelet[1949]: E1101 00:53:53.568933 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.568962 kubelet[1949]: W1101 00:53:53.568947 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.568962 kubelet[1949]: E1101 00:53:53.568957 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.569147 kubelet[1949]: E1101 00:53:53.569131 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.569224 kubelet[1949]: W1101 00:53:53.569152 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.569224 kubelet[1949]: E1101 00:53:53.569161 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.569336 kubelet[1949]: E1101 00:53:53.569311 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.569336 kubelet[1949]: W1101 00:53:53.569325 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.569442 kubelet[1949]: E1101 00:53:53.569338 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.569527 kubelet[1949]: E1101 00:53:53.569511 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.569527 kubelet[1949]: W1101 00:53:53.569522 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.569612 kubelet[1949]: E1101 00:53:53.569530 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.569693 kubelet[1949]: E1101 00:53:53.569682 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.569693 kubelet[1949]: W1101 00:53:53.569690 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.569764 kubelet[1949]: E1101 00:53:53.569696 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.569828 kubelet[1949]: E1101 00:53:53.569819 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.569828 kubelet[1949]: W1101 00:53:53.569825 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.569898 kubelet[1949]: E1101 00:53:53.569833 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.569960 kubelet[1949]: E1101 00:53:53.569950 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.569960 kubelet[1949]: W1101 00:53:53.569957 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.570033 kubelet[1949]: E1101 00:53:53.569963 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.570088 kubelet[1949]: E1101 00:53:53.570079 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.570088 kubelet[1949]: W1101 00:53:53.570086 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.570157 kubelet[1949]: E1101 00:53:53.570092 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.570338 kubelet[1949]: E1101 00:53:53.570315 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.570338 kubelet[1949]: W1101 00:53:53.570326 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.570338 kubelet[1949]: E1101 00:53:53.570337 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.570454 kubelet[1949]: I1101 00:53:53.570366 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/3141111f-6c21-4e2a-82c8-54c3b4d00c87-registration-dir\") pod \"csi-node-driver-rm2n9\" (UID: \"3141111f-6c21-4e2a-82c8-54c3b4d00c87\") " pod="calico-system/csi-node-driver-rm2n9" Nov 1 00:53:53.570553 kubelet[1949]: E1101 00:53:53.570539 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.570553 kubelet[1949]: W1101 00:53:53.570550 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.570635 kubelet[1949]: E1101 00:53:53.570564 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.570635 kubelet[1949]: I1101 00:53:53.570581 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gksjl\" (UniqueName: \"kubernetes.io/projected/3141111f-6c21-4e2a-82c8-54c3b4d00c87-kube-api-access-gksjl\") pod \"csi-node-driver-rm2n9\" (UID: \"3141111f-6c21-4e2a-82c8-54c3b4d00c87\") " pod="calico-system/csi-node-driver-rm2n9" Nov 1 00:53:53.570768 kubelet[1949]: E1101 00:53:53.570754 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.570768 kubelet[1949]: W1101 00:53:53.570765 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.570863 kubelet[1949]: E1101 00:53:53.570779 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.570863 kubelet[1949]: I1101 00:53:53.570796 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/3141111f-6c21-4e2a-82c8-54c3b4d00c87-kubelet-dir\") pod \"csi-node-driver-rm2n9\" (UID: \"3141111f-6c21-4e2a-82c8-54c3b4d00c87\") " pod="calico-system/csi-node-driver-rm2n9" Nov 1 00:53:53.570981 kubelet[1949]: E1101 00:53:53.570964 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.570981 kubelet[1949]: W1101 00:53:53.570978 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.571043 kubelet[1949]: E1101 00:53:53.570994 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.571168 kubelet[1949]: E1101 00:53:53.571152 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.571168 kubelet[1949]: W1101 00:53:53.571164 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.571272 kubelet[1949]: E1101 00:53:53.571199 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.571365 kubelet[1949]: E1101 00:53:53.571350 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.571365 kubelet[1949]: W1101 00:53:53.571360 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.571577 kubelet[1949]: E1101 00:53:53.571382 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.571833 kubelet[1949]: E1101 00:53:53.571798 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.571833 kubelet[1949]: W1101 00:53:53.571825 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.571925 kubelet[1949]: E1101 00:53:53.571842 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.574833 kubelet[1949]: E1101 00:53:53.574817 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.574833 kubelet[1949]: W1101 00:53:53.574829 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.574980 kubelet[1949]: E1101 00:53:53.574840 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.574980 kubelet[1949]: I1101 00:53:53.574875 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/3141111f-6c21-4e2a-82c8-54c3b4d00c87-varrun\") pod \"csi-node-driver-rm2n9\" (UID: \"3141111f-6c21-4e2a-82c8-54c3b4d00c87\") " pod="calico-system/csi-node-driver-rm2n9" Nov 1 00:53:53.575315 kubelet[1949]: E1101 00:53:53.575295 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.575389 kubelet[1949]: W1101 00:53:53.575315 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.575389 kubelet[1949]: E1101 00:53:53.575339 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.575389 kubelet[1949]: I1101 00:53:53.575361 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/3141111f-6c21-4e2a-82c8-54c3b4d00c87-socket-dir\") pod \"csi-node-driver-rm2n9\" (UID: \"3141111f-6c21-4e2a-82c8-54c3b4d00c87\") " pod="calico-system/csi-node-driver-rm2n9" Nov 1 00:53:53.575577 kubelet[1949]: E1101 00:53:53.575560 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.575577 kubelet[1949]: W1101 00:53:53.575572 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.575670 kubelet[1949]: E1101 00:53:53.575595 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.575784 kubelet[1949]: E1101 00:53:53.575766 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.575784 kubelet[1949]: W1101 00:53:53.575779 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.575939 kubelet[1949]: E1101 00:53:53.575794 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.575970 kubelet[1949]: E1101 00:53:53.575959 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.575970 kubelet[1949]: W1101 00:53:53.575967 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.576031 kubelet[1949]: E1101 00:53:53.575978 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.576108 kubelet[1949]: E1101 00:53:53.576095 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.576108 kubelet[1949]: W1101 00:53:53.576103 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.576203 kubelet[1949]: E1101 00:53:53.576146 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.576274 kubelet[1949]: E1101 00:53:53.576262 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.576274 kubelet[1949]: W1101 00:53:53.576270 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.576336 kubelet[1949]: E1101 00:53:53.576278 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.576411 kubelet[1949]: E1101 00:53:53.576398 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.576411 kubelet[1949]: W1101 00:53:53.576405 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.576411 kubelet[1949]: E1101 00:53:53.576412 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.610000 audit[2444]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2444 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:53.610000 audit[2444]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffbb4ee480 a2=0 a3=7fffbb4ee46c items=0 ppid=2055 pid=2444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.610000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:53.615457 kubelet[1949]: E1101 00:53:53.615431 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:53.615951 env[1204]: time="2025-11-01T00:53:53.615915531Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-tldw6,Uid:7712583c-b6b0-4c4b-8473-d6bbd6d35b8f,Namespace:calico-system,Attempt:0,}" Nov 1 00:53:53.616000 audit[2444]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2444 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:53:53.616000 audit[2444]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffbb4ee480 a2=0 a3=0 items=0 ppid=2055 pid=2444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.616000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:53:53.629848 env[1204]: time="2025-11-01T00:53:53.629765656Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:53:53.629848 env[1204]: time="2025-11-01T00:53:53.629801854Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:53:53.629848 env[1204]: time="2025-11-01T00:53:53.629822464Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:53:53.630074 env[1204]: time="2025-11-01T00:53:53.630030226Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62 pid=2452 runtime=io.containerd.runc.v2 Nov 1 00:53:53.639964 systemd[1]: Started cri-containerd-eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62.scope. Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit: BPF prog-id=125 op=LOAD Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2452 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353638323335333738623635353964366435643732613438313963 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2452 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353638323335333738623635353964366435643732613438313963 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit: BPF prog-id=126 op=LOAD Nov 1 00:53:53.649000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00024caa0 items=0 ppid=2452 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353638323335333738623635353964366435643732613438313963 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit: BPF prog-id=127 op=LOAD Nov 1 00:53:53.649000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00024cae8 items=0 ppid=2452 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353638323335333738623635353964366435643732613438313963 Nov 1 00:53:53.649000 audit: BPF prog-id=127 op=UNLOAD Nov 1 00:53:53.649000 audit: BPF prog-id=126 op=UNLOAD Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:53.649000 audit: BPF prog-id=128 op=LOAD Nov 1 00:53:53.649000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00024cef8 items=0 ppid=2452 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:53.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562353638323335333738623635353964366435643732613438313963 Nov 1 00:53:53.658260 env[1204]: time="2025-11-01T00:53:53.658228400Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-tldw6,Uid:7712583c-b6b0-4c4b-8473-d6bbd6d35b8f,Namespace:calico-system,Attempt:0,} returns sandbox id \"eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62\"" Nov 1 00:53:53.658710 kubelet[1949]: E1101 00:53:53.658689 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:53.676587 kubelet[1949]: E1101 00:53:53.676570 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.676587 kubelet[1949]: W1101 00:53:53.676584 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.676684 kubelet[1949]: E1101 00:53:53.676599 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.676821 kubelet[1949]: E1101 00:53:53.676795 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.676821 kubelet[1949]: W1101 00:53:53.676816 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.676894 kubelet[1949]: E1101 00:53:53.676830 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.678838 kubelet[1949]: E1101 00:53:53.677043 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.678838 kubelet[1949]: W1101 00:53:53.677052 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.678838 kubelet[1949]: E1101 00:53:53.677063 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.678838 kubelet[1949]: E1101 00:53:53.677271 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.678838 kubelet[1949]: W1101 00:53:53.677286 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.678838 kubelet[1949]: E1101 00:53:53.677307 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.678838 kubelet[1949]: E1101 00:53:53.677550 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.678838 kubelet[1949]: W1101 00:53:53.677556 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.678838 kubelet[1949]: E1101 00:53:53.677564 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.678838 kubelet[1949]: E1101 00:53:53.677735 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679179 kubelet[1949]: W1101 00:53:53.677741 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679179 kubelet[1949]: E1101 00:53:53.677752 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679179 kubelet[1949]: E1101 00:53:53.677894 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679179 kubelet[1949]: W1101 00:53:53.677900 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679179 kubelet[1949]: E1101 00:53:53.677952 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679179 kubelet[1949]: E1101 00:53:53.678044 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679179 kubelet[1949]: W1101 00:53:53.678051 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679179 kubelet[1949]: E1101 00:53:53.678082 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679179 kubelet[1949]: E1101 00:53:53.678195 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679179 kubelet[1949]: W1101 00:53:53.678201 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679430 kubelet[1949]: E1101 00:53:53.678221 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679430 kubelet[1949]: E1101 00:53:53.678336 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679430 kubelet[1949]: W1101 00:53:53.678342 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679430 kubelet[1949]: E1101 00:53:53.678363 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679430 kubelet[1949]: E1101 00:53:53.678472 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679430 kubelet[1949]: W1101 00:53:53.678478 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679430 kubelet[1949]: E1101 00:53:53.678490 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679430 kubelet[1949]: E1101 00:53:53.678650 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679430 kubelet[1949]: W1101 00:53:53.678656 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679430 kubelet[1949]: E1101 00:53:53.678665 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679671 kubelet[1949]: E1101 00:53:53.678866 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679671 kubelet[1949]: W1101 00:53:53.678873 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679671 kubelet[1949]: E1101 00:53:53.678884 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679671 kubelet[1949]: E1101 00:53:53.679182 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679671 kubelet[1949]: W1101 00:53:53.679196 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679671 kubelet[1949]: E1101 00:53:53.679215 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679671 kubelet[1949]: E1101 00:53:53.679427 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.679671 kubelet[1949]: W1101 00:53:53.679435 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.679671 kubelet[1949]: E1101 00:53:53.679442 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.679671 kubelet[1949]: E1101 00:53:53.679580 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.680135 kubelet[1949]: W1101 00:53:53.679586 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.680135 kubelet[1949]: E1101 00:53:53.679593 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.680135 kubelet[1949]: E1101 00:53:53.679742 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.680135 kubelet[1949]: W1101 00:53:53.679749 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.680135 kubelet[1949]: E1101 00:53:53.679755 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.680135 kubelet[1949]: E1101 00:53:53.680044 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.680135 kubelet[1949]: W1101 00:53:53.680065 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.680316 kubelet[1949]: E1101 00:53:53.680144 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.680341 kubelet[1949]: E1101 00:53:53.680330 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.680390 kubelet[1949]: W1101 00:53:53.680369 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.680465 kubelet[1949]: E1101 00:53:53.680455 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.680636 kubelet[1949]: E1101 00:53:53.680596 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.680636 kubelet[1949]: W1101 00:53:53.680607 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.680723 kubelet[1949]: E1101 00:53:53.680685 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.682619 kubelet[1949]: E1101 00:53:53.681790 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.682619 kubelet[1949]: W1101 00:53:53.681801 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.682619 kubelet[1949]: E1101 00:53:53.681888 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.682619 kubelet[1949]: E1101 00:53:53.681995 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.682619 kubelet[1949]: W1101 00:53:53.682003 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.682619 kubelet[1949]: E1101 00:53:53.682029 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.682851 kubelet[1949]: E1101 00:53:53.682685 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.682851 kubelet[1949]: W1101 00:53:53.682695 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.682851 kubelet[1949]: E1101 00:53:53.682708 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.682948 kubelet[1949]: E1101 00:53:53.682911 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.682948 kubelet[1949]: W1101 00:53:53.682920 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.682948 kubelet[1949]: E1101 00:53:53.682928 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.683244 kubelet[1949]: E1101 00:53:53.683182 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.683244 kubelet[1949]: W1101 00:53:53.683192 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.683244 kubelet[1949]: E1101 00:53:53.683201 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:53.687394 kubelet[1949]: E1101 00:53:53.687370 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:53.687394 kubelet[1949]: W1101 00:53:53.687381 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:53.687394 kubelet[1949]: E1101 00:53:53.687390 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:54.373339 systemd[1]: run-containerd-runc-k8s.io-a06691b74948414cb90b77da5dd4b342a9b816281cb5b89a27201aec5d1c8b57-runc.HisPOg.mount: Deactivated successfully. Nov 1 00:53:55.041786 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3192791647.mount: Deactivated successfully. Nov 1 00:53:55.452750 kubelet[1949]: E1101 00:53:55.452618 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:53:56.040453 env[1204]: time="2025-11-01T00:53:56.040400645Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:56.042645 env[1204]: time="2025-11-01T00:53:56.042612174Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:56.044247 env[1204]: time="2025-11-01T00:53:56.044223918Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:56.045860 env[1204]: time="2025-11-01T00:53:56.045838929Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:56.046294 env[1204]: time="2025-11-01T00:53:56.046261598Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958\"" Nov 1 00:53:56.047221 env[1204]: time="2025-11-01T00:53:56.047202405Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:53:56.053071 env[1204]: time="2025-11-01T00:53:56.053039613Z" level=info msg="CreateContainer within sandbox \"a06691b74948414cb90b77da5dd4b342a9b816281cb5b89a27201aec5d1c8b57\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:53:56.066305 env[1204]: time="2025-11-01T00:53:56.066272230Z" level=info msg="CreateContainer within sandbox \"a06691b74948414cb90b77da5dd4b342a9b816281cb5b89a27201aec5d1c8b57\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"9c41a17b51b7adbd4142256ea31d9c4e0f7d116dcfb015574230777bc9d28852\"" Nov 1 00:53:56.066652 env[1204]: time="2025-11-01T00:53:56.066631098Z" level=info msg="StartContainer for \"9c41a17b51b7adbd4142256ea31d9c4e0f7d116dcfb015574230777bc9d28852\"" Nov 1 00:53:56.084560 systemd[1]: Started cri-containerd-9c41a17b51b7adbd4142256ea31d9c4e0f7d116dcfb015574230777bc9d28852.scope. Nov 1 00:53:56.106426 kernel: kauditd_printk_skb: 145 callbacks suppressed Nov 1 00:53:56.106684 kernel: audit: type=1400 audit(1761958436.096:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.106731 kernel: audit: type=1400 audit(1761958436.096:984): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.117515 kernel: audit: type=1400 audit(1761958436.096:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.117563 kernel: audit: type=1400 audit(1761958436.096:986): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.128235 kernel: audit: type=1400 audit(1761958436.096:987): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.133930 kernel: audit: type=1400 audit(1761958436.096:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.139921 kernel: audit: type=1400 audit(1761958436.096:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.145669 kernel: audit: type=1400 audit(1761958436.096:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.145752 kernel: audit: type=1400 audit(1761958436.096:991): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.157547 kernel: audit: type=1400 audit(1761958436.098:992): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.098000 audit: BPF prog-id=129 op=LOAD Nov 1 00:53:56.098000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.098000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2369 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:56.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343161313762353162376164626434313432323536656133316439 Nov 1 00:53:56.098000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.098000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2369 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:56.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343161313762353162376164626434313432323536656133316439 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.099000 audit: BPF prog-id=130 op=LOAD Nov 1 00:53:56.099000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000261960 items=0 ppid=2369 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:56.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343161313762353162376164626434313432323536656133316439 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit: BPF prog-id=131 op=LOAD Nov 1 00:53:56.105000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0002619a8 items=0 ppid=2369 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:56.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343161313762353162376164626434313432323536656133316439 Nov 1 00:53:56.105000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:53:56.105000 audit: BPF prog-id=130 op=UNLOAD Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:56.105000 audit: BPF prog-id=132 op=LOAD Nov 1 00:53:56.105000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000261db8 items=0 ppid=2369 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:56.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963343161313762353162376164626434313432323536656133316439 Nov 1 00:53:56.405149 env[1204]: time="2025-11-01T00:53:56.405007709Z" level=info msg="StartContainer for \"9c41a17b51b7adbd4142256ea31d9c4e0f7d116dcfb015574230777bc9d28852\" returns successfully" Nov 1 00:53:56.575989 kubelet[1949]: E1101 00:53:56.575953 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:56.584708 kubelet[1949]: I1101 00:53:56.584460 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-75d8d9844b-h8w8p" podStartSLOduration=1.042549316 podStartE2EDuration="3.584445823s" podCreationTimestamp="2025-11-01 00:53:53 +0000 UTC" firstStartedPulling="2025-11-01 00:53:53.505195008 +0000 UTC m=+21.122761804" lastFinishedPulling="2025-11-01 00:53:56.047091485 +0000 UTC m=+23.664658311" observedRunningTime="2025-11-01 00:53:56.584198466 +0000 UTC m=+24.201765262" watchObservedRunningTime="2025-11-01 00:53:56.584445823 +0000 UTC m=+24.202012619" Nov 1 00:53:56.590660 kubelet[1949]: E1101 00:53:56.590626 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.590660 kubelet[1949]: W1101 00:53:56.590642 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.590660 kubelet[1949]: E1101 00:53:56.590662 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.590892 kubelet[1949]: E1101 00:53:56.590858 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.590892 kubelet[1949]: W1101 00:53:56.590864 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.590892 kubelet[1949]: E1101 00:53:56.590871 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.591114 kubelet[1949]: E1101 00:53:56.591093 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.591114 kubelet[1949]: W1101 00:53:56.591103 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.591114 kubelet[1949]: E1101 00:53:56.591110 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.591355 kubelet[1949]: E1101 00:53:56.591340 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.591355 kubelet[1949]: W1101 00:53:56.591350 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.591355 kubelet[1949]: E1101 00:53:56.591356 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.591539 kubelet[1949]: E1101 00:53:56.591517 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.591539 kubelet[1949]: W1101 00:53:56.591528 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.591539 kubelet[1949]: E1101 00:53:56.591538 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.591716 kubelet[1949]: E1101 00:53:56.591698 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.591716 kubelet[1949]: W1101 00:53:56.591708 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.591716 kubelet[1949]: E1101 00:53:56.591715 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.591878 kubelet[1949]: E1101 00:53:56.591867 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.591878 kubelet[1949]: W1101 00:53:56.591876 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.591938 kubelet[1949]: E1101 00:53:56.591883 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.592055 kubelet[1949]: E1101 00:53:56.592042 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.592055 kubelet[1949]: W1101 00:53:56.592052 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.592107 kubelet[1949]: E1101 00:53:56.592059 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.592229 kubelet[1949]: E1101 00:53:56.592217 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.592229 kubelet[1949]: W1101 00:53:56.592226 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.592275 kubelet[1949]: E1101 00:53:56.592234 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.592408 kubelet[1949]: E1101 00:53:56.592397 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.592408 kubelet[1949]: W1101 00:53:56.592406 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.592455 kubelet[1949]: E1101 00:53:56.592412 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.592558 kubelet[1949]: E1101 00:53:56.592543 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.592558 kubelet[1949]: W1101 00:53:56.592552 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.592558 kubelet[1949]: E1101 00:53:56.592558 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.592711 kubelet[1949]: E1101 00:53:56.592696 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.592711 kubelet[1949]: W1101 00:53:56.592705 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.592711 kubelet[1949]: E1101 00:53:56.592712 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.592903 kubelet[1949]: E1101 00:53:56.592891 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.592903 kubelet[1949]: W1101 00:53:56.592901 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.592957 kubelet[1949]: E1101 00:53:56.592907 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.593067 kubelet[1949]: E1101 00:53:56.593053 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.593067 kubelet[1949]: W1101 00:53:56.593062 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.593067 kubelet[1949]: E1101 00:53:56.593068 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.593237 kubelet[1949]: E1101 00:53:56.593224 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.593237 kubelet[1949]: W1101 00:53:56.593233 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.593289 kubelet[1949]: E1101 00:53:56.593240 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.597627 kubelet[1949]: E1101 00:53:56.597609 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.597627 kubelet[1949]: W1101 00:53:56.597621 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.597720 kubelet[1949]: E1101 00:53:56.597632 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.597890 kubelet[1949]: E1101 00:53:56.597848 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.597890 kubelet[1949]: W1101 00:53:56.597858 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.597890 kubelet[1949]: E1101 00:53:56.597871 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.598322 kubelet[1949]: E1101 00:53:56.598292 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.598322 kubelet[1949]: W1101 00:53:56.598317 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.598447 kubelet[1949]: E1101 00:53:56.598350 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.598605 kubelet[1949]: E1101 00:53:56.598549 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.598605 kubelet[1949]: W1101 00:53:56.598570 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.598605 kubelet[1949]: E1101 00:53:56.598592 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.598769 kubelet[1949]: E1101 00:53:56.598751 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.598769 kubelet[1949]: W1101 00:53:56.598759 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.598769 kubelet[1949]: E1101 00:53:56.598770 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.598961 kubelet[1949]: E1101 00:53:56.598943 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.598961 kubelet[1949]: W1101 00:53:56.598956 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.599035 kubelet[1949]: E1101 00:53:56.598970 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.599159 kubelet[1949]: E1101 00:53:56.599145 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.599159 kubelet[1949]: W1101 00:53:56.599155 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.599238 kubelet[1949]: E1101 00:53:56.599178 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.599296 kubelet[1949]: E1101 00:53:56.599285 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.599296 kubelet[1949]: W1101 00:53:56.599294 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.599345 kubelet[1949]: E1101 00:53:56.599316 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.599442 kubelet[1949]: E1101 00:53:56.599428 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.599442 kubelet[1949]: W1101 00:53:56.599437 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.599519 kubelet[1949]: E1101 00:53:56.599447 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.599639 kubelet[1949]: E1101 00:53:56.599622 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.599639 kubelet[1949]: W1101 00:53:56.599634 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.599709 kubelet[1949]: E1101 00:53:56.599649 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.599820 kubelet[1949]: E1101 00:53:56.599794 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.599820 kubelet[1949]: W1101 00:53:56.599815 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.599895 kubelet[1949]: E1101 00:53:56.599831 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.600023 kubelet[1949]: E1101 00:53:56.600005 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.600023 kubelet[1949]: W1101 00:53:56.600020 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.600081 kubelet[1949]: E1101 00:53:56.600036 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.600207 kubelet[1949]: E1101 00:53:56.600190 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.600207 kubelet[1949]: W1101 00:53:56.600202 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.600282 kubelet[1949]: E1101 00:53:56.600216 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.600440 kubelet[1949]: E1101 00:53:56.600424 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.600440 kubelet[1949]: W1101 00:53:56.600436 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.600510 kubelet[1949]: E1101 00:53:56.600452 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.600664 kubelet[1949]: E1101 00:53:56.600649 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.600664 kubelet[1949]: W1101 00:53:56.600660 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.600716 kubelet[1949]: E1101 00:53:56.600671 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.600853 kubelet[1949]: E1101 00:53:56.600837 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.600853 kubelet[1949]: W1101 00:53:56.600847 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.600918 kubelet[1949]: E1101 00:53:56.600856 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.601117 kubelet[1949]: E1101 00:53:56.601100 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.601117 kubelet[1949]: W1101 00:53:56.601112 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.601206 kubelet[1949]: E1101 00:53:56.601124 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:56.601276 kubelet[1949]: E1101 00:53:56.601263 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:56.601276 kubelet[1949]: W1101 00:53:56.601272 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:56.601327 kubelet[1949]: E1101 00:53:56.601279 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.453302 kubelet[1949]: E1101 00:53:57.453259 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:53:57.576664 kubelet[1949]: I1101 00:53:57.576633 1949 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:53:57.577100 kubelet[1949]: E1101 00:53:57.576929 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:57.601267 kubelet[1949]: E1101 00:53:57.601238 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.601267 kubelet[1949]: W1101 00:53:57.601260 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.601267 kubelet[1949]: E1101 00:53:57.601280 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.601504 kubelet[1949]: E1101 00:53:57.601430 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.601504 kubelet[1949]: W1101 00:53:57.601438 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.601504 kubelet[1949]: E1101 00:53:57.601446 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.601646 kubelet[1949]: E1101 00:53:57.601632 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.601689 kubelet[1949]: W1101 00:53:57.601656 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.601689 kubelet[1949]: E1101 00:53:57.601668 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.601913 kubelet[1949]: E1101 00:53:57.601899 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.601974 kubelet[1949]: W1101 00:53:57.601912 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.601974 kubelet[1949]: E1101 00:53:57.601928 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.602146 kubelet[1949]: E1101 00:53:57.602113 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.602252 kubelet[1949]: W1101 00:53:57.602214 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.602252 kubelet[1949]: E1101 00:53:57.602238 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.602252 kubelet[1949]: E1101 00:53:57.602409 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.602252 kubelet[1949]: W1101 00:53:57.602419 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.602580 kubelet[1949]: E1101 00:53:57.602432 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.602642 kubelet[1949]: E1101 00:53:57.602624 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.602642 kubelet[1949]: W1101 00:53:57.602636 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.602741 kubelet[1949]: E1101 00:53:57.602646 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.602847 kubelet[1949]: E1101 00:53:57.602833 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.602902 kubelet[1949]: W1101 00:53:57.602847 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.602902 kubelet[1949]: E1101 00:53:57.602858 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.603045 kubelet[1949]: E1101 00:53:57.603032 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.603089 kubelet[1949]: W1101 00:53:57.603052 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.603089 kubelet[1949]: E1101 00:53:57.603062 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.603234 kubelet[1949]: E1101 00:53:57.603221 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.603234 kubelet[1949]: W1101 00:53:57.603231 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.603316 kubelet[1949]: E1101 00:53:57.603245 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.603425 kubelet[1949]: E1101 00:53:57.603409 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.603425 kubelet[1949]: W1101 00:53:57.603422 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.603526 kubelet[1949]: E1101 00:53:57.603434 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.603607 kubelet[1949]: E1101 00:53:57.603593 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.603688 kubelet[1949]: W1101 00:53:57.603603 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.603688 kubelet[1949]: E1101 00:53:57.603624 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.604916 kubelet[1949]: E1101 00:53:57.604893 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.604916 kubelet[1949]: W1101 00:53:57.604912 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.605013 kubelet[1949]: E1101 00:53:57.604927 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.605115 kubelet[1949]: E1101 00:53:57.605102 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.605115 kubelet[1949]: W1101 00:53:57.605114 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.605222 kubelet[1949]: E1101 00:53:57.605134 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.605340 kubelet[1949]: E1101 00:53:57.605312 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.605340 kubelet[1949]: W1101 00:53:57.605336 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.605427 kubelet[1949]: E1101 00:53:57.605346 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.606515 kubelet[1949]: E1101 00:53:57.606501 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.606588 kubelet[1949]: W1101 00:53:57.606515 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.606588 kubelet[1949]: E1101 00:53:57.606530 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.606741 kubelet[1949]: E1101 00:53:57.606727 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.606741 kubelet[1949]: W1101 00:53:57.606739 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.606831 kubelet[1949]: E1101 00:53:57.606753 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.606952 kubelet[1949]: E1101 00:53:57.606936 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.606952 kubelet[1949]: W1101 00:53:57.606947 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.607051 kubelet[1949]: E1101 00:53:57.606964 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.607170 kubelet[1949]: E1101 00:53:57.607154 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.607170 kubelet[1949]: W1101 00:53:57.607166 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.607253 kubelet[1949]: E1101 00:53:57.607189 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.607359 kubelet[1949]: E1101 00:53:57.607346 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.607359 kubelet[1949]: W1101 00:53:57.607355 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.607440 kubelet[1949]: E1101 00:53:57.607369 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.607533 kubelet[1949]: E1101 00:53:57.607521 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.607533 kubelet[1949]: W1101 00:53:57.607530 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.607609 kubelet[1949]: E1101 00:53:57.607544 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.607723 kubelet[1949]: E1101 00:53:57.607709 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.607723 kubelet[1949]: W1101 00:53:57.607721 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.607837 kubelet[1949]: E1101 00:53:57.607742 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.607996 kubelet[1949]: E1101 00:53:57.607978 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.607996 kubelet[1949]: W1101 00:53:57.607993 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.608081 kubelet[1949]: E1101 00:53:57.608008 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.608191 kubelet[1949]: E1101 00:53:57.608176 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.608191 kubelet[1949]: W1101 00:53:57.608187 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.608278 kubelet[1949]: E1101 00:53:57.608211 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.608542 kubelet[1949]: E1101 00:53:57.608527 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.608542 kubelet[1949]: W1101 00:53:57.608540 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.608633 kubelet[1949]: E1101 00:53:57.608614 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.608757 kubelet[1949]: E1101 00:53:57.608737 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.608757 kubelet[1949]: W1101 00:53:57.608753 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.608889 kubelet[1949]: E1101 00:53:57.608768 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.609163 kubelet[1949]: E1101 00:53:57.609020 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.609163 kubelet[1949]: W1101 00:53:57.609153 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.609253 kubelet[1949]: E1101 00:53:57.609169 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.609517 kubelet[1949]: E1101 00:53:57.609504 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.609517 kubelet[1949]: W1101 00:53:57.609516 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.609619 kubelet[1949]: E1101 00:53:57.609532 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.609938 kubelet[1949]: E1101 00:53:57.609924 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.609991 kubelet[1949]: W1101 00:53:57.609936 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.610036 kubelet[1949]: E1101 00:53:57.610019 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.610251 kubelet[1949]: E1101 00:53:57.610237 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.610304 kubelet[1949]: W1101 00:53:57.610251 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.610346 kubelet[1949]: E1101 00:53:57.610266 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.610823 kubelet[1949]: E1101 00:53:57.610789 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.611009 kubelet[1949]: W1101 00:53:57.610815 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.611209 kubelet[1949]: E1101 00:53:57.611194 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.611381 kubelet[1949]: E1101 00:53:57.611368 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.611435 kubelet[1949]: W1101 00:53:57.611381 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.611435 kubelet[1949]: E1101 00:53:57.611395 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.611676 kubelet[1949]: E1101 00:53:57.611665 1949 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:53:57.611728 kubelet[1949]: W1101 00:53:57.611677 1949 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:53:57.611728 kubelet[1949]: E1101 00:53:57.611692 1949 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:53:57.745445 env[1204]: time="2025-11-01T00:53:57.745337650Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:57.749444 env[1204]: time="2025-11-01T00:53:57.749419648Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:57.751265 env[1204]: time="2025-11-01T00:53:57.751231179Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:57.752892 env[1204]: time="2025-11-01T00:53:57.752853362Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:53:57.753321 env[1204]: time="2025-11-01T00:53:57.753287281Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5\"" Nov 1 00:53:57.755107 env[1204]: time="2025-11-01T00:53:57.755077773Z" level=info msg="CreateContainer within sandbox \"eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:53:57.791712 env[1204]: time="2025-11-01T00:53:57.791657886Z" level=info msg="CreateContainer within sandbox \"eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4\"" Nov 1 00:53:57.792445 env[1204]: time="2025-11-01T00:53:57.792415136Z" level=info msg="StartContainer for \"ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4\"" Nov 1 00:53:57.820997 systemd[1]: Started cri-containerd-ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4.scope. Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fa8301634d8 items=0 ppid=2452 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:57.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165323061623962303265333435363135306430323236333433396666 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit: BPF prog-id=133 op=LOAD Nov 1 00:53:57.839000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002352f8 items=0 ppid=2452 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:57.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165323061623962303265333435363135306430323236333433396666 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit: BPF prog-id=134 op=LOAD Nov 1 00:53:57.839000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000235348 items=0 ppid=2452 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:57.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165323061623962303265333435363135306430323236333433396666 Nov 1 00:53:57.839000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:53:57.839000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:53:57.839000 audit: BPF prog-id=135 op=LOAD Nov 1 00:53:57.839000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002353d8 items=0 ppid=2452 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:53:57.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165323061623962303265333435363135306430323236333433396666 Nov 1 00:53:57.854186 env[1204]: time="2025-11-01T00:53:57.854104132Z" level=info msg="StartContainer for \"ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4\" returns successfully" Nov 1 00:53:57.859713 systemd[1]: cri-containerd-ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4.scope: Deactivated successfully. Nov 1 00:53:57.862000 audit: BPF prog-id=135 op=UNLOAD Nov 1 00:53:57.893851 env[1204]: time="2025-11-01T00:53:57.893786783Z" level=info msg="shim disconnected" id=ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4 Nov 1 00:53:57.893851 env[1204]: time="2025-11-01T00:53:57.893839183Z" level=warning msg="cleaning up after shim disconnected" id=ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4 namespace=k8s.io Nov 1 00:53:57.893851 env[1204]: time="2025-11-01T00:53:57.893848841Z" level=info msg="cleaning up dead shim" Nov 1 00:53:57.900278 env[1204]: time="2025-11-01T00:53:57.900241943Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:53:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2670 runtime=io.containerd.runc.v2\n" Nov 1 00:53:58.052669 systemd[1]: run-containerd-runc-k8s.io-ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4-runc.3yI8zE.mount: Deactivated successfully. Nov 1 00:53:58.052770 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ae20ab9b02e3456150d02263439ff4f10fea68a411172407555558a2332eceb4-rootfs.mount: Deactivated successfully. Nov 1 00:53:58.579559 kubelet[1949]: E1101 00:53:58.579527 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:53:58.580164 env[1204]: time="2025-11-01T00:53:58.580128441Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:53:59.452354 kubelet[1949]: E1101 00:53:59.452307 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:01.452620 kubelet[1949]: E1101 00:54:01.452562 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:01.889461 env[1204]: time="2025-11-01T00:54:01.889404188Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:54:01.891319 env[1204]: time="2025-11-01T00:54:01.891299181Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:54:01.892721 env[1204]: time="2025-11-01T00:54:01.892673020Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:54:01.894018 env[1204]: time="2025-11-01T00:54:01.893979072Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:54:01.894466 env[1204]: time="2025-11-01T00:54:01.894430875Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd\"" Nov 1 00:54:01.896502 env[1204]: time="2025-11-01T00:54:01.896460791Z" level=info msg="CreateContainer within sandbox \"eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:54:01.910438 env[1204]: time="2025-11-01T00:54:01.910392197Z" level=info msg="CreateContainer within sandbox \"eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4\"" Nov 1 00:54:01.911107 env[1204]: time="2025-11-01T00:54:01.911070486Z" level=info msg="StartContainer for \"d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4\"" Nov 1 00:54:01.928909 systemd[1]: Started cri-containerd-d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4.scope. Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.944971 kernel: kauditd_printk_skb: 91 callbacks suppressed Nov 1 00:54:01.945018 kernel: audit: type=1400 audit(1761958441.942:1008): avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f06c38fa728 items=0 ppid=2452 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:01.957608 kernel: audit: type=1300 audit(1761958441.942:1008): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f06c38fa728 items=0 ppid=2452 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:01.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435393138613265363433383932643032336231366364393166306363 Nov 1 00:54:01.964977 kernel: audit: type=1327 audit(1761958441.942:1008): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435393138613265363433383932643032336231366364393166306363 Nov 1 00:54:01.965034 kernel: audit: type=1400 audit(1761958441.942:1009): avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.974942 kernel: audit: type=1400 audit(1761958441.942:1009): avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.981299 kernel: audit: type=1400 audit(1761958441.942:1009): avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.981386 kernel: audit: type=1400 audit(1761958441.942:1009): avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.994283 kernel: audit: type=1400 audit(1761958441.942:1009): avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.999629 kernel: audit: type=1400 audit(1761958441.942:1009): avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.999673 kernel: audit: type=1400 audit(1761958441.942:1009): avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.942000 audit: BPF prog-id=136 op=LOAD Nov 1 00:54:01.942000 audit[2694]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00025feb8 items=0 ppid=2452 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:01.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435393138613265363433383932643032336231366364393166306363 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.949000 audit: BPF prog-id=137 op=LOAD Nov 1 00:54:01.949000 audit[2694]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00025ff08 items=0 ppid=2452 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:01.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435393138613265363433383932643032336231366364393166306363 Nov 1 00:54:01.956000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:54:01.956000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { perfmon } for pid=2694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit[2694]: AVC avc: denied { bpf } for pid=2694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:01.956000 audit: BPF prog-id=138 op=LOAD Nov 1 00:54:01.956000 audit[2694]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00025ff98 items=0 ppid=2452 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:01.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435393138613265363433383932643032336231366364393166306363 Nov 1 00:54:02.115688 env[1204]: time="2025-11-01T00:54:02.115523468Z" level=info msg="StartContainer for \"d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4\" returns successfully" Nov 1 00:54:02.588744 kubelet[1949]: E1101 00:54:02.588690 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:02.906703 systemd[1]: run-containerd-runc-k8s.io-d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4-runc.GRPhmH.mount: Deactivated successfully. Nov 1 00:54:03.117354 env[1204]: time="2025-11-01T00:54:03.117269786Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:54:03.119480 systemd[1]: cri-containerd-d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4.scope: Deactivated successfully. Nov 1 00:54:03.126000 audit: BPF prog-id=138 op=UNLOAD Nov 1 00:54:03.135073 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4-rootfs.mount: Deactivated successfully. Nov 1 00:54:03.157603 kubelet[1949]: I1101 00:54:03.157509 1949 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:54:03.258905 env[1204]: time="2025-11-01T00:54:03.258862525Z" level=info msg="shim disconnected" id=d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4 Nov 1 00:54:03.258905 env[1204]: time="2025-11-01T00:54:03.258900787Z" level=warning msg="cleaning up after shim disconnected" id=d5918a2e643892d023b16cd91f0cc9034421ec7a9d5e1a8e9fc15761a03a3ff4 namespace=k8s.io Nov 1 00:54:03.258905 env[1204]: time="2025-11-01T00:54:03.258909473Z" level=info msg="cleaning up dead shim" Nov 1 00:54:03.272424 env[1204]: time="2025-11-01T00:54:03.272380375Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:54:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2735 runtime=io.containerd.runc.v2\ntime=\"2025-11-01T00:54:03Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Nov 1 00:54:03.276685 systemd[1]: Created slice kubepods-besteffort-podb83893b4_6627_4a25_86a4_fab3e99d80ca.slice. Nov 1 00:54:03.288224 systemd[1]: Created slice kubepods-besteffort-podb11a6908_1d77_40ff_ac28_4badb8791eee.slice. Nov 1 00:54:03.292663 systemd[1]: Created slice kubepods-burstable-pod94bba030_6145_4a60_bacc_3ca6b58f690c.slice. Nov 1 00:54:03.298572 systemd[1]: Created slice kubepods-burstable-podb624f4d1_eb8b_4a77_ad58_aac63293cc33.slice. Nov 1 00:54:03.302308 systemd[1]: Created slice kubepods-besteffort-pod775ebd68_6412_4090_9511_da6f685868a7.slice. Nov 1 00:54:03.307041 systemd[1]: Created slice kubepods-besteffort-pod85ec62b7_a3b1_4f12_a8e9_67f72f8011d9.slice. Nov 1 00:54:03.310459 systemd[1]: Created slice kubepods-besteffort-poddfb0b1fe_4456_4e60_b863_aa837603af90.slice. Nov 1 00:54:03.445072 kubelet[1949]: I1101 00:54:03.444525 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/775ebd68-6412-4090-9511-da6f685868a7-calico-apiserver-certs\") pod \"calico-apiserver-66556cbf54-ddvsr\" (UID: \"775ebd68-6412-4090-9511-da6f685868a7\") " pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" Nov 1 00:54:03.445072 kubelet[1949]: I1101 00:54:03.444568 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dnn6z\" (UniqueName: \"kubernetes.io/projected/b624f4d1-eb8b-4a77-ad58-aac63293cc33-kube-api-access-dnn6z\") pod \"coredns-668d6bf9bc-dn8br\" (UID: \"b624f4d1-eb8b-4a77-ad58-aac63293cc33\") " pod="kube-system/coredns-668d6bf9bc-dn8br" Nov 1 00:54:03.445072 kubelet[1949]: I1101 00:54:03.444586 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b83893b4-6627-4a25-86a4-fab3e99d80ca-whisker-ca-bundle\") pod \"whisker-54f856f795-9x79g\" (UID: \"b83893b4-6627-4a25-86a4-fab3e99d80ca\") " pod="calico-system/whisker-54f856f795-9x79g" Nov 1 00:54:03.445072 kubelet[1949]: I1101 00:54:03.444600 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sqpkt\" (UniqueName: \"kubernetes.io/projected/85ec62b7-a3b1-4f12-a8e9-67f72f8011d9-kube-api-access-sqpkt\") pod \"calico-apiserver-66556cbf54-7pxt9\" (UID: \"85ec62b7-a3b1-4f12-a8e9-67f72f8011d9\") " pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" Nov 1 00:54:03.445072 kubelet[1949]: I1101 00:54:03.444616 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dfb0b1fe-4456-4e60-b863-aa837603af90-goldmane-ca-bundle\") pod \"goldmane-666569f655-jstvg\" (UID: \"dfb0b1fe-4456-4e60-b863-aa837603af90\") " pod="calico-system/goldmane-666569f655-jstvg" Nov 1 00:54:03.445337 kubelet[1949]: I1101 00:54:03.444630 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xncsm\" (UniqueName: \"kubernetes.io/projected/b83893b4-6627-4a25-86a4-fab3e99d80ca-kube-api-access-xncsm\") pod \"whisker-54f856f795-9x79g\" (UID: \"b83893b4-6627-4a25-86a4-fab3e99d80ca\") " pod="calico-system/whisker-54f856f795-9x79g" Nov 1 00:54:03.445337 kubelet[1949]: I1101 00:54:03.444647 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4ck9d\" (UniqueName: \"kubernetes.io/projected/94bba030-6145-4a60-bacc-3ca6b58f690c-kube-api-access-4ck9d\") pod \"coredns-668d6bf9bc-f8gzw\" (UID: \"94bba030-6145-4a60-bacc-3ca6b58f690c\") " pod="kube-system/coredns-668d6bf9bc-f8gzw" Nov 1 00:54:03.445337 kubelet[1949]: I1101 00:54:03.444668 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hdc5b\" (UniqueName: \"kubernetes.io/projected/775ebd68-6412-4090-9511-da6f685868a7-kube-api-access-hdc5b\") pod \"calico-apiserver-66556cbf54-ddvsr\" (UID: \"775ebd68-6412-4090-9511-da6f685868a7\") " pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" Nov 1 00:54:03.445337 kubelet[1949]: I1101 00:54:03.444683 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/b624f4d1-eb8b-4a77-ad58-aac63293cc33-config-volume\") pod \"coredns-668d6bf9bc-dn8br\" (UID: \"b624f4d1-eb8b-4a77-ad58-aac63293cc33\") " pod="kube-system/coredns-668d6bf9bc-dn8br" Nov 1 00:54:03.445337 kubelet[1949]: I1101 00:54:03.444702 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/dfb0b1fe-4456-4e60-b863-aa837603af90-goldmane-key-pair\") pod \"goldmane-666569f655-jstvg\" (UID: \"dfb0b1fe-4456-4e60-b863-aa837603af90\") " pod="calico-system/goldmane-666569f655-jstvg" Nov 1 00:54:03.445457 kubelet[1949]: I1101 00:54:03.444728 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qppwn\" (UniqueName: \"kubernetes.io/projected/dfb0b1fe-4456-4e60-b863-aa837603af90-kube-api-access-qppwn\") pod \"goldmane-666569f655-jstvg\" (UID: \"dfb0b1fe-4456-4e60-b863-aa837603af90\") " pod="calico-system/goldmane-666569f655-jstvg" Nov 1 00:54:03.445457 kubelet[1949]: I1101 00:54:03.444742 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b83893b4-6627-4a25-86a4-fab3e99d80ca-whisker-backend-key-pair\") pod \"whisker-54f856f795-9x79g\" (UID: \"b83893b4-6627-4a25-86a4-fab3e99d80ca\") " pod="calico-system/whisker-54f856f795-9x79g" Nov 1 00:54:03.445457 kubelet[1949]: I1101 00:54:03.444789 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/94bba030-6145-4a60-bacc-3ca6b58f690c-config-volume\") pod \"coredns-668d6bf9bc-f8gzw\" (UID: \"94bba030-6145-4a60-bacc-3ca6b58f690c\") " pod="kube-system/coredns-668d6bf9bc-f8gzw" Nov 1 00:54:03.445457 kubelet[1949]: I1101 00:54:03.444836 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b11a6908-1d77-40ff-ac28-4badb8791eee-tigera-ca-bundle\") pod \"calico-kube-controllers-58ddd67d6b-xlsdg\" (UID: \"b11a6908-1d77-40ff-ac28-4badb8791eee\") " pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" Nov 1 00:54:03.445457 kubelet[1949]: I1101 00:54:03.444859 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/85ec62b7-a3b1-4f12-a8e9-67f72f8011d9-calico-apiserver-certs\") pod \"calico-apiserver-66556cbf54-7pxt9\" (UID: \"85ec62b7-a3b1-4f12-a8e9-67f72f8011d9\") " pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" Nov 1 00:54:03.445573 kubelet[1949]: I1101 00:54:03.444874 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b7m9v\" (UniqueName: \"kubernetes.io/projected/b11a6908-1d77-40ff-ac28-4badb8791eee-kube-api-access-b7m9v\") pod \"calico-kube-controllers-58ddd67d6b-xlsdg\" (UID: \"b11a6908-1d77-40ff-ac28-4badb8791eee\") " pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" Nov 1 00:54:03.445573 kubelet[1949]: I1101 00:54:03.444892 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/dfb0b1fe-4456-4e60-b863-aa837603af90-config\") pod \"goldmane-666569f655-jstvg\" (UID: \"dfb0b1fe-4456-4e60-b863-aa837603af90\") " pod="calico-system/goldmane-666569f655-jstvg" Nov 1 00:54:03.456577 systemd[1]: Created slice kubepods-besteffort-pod3141111f_6c21_4e2a_82c8_54c3b4d00c87.slice. Nov 1 00:54:03.458391 env[1204]: time="2025-11-01T00:54:03.458351187Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-rm2n9,Uid:3141111f-6c21-4e2a-82c8-54c3b4d00c87,Namespace:calico-system,Attempt:0,}" Nov 1 00:54:03.517494 env[1204]: time="2025-11-01T00:54:03.517417747Z" level=error msg="Failed to destroy network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.517843 env[1204]: time="2025-11-01T00:54:03.517796741Z" level=error msg="encountered an error cleaning up failed sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.517878 env[1204]: time="2025-11-01T00:54:03.517860941Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-rm2n9,Uid:3141111f-6c21-4e2a-82c8-54c3b4d00c87,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.518121 kubelet[1949]: E1101 00:54:03.518074 1949 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.518299 kubelet[1949]: E1101 00:54:03.518147 1949 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-rm2n9" Nov 1 00:54:03.518299 kubelet[1949]: E1101 00:54:03.518167 1949 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-rm2n9" Nov 1 00:54:03.518299 kubelet[1949]: E1101 00:54:03.518215 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-rm2n9_calico-system(3141111f-6c21-4e2a-82c8-54c3b4d00c87)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-rm2n9_calico-system(3141111f-6c21-4e2a-82c8-54c3b4d00c87)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:03.519310 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029-shm.mount: Deactivated successfully. Nov 1 00:54:03.586645 env[1204]: time="2025-11-01T00:54:03.586596319Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-54f856f795-9x79g,Uid:b83893b4-6627-4a25-86a4-fab3e99d80ca,Namespace:calico-system,Attempt:0,}" Nov 1 00:54:03.590653 kubelet[1949]: I1101 00:54:03.590621 1949 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:03.592691 env[1204]: time="2025-11-01T00:54:03.591825099Z" level=info msg="StopPodSandbox for \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\"" Nov 1 00:54:03.593054 env[1204]: time="2025-11-01T00:54:03.592993512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-58ddd67d6b-xlsdg,Uid:b11a6908-1d77-40ff-ac28-4badb8791eee,Namespace:calico-system,Attempt:0,}" Nov 1 00:54:03.595801 kubelet[1949]: E1101 00:54:03.595765 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:03.595880 kubelet[1949]: E1101 00:54:03.595848 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:03.596160 env[1204]: time="2025-11-01T00:54:03.596115573Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-f8gzw,Uid:94bba030-6145-4a60-bacc-3ca6b58f690c,Namespace:kube-system,Attempt:0,}" Nov 1 00:54:03.597654 env[1204]: time="2025-11-01T00:54:03.597626170Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:54:03.600887 kubelet[1949]: E1101 00:54:03.600866 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:03.601293 env[1204]: time="2025-11-01T00:54:03.601266800Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-dn8br,Uid:b624f4d1-eb8b-4a77-ad58-aac63293cc33,Namespace:kube-system,Attempt:0,}" Nov 1 00:54:03.605558 env[1204]: time="2025-11-01T00:54:03.605519893Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66556cbf54-ddvsr,Uid:775ebd68-6412-4090-9511-da6f685868a7,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:54:03.609820 env[1204]: time="2025-11-01T00:54:03.609766944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66556cbf54-7pxt9,Uid:85ec62b7-a3b1-4f12-a8e9-67f72f8011d9,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:54:03.615056 env[1204]: time="2025-11-01T00:54:03.615025762Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-jstvg,Uid:dfb0b1fe-4456-4e60-b863-aa837603af90,Namespace:calico-system,Attempt:0,}" Nov 1 00:54:03.615489 env[1204]: time="2025-11-01T00:54:03.615462786Z" level=error msg="StopPodSandbox for \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\" failed" error="failed to destroy network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.615788 kubelet[1949]: E1101 00:54:03.615744 1949 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:03.615872 kubelet[1949]: E1101 00:54:03.615825 1949 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029"} Nov 1 00:54:03.615907 kubelet[1949]: E1101 00:54:03.615896 1949 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3141111f-6c21-4e2a-82c8-54c3b4d00c87\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:54:03.615975 kubelet[1949]: E1101 00:54:03.615919 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3141111f-6c21-4e2a-82c8-54c3b4d00c87\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:03.665634 env[1204]: time="2025-11-01T00:54:03.665579894Z" level=error msg="Failed to destroy network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.666127 env[1204]: time="2025-11-01T00:54:03.666078453Z" level=error msg="encountered an error cleaning up failed sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.666269 env[1204]: time="2025-11-01T00:54:03.666128518Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-54f856f795-9x79g,Uid:b83893b4-6627-4a25-86a4-fab3e99d80ca,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.666440 kubelet[1949]: E1101 00:54:03.666404 1949 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.666508 kubelet[1949]: E1101 00:54:03.666462 1949 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-54f856f795-9x79g" Nov 1 00:54:03.666508 kubelet[1949]: E1101 00:54:03.666483 1949 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-54f856f795-9x79g" Nov 1 00:54:03.666561 kubelet[1949]: E1101 00:54:03.666535 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-54f856f795-9x79g_calico-system(b83893b4-6627-4a25-86a4-fab3e99d80ca)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-54f856f795-9x79g_calico-system(b83893b4-6627-4a25-86a4-fab3e99d80ca)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-54f856f795-9x79g" podUID="b83893b4-6627-4a25-86a4-fab3e99d80ca" Nov 1 00:54:03.742890 env[1204]: time="2025-11-01T00:54:03.742732349Z" level=error msg="Failed to destroy network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.744403 env[1204]: time="2025-11-01T00:54:03.744364704Z" level=error msg="encountered an error cleaning up failed sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.744462 env[1204]: time="2025-11-01T00:54:03.744411793Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-58ddd67d6b-xlsdg,Uid:b11a6908-1d77-40ff-ac28-4badb8791eee,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.744669 kubelet[1949]: E1101 00:54:03.744604 1949 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.744726 kubelet[1949]: E1101 00:54:03.744679 1949 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" Nov 1 00:54:03.744726 kubelet[1949]: E1101 00:54:03.744704 1949 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" Nov 1 00:54:03.744784 kubelet[1949]: E1101 00:54:03.744744 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-58ddd67d6b-xlsdg_calico-system(b11a6908-1d77-40ff-ac28-4badb8791eee)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-58ddd67d6b-xlsdg_calico-system(b11a6908-1d77-40ff-ac28-4badb8791eee)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:54:03.745105 env[1204]: time="2025-11-01T00:54:03.745069653Z" level=error msg="Failed to destroy network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.745487 env[1204]: time="2025-11-01T00:54:03.745446603Z" level=error msg="encountered an error cleaning up failed sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.745548 env[1204]: time="2025-11-01T00:54:03.745485446Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66556cbf54-ddvsr,Uid:775ebd68-6412-4090-9511-da6f685868a7,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.745598 kubelet[1949]: E1101 00:54:03.745581 1949 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.745633 kubelet[1949]: E1101 00:54:03.745604 1949 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" Nov 1 00:54:03.745633 kubelet[1949]: E1101 00:54:03.745619 1949 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" Nov 1 00:54:03.745686 kubelet[1949]: E1101 00:54:03.745644 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-66556cbf54-ddvsr_calico-apiserver(775ebd68-6412-4090-9511-da6f685868a7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-66556cbf54-ddvsr_calico-apiserver(775ebd68-6412-4090-9511-da6f685868a7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:54:03.748483 env[1204]: time="2025-11-01T00:54:03.748435414Z" level=error msg="Failed to destroy network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.748682 env[1204]: time="2025-11-01T00:54:03.748656430Z" level=error msg="encountered an error cleaning up failed sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.748741 env[1204]: time="2025-11-01T00:54:03.748690324Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-f8gzw,Uid:94bba030-6145-4a60-bacc-3ca6b58f690c,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.748823 kubelet[1949]: E1101 00:54:03.748776 1949 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.748876 kubelet[1949]: E1101 00:54:03.748858 1949 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-f8gzw" Nov 1 00:54:03.748905 kubelet[1949]: E1101 00:54:03.748874 1949 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-f8gzw" Nov 1 00:54:03.748933 kubelet[1949]: E1101 00:54:03.748898 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-f8gzw_kube-system(94bba030-6145-4a60-bacc-3ca6b58f690c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-f8gzw_kube-system(94bba030-6145-4a60-bacc-3ca6b58f690c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-f8gzw" podUID="94bba030-6145-4a60-bacc-3ca6b58f690c" Nov 1 00:54:03.765236 env[1204]: time="2025-11-01T00:54:03.765181706Z" level=error msg="Failed to destroy network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.765491 env[1204]: time="2025-11-01T00:54:03.765454030Z" level=error msg="encountered an error cleaning up failed sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.765526 env[1204]: time="2025-11-01T00:54:03.765500096Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-dn8br,Uid:b624f4d1-eb8b-4a77-ad58-aac63293cc33,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.765648 kubelet[1949]: E1101 00:54:03.765623 1949 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.765688 kubelet[1949]: E1101 00:54:03.765659 1949 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-dn8br" Nov 1 00:54:03.765688 kubelet[1949]: E1101 00:54:03.765673 1949 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-dn8br" Nov 1 00:54:03.765739 kubelet[1949]: E1101 00:54:03.765699 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-dn8br_kube-system(b624f4d1-eb8b-4a77-ad58-aac63293cc33)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-dn8br_kube-system(b624f4d1-eb8b-4a77-ad58-aac63293cc33)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-dn8br" podUID="b624f4d1-eb8b-4a77-ad58-aac63293cc33" Nov 1 00:54:03.770043 env[1204]: time="2025-11-01T00:54:03.769990958Z" level=error msg="Failed to destroy network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.770275 env[1204]: time="2025-11-01T00:54:03.770218487Z" level=error msg="Failed to destroy network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.770387 env[1204]: time="2025-11-01T00:54:03.770312974Z" level=error msg="encountered an error cleaning up failed sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.770439 env[1204]: time="2025-11-01T00:54:03.770416138Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66556cbf54-7pxt9,Uid:85ec62b7-a3b1-4f12-a8e9-67f72f8011d9,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.770564 env[1204]: time="2025-11-01T00:54:03.770530103Z" level=error msg="encountered an error cleaning up failed sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.770564 env[1204]: time="2025-11-01T00:54:03.770578715Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-jstvg,Uid:dfb0b1fe-4456-4e60-b863-aa837603af90,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.770787 kubelet[1949]: E1101 00:54:03.770640 1949 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.770787 kubelet[1949]: E1101 00:54:03.770701 1949 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" Nov 1 00:54:03.770787 kubelet[1949]: E1101 00:54:03.770721 1949 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" Nov 1 00:54:03.770904 kubelet[1949]: E1101 00:54:03.770762 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-66556cbf54-7pxt9_calico-apiserver(85ec62b7-a3b1-4f12-a8e9-67f72f8011d9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-66556cbf54-7pxt9_calico-apiserver(85ec62b7-a3b1-4f12-a8e9-67f72f8011d9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:54:03.771050 kubelet[1949]: E1101 00:54:03.771018 1949 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:03.771050 kubelet[1949]: E1101 00:54:03.771040 1949 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-jstvg" Nov 1 00:54:03.771143 kubelet[1949]: E1101 00:54:03.771052 1949 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-jstvg" Nov 1 00:54:03.771143 kubelet[1949]: E1101 00:54:03.771079 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-jstvg_calico-system(dfb0b1fe-4456-4e60-b863-aa837603af90)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-jstvg_calico-system(dfb0b1fe-4456-4e60-b863-aa837603af90)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:54:04.596855 kubelet[1949]: I1101 00:54:04.596826 1949 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:04.597633 env[1204]: time="2025-11-01T00:54:04.597555020Z" level=info msg="StopPodSandbox for \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\"" Nov 1 00:54:04.598687 kubelet[1949]: I1101 00:54:04.598661 1949 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:04.599237 env[1204]: time="2025-11-01T00:54:04.599199017Z" level=info msg="StopPodSandbox for \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\"" Nov 1 00:54:04.600186 kubelet[1949]: I1101 00:54:04.600165 1949 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:04.600511 env[1204]: time="2025-11-01T00:54:04.600469860Z" level=info msg="StopPodSandbox for \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\"" Nov 1 00:54:04.601947 kubelet[1949]: I1101 00:54:04.601919 1949 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:04.602348 env[1204]: time="2025-11-01T00:54:04.602320457Z" level=info msg="StopPodSandbox for \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\"" Nov 1 00:54:04.604700 kubelet[1949]: I1101 00:54:04.604672 1949 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:04.605138 env[1204]: time="2025-11-01T00:54:04.605104882Z" level=info msg="StopPodSandbox for \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\"" Nov 1 00:54:04.606280 kubelet[1949]: I1101 00:54:04.606208 1949 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:04.607069 env[1204]: time="2025-11-01T00:54:04.607044635Z" level=info msg="StopPodSandbox for \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\"" Nov 1 00:54:04.608703 kubelet[1949]: I1101 00:54:04.608305 1949 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:04.609271 env[1204]: time="2025-11-01T00:54:04.609015597Z" level=info msg="StopPodSandbox for \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\"" Nov 1 00:54:04.625928 env[1204]: time="2025-11-01T00:54:04.625863662Z" level=error msg="StopPodSandbox for \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\" failed" error="failed to destroy network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:04.626182 kubelet[1949]: E1101 00:54:04.626134 1949 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:04.626241 kubelet[1949]: E1101 00:54:04.626182 1949 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175"} Nov 1 00:54:04.626241 kubelet[1949]: E1101 00:54:04.626218 1949 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b624f4d1-eb8b-4a77-ad58-aac63293cc33\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:54:04.626351 kubelet[1949]: E1101 00:54:04.626239 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b624f4d1-eb8b-4a77-ad58-aac63293cc33\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-dn8br" podUID="b624f4d1-eb8b-4a77-ad58-aac63293cc33" Nov 1 00:54:04.627693 env[1204]: time="2025-11-01T00:54:04.627648804Z" level=error msg="StopPodSandbox for \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\" failed" error="failed to destroy network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:04.627858 kubelet[1949]: E1101 00:54:04.627823 1949 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:04.627858 kubelet[1949]: E1101 00:54:04.627855 1949 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8"} Nov 1 00:54:04.627954 kubelet[1949]: E1101 00:54:04.627874 1949 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b11a6908-1d77-40ff-ac28-4badb8791eee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:54:04.627954 kubelet[1949]: E1101 00:54:04.627898 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b11a6908-1d77-40ff-ac28-4badb8791eee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:54:04.647140 env[1204]: time="2025-11-01T00:54:04.647082048Z" level=error msg="StopPodSandbox for \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\" failed" error="failed to destroy network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:04.647557 kubelet[1949]: E1101 00:54:04.647503 1949 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:04.647629 kubelet[1949]: E1101 00:54:04.647567 1949 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286"} Nov 1 00:54:04.647629 kubelet[1949]: E1101 00:54:04.647602 1949 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"94bba030-6145-4a60-bacc-3ca6b58f690c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:54:04.647725 kubelet[1949]: E1101 00:54:04.647628 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"94bba030-6145-4a60-bacc-3ca6b58f690c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-f8gzw" podUID="94bba030-6145-4a60-bacc-3ca6b58f690c" Nov 1 00:54:04.655312 env[1204]: time="2025-11-01T00:54:04.655255173Z" level=error msg="StopPodSandbox for \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\" failed" error="failed to destroy network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:04.655623 kubelet[1949]: E1101 00:54:04.655593 1949 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:04.655623 kubelet[1949]: E1101 00:54:04.655624 1949 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081"} Nov 1 00:54:04.655721 kubelet[1949]: E1101 00:54:04.655644 1949 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"775ebd68-6412-4090-9511-da6f685868a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:54:04.655721 kubelet[1949]: E1101 00:54:04.655665 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"775ebd68-6412-4090-9511-da6f685868a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:54:04.661936 env[1204]: time="2025-11-01T00:54:04.661827252Z" level=error msg="StopPodSandbox for \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\" failed" error="failed to destroy network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:04.662321 kubelet[1949]: E1101 00:54:04.662281 1949 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:04.662321 kubelet[1949]: E1101 00:54:04.662311 1949 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d"} Nov 1 00:54:04.662418 kubelet[1949]: E1101 00:54:04.662331 1949 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b83893b4-6627-4a25-86a4-fab3e99d80ca\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:54:04.662418 kubelet[1949]: E1101 00:54:04.662357 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b83893b4-6627-4a25-86a4-fab3e99d80ca\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-54f856f795-9x79g" podUID="b83893b4-6627-4a25-86a4-fab3e99d80ca" Nov 1 00:54:04.663691 env[1204]: time="2025-11-01T00:54:04.663645577Z" level=error msg="StopPodSandbox for \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\" failed" error="failed to destroy network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:04.663769 env[1204]: time="2025-11-01T00:54:04.663658231Z" level=error msg="StopPodSandbox for \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\" failed" error="failed to destroy network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:54:04.663944 kubelet[1949]: E1101 00:54:04.663902 1949 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:04.663944 kubelet[1949]: E1101 00:54:04.663932 1949 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d"} Nov 1 00:54:04.664061 kubelet[1949]: E1101 00:54:04.663943 1949 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:04.664061 kubelet[1949]: E1101 00:54:04.663972 1949 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"85ec62b7-a3b1-4f12-a8e9-67f72f8011d9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:54:04.664061 kubelet[1949]: E1101 00:54:04.664008 1949 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc"} Nov 1 00:54:04.664061 kubelet[1949]: E1101 00:54:04.664051 1949 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dfb0b1fe-4456-4e60-b863-aa837603af90\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:54:04.664224 kubelet[1949]: E1101 00:54:04.664072 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dfb0b1fe-4456-4e60-b863-aa837603af90\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:54:04.664224 kubelet[1949]: E1101 00:54:04.664013 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"85ec62b7-a3b1-4f12-a8e9-67f72f8011d9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:54:05.691768 kubelet[1949]: E1101 00:54:05.691728 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:05.722000 audit[3173]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=3173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:05.722000 audit[3173]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffde63c37a0 a2=0 a3=7ffde63c378c items=0 ppid=2055 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:05.722000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:05.732000 audit[3173]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=3173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:05.732000 audit[3173]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffde63c37a0 a2=0 a3=7ffde63c378c items=0 ppid=2055 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:05.732000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:06.621169 kubelet[1949]: E1101 00:54:06.620370 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:09.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.5:22-10.0.0.1:49950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:09.249190 systemd[1]: Started sshd@7-10.0.0.5:22-10.0.0.1:49950.service. Nov 1 00:54:09.261545 kernel: kauditd_printk_skb: 40 callbacks suppressed Nov 1 00:54:09.261771 kernel: audit: type=1130 audit(1761958449.248:1017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.5:22-10.0.0.1:49950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:09.308000 audit[3175]: USER_ACCT pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.321527 sshd[3175]: Accepted publickey for core from 10.0.0.1 port 49950 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:09.321867 kernel: audit: type=1101 audit(1761958449.308:1018): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.322000 audit[3175]: CRED_ACQ pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.323870 sshd[3175]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:09.334617 systemd[1]: Started session-8.scope. Nov 1 00:54:09.337391 kernel: audit: type=1103 audit(1761958449.322:1019): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.337522 kernel: audit: type=1006 audit(1761958449.322:1020): pid=3175 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Nov 1 00:54:09.337560 kernel: audit: type=1300 audit(1761958449.322:1020): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbed2d470 a2=3 a3=0 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:09.322000 audit[3175]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbed2d470 a2=3 a3=0 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:09.339584 systemd-logind[1185]: New session 8 of user core. Nov 1 00:54:09.347052 kernel: audit: type=1327 audit(1761958449.322:1020): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:09.322000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:09.345000 audit[3175]: USER_START pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.348000 audit[3177]: CRED_ACQ pid=3177 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.374172 kernel: audit: type=1105 audit(1761958449.345:1021): pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.374351 kernel: audit: type=1103 audit(1761958449.348:1022): pid=3177 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.559769 sshd[3175]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:09.559000 audit[3175]: USER_END pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.564364 systemd[1]: sshd@7-10.0.0.5:22-10.0.0.1:49950.service: Deactivated successfully. Nov 1 00:54:09.565342 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:54:09.566186 systemd-logind[1185]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:54:09.567151 systemd-logind[1185]: Removed session 8. Nov 1 00:54:09.559000 audit[3175]: CRED_DISP pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.580335 kernel: audit: type=1106 audit(1761958449.559:1023): pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.581644 kernel: audit: type=1104 audit(1761958449.559:1024): pid=3175 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:09.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.5:22-10.0.0.1:49950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:13.224725 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4126711724.mount: Deactivated successfully. Nov 1 00:54:13.600302 env[1204]: time="2025-11-01T00:54:13.600054442Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:54:13.607998 env[1204]: time="2025-11-01T00:54:13.607888530Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:54:13.610333 env[1204]: time="2025-11-01T00:54:13.610218339Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:54:13.613728 env[1204]: time="2025-11-01T00:54:13.613653337Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:54:13.614346 env[1204]: time="2025-11-01T00:54:13.614298890Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9\"" Nov 1 00:54:13.632316 env[1204]: time="2025-11-01T00:54:13.628708661Z" level=info msg="CreateContainer within sandbox \"eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:54:13.660557 env[1204]: time="2025-11-01T00:54:13.660478576Z" level=info msg="CreateContainer within sandbox \"eb568235378b6559d6d5d72a4819caeca0fbe4af2c272eff977c244a886d4f62\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"cda0ea002ce3fa4585923de8db4d4a25be4e06d59dd5f049d854c54496ad6366\"" Nov 1 00:54:13.662488 env[1204]: time="2025-11-01T00:54:13.662450303Z" level=info msg="StartContainer for \"cda0ea002ce3fa4585923de8db4d4a25be4e06d59dd5f049d854c54496ad6366\"" Nov 1 00:54:13.698250 systemd[1]: Started cri-containerd-cda0ea002ce3fa4585923de8db4d4a25be4e06d59dd5f049d854c54496ad6366.scope. Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fee3b033688 items=0 ppid=2452 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:13.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364613065613030326365336661343538353932336465386462346434 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit: BPF prog-id=139 op=LOAD Nov 1 00:54:13.734000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000360048 items=0 ppid=2452 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:13.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364613065613030326365336661343538353932336465386462346434 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit: BPF prog-id=140 op=LOAD Nov 1 00:54:13.734000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000360098 items=0 ppid=2452 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:13.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364613065613030326365336661343538353932336465386462346434 Nov 1 00:54:13.734000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:54:13.734000 audit: BPF prog-id=139 op=UNLOAD Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:13.734000 audit: BPF prog-id=141 op=LOAD Nov 1 00:54:13.734000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000360128 items=0 ppid=2452 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:13.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364613065613030326365336661343538353932336465386462346434 Nov 1 00:54:13.952078 env[1204]: time="2025-11-01T00:54:13.951913842Z" level=info msg="StartContainer for \"cda0ea002ce3fa4585923de8db4d4a25be4e06d59dd5f049d854c54496ad6366\" returns successfully" Nov 1 00:54:14.032670 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:54:14.032892 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:54:14.331292 env[1204]: time="2025-11-01T00:54:14.331243863Z" level=info msg="StopPodSandbox for \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\"" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.435 [INFO][3264] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.436 [INFO][3264] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" iface="eth0" netns="/var/run/netns/cni-55db54dc-a3f0-3659-126f-aa812ff0387f" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.437 [INFO][3264] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" iface="eth0" netns="/var/run/netns/cni-55db54dc-a3f0-3659-126f-aa812ff0387f" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.437 [INFO][3264] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" iface="eth0" netns="/var/run/netns/cni-55db54dc-a3f0-3659-126f-aa812ff0387f" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.437 [INFO][3264] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.437 [INFO][3264] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.535 [INFO][3272] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.536 [INFO][3272] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.536 [INFO][3272] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.550 [WARNING][3272] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.550 [INFO][3272] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.559 [INFO][3272] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:14.567776 env[1204]: 2025-11-01 00:54:14.562 [INFO][3264] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:14.568393 systemd[1]: Started sshd@8-10.0.0.5:22-10.0.0.1:53772.service. Nov 1 00:54:14.571418 kernel: kauditd_printk_skb: 44 callbacks suppressed Nov 1 00:54:14.571465 kernel: audit: type=1130 audit(1761958454.566:1032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.5:22-10.0.0.1:53772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:14.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.5:22-10.0.0.1:53772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:14.571843 systemd[1]: run-netns-cni\x2d55db54dc\x2da3f0\x2d3659\x2d126f\x2daa812ff0387f.mount: Deactivated successfully. Nov 1 00:54:14.580212 env[1204]: time="2025-11-01T00:54:14.580003168Z" level=info msg="TearDown network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\" successfully" Nov 1 00:54:14.580212 env[1204]: time="2025-11-01T00:54:14.580061528Z" level=info msg="StopPodSandbox for \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\" returns successfully" Nov 1 00:54:14.625000 audit[3281]: USER_ACCT pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.628206 sshd[3281]: Accepted publickey for core from 10.0.0.1 port 53772 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:14.640000 audit[3281]: CRED_ACQ pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.643138 sshd[3281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:14.653075 systemd-logind[1185]: New session 9 of user core. Nov 1 00:54:14.655660 systemd[1]: Started session-9.scope. Nov 1 00:54:14.656876 kernel: audit: type=1101 audit(1761958454.625:1033): pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.656994 kernel: audit: type=1103 audit(1761958454.640:1034): pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.657025 kernel: audit: type=1006 audit(1761958454.640:1035): pid=3281 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Nov 1 00:54:14.663834 kubelet[1949]: E1101 00:54:14.663654 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:14.640000 audit[3281]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbf5ecf40 a2=3 a3=0 items=0 ppid=1 pid=3281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:14.679422 kernel: audit: type=1300 audit(1761958454.640:1035): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbf5ecf40 a2=3 a3=0 items=0 ppid=1 pid=3281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:14.679591 kernel: audit: type=1327 audit(1761958454.640:1035): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:14.640000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:14.687220 kernel: audit: type=1105 audit(1761958454.662:1036): pid=3281 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.662000 audit[3281]: USER_START pid=3281 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.664000 audit[3293]: CRED_ACQ pid=3293 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.700191 kernel: audit: type=1103 audit(1761958454.664:1037): pid=3293 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.703228 kubelet[1949]: I1101 00:54:14.703090 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-tldw6" podStartSLOduration=1.746703747 podStartE2EDuration="21.70301466s" podCreationTimestamp="2025-11-01 00:53:53 +0000 UTC" firstStartedPulling="2025-11-01 00:53:53.659149522 +0000 UTC m=+21.276716318" lastFinishedPulling="2025-11-01 00:54:13.615460435 +0000 UTC m=+41.233027231" observedRunningTime="2025-11-01 00:54:14.70037642 +0000 UTC m=+42.317943226" watchObservedRunningTime="2025-11-01 00:54:14.70301466 +0000 UTC m=+42.320581486" Nov 1 00:54:14.751559 kubelet[1949]: I1101 00:54:14.751480 1949 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b83893b4-6627-4a25-86a4-fab3e99d80ca-whisker-backend-key-pair\") pod \"b83893b4-6627-4a25-86a4-fab3e99d80ca\" (UID: \"b83893b4-6627-4a25-86a4-fab3e99d80ca\") " Nov 1 00:54:14.751559 kubelet[1949]: I1101 00:54:14.751544 1949 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b83893b4-6627-4a25-86a4-fab3e99d80ca-whisker-ca-bundle\") pod \"b83893b4-6627-4a25-86a4-fab3e99d80ca\" (UID: \"b83893b4-6627-4a25-86a4-fab3e99d80ca\") " Nov 1 00:54:14.751802 kubelet[1949]: I1101 00:54:14.751574 1949 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xncsm\" (UniqueName: \"kubernetes.io/projected/b83893b4-6627-4a25-86a4-fab3e99d80ca-kube-api-access-xncsm\") pod \"b83893b4-6627-4a25-86a4-fab3e99d80ca\" (UID: \"b83893b4-6627-4a25-86a4-fab3e99d80ca\") " Nov 1 00:54:14.752215 kubelet[1949]: I1101 00:54:14.752156 1949 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b83893b4-6627-4a25-86a4-fab3e99d80ca-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "b83893b4-6627-4a25-86a4-fab3e99d80ca" (UID: "b83893b4-6627-4a25-86a4-fab3e99d80ca"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:54:14.760487 systemd[1]: var-lib-kubelet-pods-b83893b4\x2d6627\x2d4a25\x2d86a4\x2dfab3e99d80ca-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:54:14.764706 systemd[1]: var-lib-kubelet-pods-b83893b4\x2d6627\x2d4a25\x2d86a4\x2dfab3e99d80ca-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxncsm.mount: Deactivated successfully. Nov 1 00:54:14.768957 kubelet[1949]: I1101 00:54:14.768905 1949 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b83893b4-6627-4a25-86a4-fab3e99d80ca-kube-api-access-xncsm" (OuterVolumeSpecName: "kube-api-access-xncsm") pod "b83893b4-6627-4a25-86a4-fab3e99d80ca" (UID: "b83893b4-6627-4a25-86a4-fab3e99d80ca"). InnerVolumeSpecName "kube-api-access-xncsm". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:54:14.771871 kubelet[1949]: I1101 00:54:14.769995 1949 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b83893b4-6627-4a25-86a4-fab3e99d80ca-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "b83893b4-6627-4a25-86a4-fab3e99d80ca" (UID: "b83893b4-6627-4a25-86a4-fab3e99d80ca"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:54:14.829660 sshd[3281]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:14.829000 audit[3281]: USER_END pid=3281 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.832637 systemd[1]: sshd@8-10.0.0.5:22-10.0.0.1:53772.service: Deactivated successfully. Nov 1 00:54:14.833621 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:54:14.834700 systemd-logind[1185]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:54:14.836088 systemd-logind[1185]: Removed session 9. Nov 1 00:54:14.846820 kernel: audit: type=1106 audit(1761958454.829:1038): pid=3281 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.846980 kernel: audit: type=1104 audit(1761958454.829:1039): pid=3281 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.829000 audit[3281]: CRED_DISP pid=3281 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:14.852156 kubelet[1949]: I1101 00:54:14.852080 1949 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b83893b4-6627-4a25-86a4-fab3e99d80ca-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Nov 1 00:54:14.852156 kubelet[1949]: I1101 00:54:14.852118 1949 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b83893b4-6627-4a25-86a4-fab3e99d80ca-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Nov 1 00:54:14.852156 kubelet[1949]: I1101 00:54:14.852145 1949 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-xncsm\" (UniqueName: \"kubernetes.io/projected/b83893b4-6627-4a25-86a4-fab3e99d80ca-kube-api-access-xncsm\") on node \"localhost\" DevicePath \"\"" Nov 1 00:54:14.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.5:22-10.0.0.1:53772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:14.970188 systemd[1]: Removed slice kubepods-besteffort-podb83893b4_6627_4a25_86a4_fab3e99d80ca.slice. Nov 1 00:54:15.072215 systemd[1]: Created slice kubepods-besteffort-poddbaab719_a329_4fec_b2e9_c1a2bf4c2d6a.slice. Nov 1 00:54:15.158966 kubelet[1949]: I1101 00:54:15.158919 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a-whisker-backend-key-pair\") pod \"whisker-65cb786f6c-bk5pm\" (UID: \"dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a\") " pod="calico-system/whisker-65cb786f6c-bk5pm" Nov 1 00:54:15.159229 kubelet[1949]: I1101 00:54:15.159201 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a-whisker-ca-bundle\") pod \"whisker-65cb786f6c-bk5pm\" (UID: \"dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a\") " pod="calico-system/whisker-65cb786f6c-bk5pm" Nov 1 00:54:15.159362 kubelet[1949]: I1101 00:54:15.159337 1949 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cvxk6\" (UniqueName: \"kubernetes.io/projected/dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a-kube-api-access-cvxk6\") pod \"whisker-65cb786f6c-bk5pm\" (UID: \"dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a\") " pod="calico-system/whisker-65cb786f6c-bk5pm" Nov 1 00:54:15.377735 env[1204]: time="2025-11-01T00:54:15.377657144Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-65cb786f6c-bk5pm,Uid:dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a,Namespace:calico-system,Attempt:0,}" Nov 1 00:54:15.460284 env[1204]: time="2025-11-01T00:54:15.455267434Z" level=info msg="StopPodSandbox for \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\"" Nov 1 00:54:15.616000 audit[3384]: AVC avc: denied { write } for pid=3384 comm="tee" name="fd" dev="proc" ino=25221 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:54:15.616000 audit[3384]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbdc1e7e9 a2=241 a3=1b6 items=1 ppid=3366 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.616000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:54:15.616000 audit: PATH item=0 name="/dev/fd/63" inode=25216 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:54:15.616000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:54:15.638000 audit[3405]: AVC avc: denied { write } for pid=3405 comm="tee" name="fd" dev="proc" ino=26026 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:54:15.638000 audit[3405]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe0a0437d9 a2=241 a3=1b6 items=1 ppid=3373 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.638000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:54:15.638000 audit: PATH item=0 name="/dev/fd/63" inode=23222 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:54:15.638000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:54:15.640000 audit[3402]: AVC avc: denied { write } for pid=3402 comm="tee" name="fd" dev="proc" ino=23226 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:54:15.640000 audit[3402]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe691d27eb a2=241 a3=1b6 items=1 ppid=3369 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.640000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:54:15.640000 audit: PATH item=0 name="/dev/fd/63" inode=25227 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:54:15.640000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:54:15.660000 audit[3440]: AVC avc: denied { write } for pid=3440 comm="tee" name="fd" dev="proc" ino=26034 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:54:15.660000 audit[3440]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffb22117ea a2=241 a3=1b6 items=1 ppid=3381 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.660000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:54:15.660000 audit: PATH item=0 name="/dev/fd/63" inode=24298 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:54:15.660000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:54:15.665208 kubelet[1949]: I1101 00:54:15.665148 1949 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:54:15.665841 kubelet[1949]: E1101 00:54:15.665565 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:15.668000 audit[3438]: AVC avc: denied { write } for pid=3438 comm="tee" name="fd" dev="proc" ino=25237 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:54:15.668000 audit[3438]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff52a5a7da a2=241 a3=1b6 items=1 ppid=3371 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.668000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:54:15.668000 audit: PATH item=0 name="/dev/fd/63" inode=25234 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:54:15.668000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:54:15.670000 audit[3425]: AVC avc: denied { write } for pid=3425 comm="tee" name="fd" dev="proc" ino=26038 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:54:15.670000 audit[3425]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdc44297e9 a2=241 a3=1b6 items=1 ppid=3368 pid=3425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.670000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:54:15.670000 audit: PATH item=0 name="/dev/fd/63" inode=24295 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:54:15.670000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:54:15.671000 audit[3423]: AVC avc: denied { write } for pid=3423 comm="tee" name="fd" dev="proc" ino=24303 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:54:15.671000 audit[3423]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffc5d707e9 a2=241 a3=1b6 items=1 ppid=3379 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.671000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:54:15.671000 audit: PATH item=0 name="/dev/fd/63" inode=23227 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:54:15.671000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:54:15.749023 systemd-networkd[1024]: calicb1b9253568: Link UP Nov 1 00:54:15.757919 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:54:15.758081 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicb1b9253568: link becomes ready Nov 1 00:54:15.762049 systemd-networkd[1024]: calicb1b9253568: Gained carrier Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.570 [INFO][3332] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.570 [INFO][3332] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" iface="eth0" netns="/var/run/netns/cni-91ea67c7-9e28-826a-2eb8-56394b7e50c4" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.570 [INFO][3332] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" iface="eth0" netns="/var/run/netns/cni-91ea67c7-9e28-826a-2eb8-56394b7e50c4" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.571 [INFO][3332] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" iface="eth0" netns="/var/run/netns/cni-91ea67c7-9e28-826a-2eb8-56394b7e50c4" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.571 [INFO][3332] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.571 [INFO][3332] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.599 [INFO][3351] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.599 [INFO][3351] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.732 [INFO][3351] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.742 [WARNING][3351] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.742 [INFO][3351] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.745 [INFO][3351] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:15.769381 env[1204]: 2025-11-01 00:54:15.760 [INFO][3332] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:15.772335 systemd[1]: run-netns-cni\x2d91ea67c7\x2d9e28\x2d826a\x2d2eb8\x2d56394b7e50c4.mount: Deactivated successfully. Nov 1 00:54:15.773660 env[1204]: time="2025-11-01T00:54:15.772888141Z" level=info msg="TearDown network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\" successfully" Nov 1 00:54:15.773660 env[1204]: time="2025-11-01T00:54:15.772935191Z" level=info msg="StopPodSandbox for \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\" returns successfully" Nov 1 00:54:15.774512 kubelet[1949]: E1101 00:54:15.773303 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:15.776927 env[1204]: time="2025-11-01T00:54:15.776087304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-f8gzw,Uid:94bba030-6145-4a60-bacc-3ca6b58f690c,Namespace:kube-system,Attempt:1,}" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.445 [INFO][3308] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.469 [INFO][3308] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--65cb786f6c--bk5pm-eth0 whisker-65cb786f6c- calico-system dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a 955 0 2025-11-01 00:54:15 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:65cb786f6c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-65cb786f6c-bk5pm eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calicb1b9253568 [] [] }} ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Namespace="calico-system" Pod="whisker-65cb786f6c-bk5pm" WorkloadEndpoint="localhost-k8s-whisker--65cb786f6c--bk5pm-" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.469 [INFO][3308] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Namespace="calico-system" Pod="whisker-65cb786f6c-bk5pm" WorkloadEndpoint="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.551 [INFO][3338] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" HandleID="k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Workload="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.552 [INFO][3338] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" HandleID="k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Workload="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000139a70), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-65cb786f6c-bk5pm", "timestamp":"2025-11-01 00:54:15.551567201 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.552 [INFO][3338] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.552 [INFO][3338] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.552 [INFO][3338] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.572 [INFO][3338] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.587 [INFO][3338] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.595 [INFO][3338] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.610 [INFO][3338] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.623 [INFO][3338] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.623 [INFO][3338] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.630 [INFO][3338] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.653 [INFO][3338] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.732 [INFO][3338] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.732 [INFO][3338] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" host="localhost" Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.732 [INFO][3338] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:15.807224 env[1204]: 2025-11-01 00:54:15.732 [INFO][3338] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" HandleID="k8s-pod-network.dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Workload="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" Nov 1 00:54:15.808193 env[1204]: 2025-11-01 00:54:15.734 [INFO][3308] cni-plugin/k8s.go 418: Populated endpoint ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Namespace="calico-system" Pod="whisker-65cb786f6c-bk5pm" WorkloadEndpoint="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--65cb786f6c--bk5pm-eth0", GenerateName:"whisker-65cb786f6c-", Namespace:"calico-system", SelfLink:"", UID:"dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 54, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"65cb786f6c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-65cb786f6c-bk5pm", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calicb1b9253568", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:15.808193 env[1204]: 2025-11-01 00:54:15.735 [INFO][3308] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Namespace="calico-system" Pod="whisker-65cb786f6c-bk5pm" WorkloadEndpoint="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" Nov 1 00:54:15.808193 env[1204]: 2025-11-01 00:54:15.735 [INFO][3308] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicb1b9253568 ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Namespace="calico-system" Pod="whisker-65cb786f6c-bk5pm" WorkloadEndpoint="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" Nov 1 00:54:15.808193 env[1204]: 2025-11-01 00:54:15.768 [INFO][3308] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Namespace="calico-system" Pod="whisker-65cb786f6c-bk5pm" WorkloadEndpoint="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" Nov 1 00:54:15.808193 env[1204]: 2025-11-01 00:54:15.768 [INFO][3308] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Namespace="calico-system" Pod="whisker-65cb786f6c-bk5pm" WorkloadEndpoint="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--65cb786f6c--bk5pm-eth0", GenerateName:"whisker-65cb786f6c-", Namespace:"calico-system", SelfLink:"", UID:"dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 54, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"65cb786f6c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f", Pod:"whisker-65cb786f6c-bk5pm", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calicb1b9253568", MAC:"22:81:5a:dd:63:6f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:15.808193 env[1204]: 2025-11-01 00:54:15.803 [INFO][3308] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f" Namespace="calico-system" Pod="whisker-65cb786f6c-bk5pm" WorkloadEndpoint="localhost-k8s-whisker--65cb786f6c--bk5pm-eth0" Nov 1 00:54:15.846826 env[1204]: time="2025-11-01T00:54:15.845361889Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:54:15.846826 env[1204]: time="2025-11-01T00:54:15.845414688Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:54:15.846826 env[1204]: time="2025-11-01T00:54:15.845428083Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:54:15.846826 env[1204]: time="2025-11-01T00:54:15.845579007Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f pid=3479 runtime=io.containerd.runc.v2 Nov 1 00:54:15.867026 systemd[1]: Started cri-containerd-dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f.scope. Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.899000 audit: BPF prog-id=142 op=LOAD Nov 1 00:54:15.901000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.901000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3479 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462623930333362356134353363303765643634323363306364353033 Nov 1 00:54:15.908000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.908000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3479 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462623930333362356134353363303765643634323363306364353033 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.909000 audit: BPF prog-id=143 op=LOAD Nov 1 00:54:15.909000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003e64a0 items=0 ppid=3479 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462623930333362356134353363303765643634323363306364353033 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.910000 audit: BPF prog-id=144 op=LOAD Nov 1 00:54:15.910000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003e64e8 items=0 ppid=3479 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462623930333362356134353363303765643634323363306364353033 Nov 1 00:54:15.912000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:54:15.912000 audit: BPF prog-id=143 op=UNLOAD Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:15.912000 audit: BPF prog-id=145 op=LOAD Nov 1 00:54:15.912000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003e68f8 items=0 ppid=3479 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:15.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462623930333362356134353363303765643634323363306364353033 Nov 1 00:54:15.916434 systemd-resolved[1137]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:54:15.997288 env[1204]: time="2025-11-01T00:54:15.997239918Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-65cb786f6c-bk5pm,Uid:dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a,Namespace:calico-system,Attempt:0,} returns sandbox id \"dbb9033b5a453c07ed6423c0cd50326268ba62b7f0ea8a3676b373a3b95ea15f\"" Nov 1 00:54:15.999360 env[1204]: time="2025-11-01T00:54:15.999328404Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit: BPF prog-id=146 op=LOAD Nov 1 00:54:16.040000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe3b3b65e0 a2=98 a3=1fffffffffffffff items=0 ppid=3370 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.040000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:54:16.040000 audit: BPF prog-id=146 op=UNLOAD Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.040000 audit: BPF prog-id=147 op=LOAD Nov 1 00:54:16.040000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe3b3b64c0 a2=94 a3=3 items=0 ppid=3370 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.040000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:54:16.042000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.042000 audit: BPF prog-id=148 op=LOAD Nov 1 00:54:16.042000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe3b3b6500 a2=94 a3=7ffe3b3b66e0 items=0 ppid=3370 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.042000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:54:16.043000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:54:16.043000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.043000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe3b3b65d0 a2=50 a3=a000000085 items=0 ppid=3370 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.043000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.044000 audit: BPF prog-id=149 op=LOAD Nov 1 00:54:16.044000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff3defe570 a2=98 a3=3 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.044000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.044000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit: BPF prog-id=150 op=LOAD Nov 1 00:54:16.045000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3defe360 a2=94 a3=54428f items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.045000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.045000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.045000 audit: BPF prog-id=151 op=LOAD Nov 1 00:54:16.045000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3defe390 a2=94 a3=2 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.045000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.045000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:54:16.129763 systemd-networkd[1024]: calicb60f9c2e43: Link UP Nov 1 00:54:16.132484 systemd-networkd[1024]: calicb60f9c2e43: Gained carrier Nov 1 00:54:16.132993 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicb60f9c2e43: link becomes ready Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.875 [INFO][3461] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.902 [INFO][3461] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0 coredns-668d6bf9bc- kube-system 94bba030-6145-4a60-bacc-3ca6b58f690c 960 0 2025-11-01 00:53:40 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-f8gzw eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calicb60f9c2e43 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Namespace="kube-system" Pod="coredns-668d6bf9bc-f8gzw" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--f8gzw-" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.903 [INFO][3461] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Namespace="kube-system" Pod="coredns-668d6bf9bc-f8gzw" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.972 [INFO][3516] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" HandleID="k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.974 [INFO][3516] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" HandleID="k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003253d0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-f8gzw", "timestamp":"2025-11-01 00:54:15.972540568 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.974 [INFO][3516] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.974 [INFO][3516] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.974 [INFO][3516] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:15.991 [INFO][3516] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.070 [INFO][3516] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.085 [INFO][3516] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.095 [INFO][3516] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.100 [INFO][3516] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.100 [INFO][3516] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.106 [INFO][3516] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.113 [INFO][3516] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.122 [INFO][3516] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.122 [INFO][3516] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" host="localhost" Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.122 [INFO][3516] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:16.152500 env[1204]: 2025-11-01 00:54:16.122 [INFO][3516] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" HandleID="k8s-pod-network.3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:16.153939 env[1204]: 2025-11-01 00:54:16.126 [INFO][3461] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Namespace="kube-system" Pod="coredns-668d6bf9bc-f8gzw" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"94bba030-6145-4a60-bacc-3ca6b58f690c", ResourceVersion:"960", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-f8gzw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicb60f9c2e43", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:16.153939 env[1204]: 2025-11-01 00:54:16.127 [INFO][3461] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Namespace="kube-system" Pod="coredns-668d6bf9bc-f8gzw" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:16.153939 env[1204]: 2025-11-01 00:54:16.127 [INFO][3461] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicb60f9c2e43 ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Namespace="kube-system" Pod="coredns-668d6bf9bc-f8gzw" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:16.153939 env[1204]: 2025-11-01 00:54:16.132 [INFO][3461] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Namespace="kube-system" Pod="coredns-668d6bf9bc-f8gzw" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:16.153939 env[1204]: 2025-11-01 00:54:16.133 [INFO][3461] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Namespace="kube-system" Pod="coredns-668d6bf9bc-f8gzw" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"94bba030-6145-4a60-bacc-3ca6b58f690c", ResourceVersion:"960", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f", Pod:"coredns-668d6bf9bc-f8gzw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicb60f9c2e43", MAC:"16:d6:f0:1e:bf:18", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:16.153939 env[1204]: 2025-11-01 00:54:16.147 [INFO][3461] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f" Namespace="kube-system" Pod="coredns-668d6bf9bc-f8gzw" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:16.176124 env[1204]: time="2025-11-01T00:54:16.176013292Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:54:16.176124 env[1204]: time="2025-11-01T00:54:16.176070118Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:54:16.176387 env[1204]: time="2025-11-01T00:54:16.176085317Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:54:16.176387 env[1204]: time="2025-11-01T00:54:16.176300421Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f pid=3578 runtime=io.containerd.runc.v2 Nov 1 00:54:16.196816 systemd[1]: Started cri-containerd-3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f.scope. Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.227000 audit: BPF prog-id=152 op=LOAD Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3578 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366306336626131663361636633656161613836656530353164626466 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3578 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366306336626131663361636633656161613836656530353164626466 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.228000 audit: BPF prog-id=153 op=LOAD Nov 1 00:54:16.228000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002379b0 items=0 ppid=3578 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366306336626131663361636633656161613836656530353164626466 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.229000 audit: BPF prog-id=154 op=LOAD Nov 1 00:54:16.229000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002379f8 items=0 ppid=3578 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366306336626131663361636633656161613836656530353164626466 Nov 1 00:54:16.233000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:54:16.233000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.233000 audit: BPF prog-id=155 op=LOAD Nov 1 00:54:16.233000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000237e08 items=0 ppid=3578 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366306336626131663361636633656161613836656530353164626466 Nov 1 00:54:16.235516 systemd-resolved[1137]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.240000 audit: BPF prog-id=156 op=LOAD Nov 1 00:54:16.240000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3defe250 a2=94 a3=1 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.240000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.261000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:54:16.261000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.261000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff3defe320 a2=50 a3=7fff3defe400 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.261000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3defe260 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3defe290 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3defe1a0 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3defe2b0 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3defe290 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3defe280 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3defe2b0 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3defe290 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3defe2b0 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3defe280 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.281000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.281000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3defe2f0 a2=28 a3=0 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.281000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff3defe0a0 a2=50 a3=1 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.285000 audit: BPF prog-id=157 op=LOAD Nov 1 00:54:16.285000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff3defe0a0 a2=94 a3=5 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.298000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff3defe150 a2=50 a3=1 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.298000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff3defe270 a2=4 a3=38 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.298000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { confidentiality } for pid=3562 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:54:16.298000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3defe2c0 a2=94 a3=6 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.298000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.298000 audit[3562]: AVC avc: denied { confidentiality } for pid=3562 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:54:16.298000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3defda70 a2=94 a3=88 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.298000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.299000 audit[3562]: AVC avc: denied { confidentiality } for pid=3562 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:54:16.299000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3defda70 a2=94 a3=88 items=0 ppid=3370 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.299000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.309000 audit: BPF prog-id=158 op=LOAD Nov 1 00:54:16.309000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc472a3850 a2=98 a3=1999999999999999 items=0 ppid=3370 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.309000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:54:16.311000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit: BPF prog-id=159 op=LOAD Nov 1 00:54:16.311000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc472a3730 a2=94 a3=ffff items=0 ppid=3370 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.311000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:54:16.311000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.311000 audit: BPF prog-id=160 op=LOAD Nov 1 00:54:16.311000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc472a3770 a2=94 a3=7ffc472a3950 items=0 ppid=3370 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.311000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:54:16.311000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:54:16.323237 env[1204]: time="2025-11-01T00:54:16.323186701Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-f8gzw,Uid:94bba030-6145-4a60-bacc-3ca6b58f690c,Namespace:kube-system,Attempt:1,} returns sandbox id \"3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f\"" Nov 1 00:54:16.325212 kubelet[1949]: E1101 00:54:16.325097 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:16.328943 env[1204]: time="2025-11-01T00:54:16.328902623Z" level=info msg="CreateContainer within sandbox \"3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:54:16.357993 env[1204]: time="2025-11-01T00:54:16.357932454Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:16.373633 env[1204]: time="2025-11-01T00:54:16.373434034Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:54:16.375408 kubelet[1949]: E1101 00:54:16.375324 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:54:16.375508 kubelet[1949]: E1101 00:54:16.375405 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:54:16.375687 kubelet[1949]: E1101 00:54:16.375577 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:792c0a11335e437284b3c719225e7f42,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-cvxk6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-65cb786f6c-bk5pm_calico-system(dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:16.377701 env[1204]: time="2025-11-01T00:54:16.377670354Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:54:16.387104 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount275637137.mount: Deactivated successfully. Nov 1 00:54:16.394360 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4219935775.mount: Deactivated successfully. Nov 1 00:54:16.407555 env[1204]: time="2025-11-01T00:54:16.407404770Z" level=info msg="CreateContainer within sandbox \"3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"877ab636d099fcc62ad11b330500121cc55d2626952337c51b64d50b41c81bb2\"" Nov 1 00:54:16.412883 env[1204]: time="2025-11-01T00:54:16.412832450Z" level=info msg="StartContainer for \"877ab636d099fcc62ad11b330500121cc55d2626952337c51b64d50b41c81bb2\"" Nov 1 00:54:16.461359 env[1204]: time="2025-11-01T00:54:16.461306199Z" level=info msg="StopPodSandbox for \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\"" Nov 1 00:54:16.462978 systemd-networkd[1024]: vxlan.calico: Link UP Nov 1 00:54:16.462992 systemd-networkd[1024]: vxlan.calico: Gained carrier Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit: BPF prog-id=161 op=LOAD Nov 1 00:54:16.461000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffcd677530 a2=98 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.461000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.461000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.461000 audit: BPF prog-id=162 op=LOAD Nov 1 00:54:16.461000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffcd677340 a2=94 a3=54428f items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.461000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit: BPF prog-id=163 op=LOAD Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffcd677370 a2=94 a3=2 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit: BPF prog-id=163 op=UNLOAD Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcd677240 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcd677270 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcd677180 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcd677290 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcd677270 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcd677260 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcd677290 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcd677270 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcd677290 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffcd677260 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffcd6772d0 a2=28 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.462000 audit: BPF prog-id=164 op=LOAD Nov 1 00:54:16.462000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffcd677140 a2=94 a3=0 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.462000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.462000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fffcd677130 a2=50 a3=2800 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.463000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fffcd677130 a2=50 a3=2800 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.463000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit: BPF prog-id=165 op=LOAD Nov 1 00:54:16.463000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffcd676950 a2=94 a3=2 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.463000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.463000 audit: BPF prog-id=165 op=UNLOAD Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { perfmon } for pid=3655 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit[3655]: AVC avc: denied { bpf } for pid=3655 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.463000 audit: BPF prog-id=166 op=LOAD Nov 1 00:54:16.463000 audit[3655]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffcd676a50 a2=94 a3=30 items=0 ppid=3370 pid=3655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.463000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:54:16.470971 env[1204]: time="2025-11-01T00:54:16.470912831Z" level=info msg="StopPodSandbox for \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\"" Nov 1 00:54:16.472765 kubelet[1949]: I1101 00:54:16.472523 1949 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="b83893b4-6627-4a25-86a4-fab3e99d80ca" path="/var/lib/kubelet/pods/b83893b4-6627-4a25-86a4-fab3e99d80ca/volumes" Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.479000 audit: BPF prog-id=167 op=LOAD Nov 1 00:54:16.479000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc31468b0 a2=98 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.479000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.480000 audit: BPF prog-id=167 op=UNLOAD Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit: BPF prog-id=168 op=LOAD Nov 1 00:54:16.480000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffc31466a0 a2=94 a3=54428f items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.480000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.480000 audit: BPF prog-id=168 op=UNLOAD Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.480000 audit: BPF prog-id=169 op=LOAD Nov 1 00:54:16.480000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffc31466d0 a2=94 a3=2 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.480000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.480000 audit: BPF prog-id=169 op=UNLOAD Nov 1 00:54:16.484644 systemd[1]: Started cri-containerd-877ab636d099fcc62ad11b330500121cc55d2626952337c51b64d50b41c81bb2.scope. Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.504000 audit: BPF prog-id=170 op=LOAD Nov 1 00:54:16.505000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.505000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3578 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837376162363336643039396663633632616431316233333035303031 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3578 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837376162363336643039396663633632616431316233333035303031 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.506000 audit: BPF prog-id=171 op=LOAD Nov 1 00:54:16.506000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d5e40 items=0 ppid=3578 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837376162363336643039396663633632616431316233333035303031 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.507000 audit: BPF prog-id=172 op=LOAD Nov 1 00:54:16.507000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d5e88 items=0 ppid=3578 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837376162363336643039396663633632616431316233333035303031 Nov 1 00:54:16.508000 audit: BPF prog-id=172 op=UNLOAD Nov 1 00:54:16.509000 audit: BPF prog-id=171 op=UNLOAD Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.509000 audit: BPF prog-id=173 op=LOAD Nov 1 00:54:16.509000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00039a298 items=0 ppid=3578 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837376162363336643039396663633632616431316233333035303031 Nov 1 00:54:16.596097 env[1204]: time="2025-11-01T00:54:16.596035986Z" level=info msg="StartContainer for \"877ab636d099fcc62ad11b330500121cc55d2626952337c51b64d50b41c81bb2\" returns successfully" Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.650000 audit: BPF prog-id=174 op=LOAD Nov 1 00:54:16.650000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffc3146590 a2=94 a3=1 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.650000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.652000 audit: BPF prog-id=174 op=UNLOAD Nov 1 00:54:16.652000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.652000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fffc3146660 a2=50 a3=7fffc3146740 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.652000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.658000 audit[3670]: AVC avc: denied { getattr } for pid=3670 comm="coredns" path="cgroup:[4026532761]" dev="nsfs" ino=4026532761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c281,c823 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:54:16.658000 audit[3670]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00014c900 a2=c0004977c8 a3=0 items=0 ppid=3578 pid=3670 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c281,c823 key=(null) Nov 1 00:54:16.658000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:54:16.663000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.663000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc31465a0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.663000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.664000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.664000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc31465d0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.664000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.664000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.664000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc31464e0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.664000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.664000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.664000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc31465f0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.664000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.665000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.665000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc31465d0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.665000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.665000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.665000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc31465c0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.665000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.665000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.665000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc31465f0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.665000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.666000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.666000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc31465d0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.666000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.666000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.666000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc31465f0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.666000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.666000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.666000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc31465c0 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.666000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc3146630 a2=28 a3=0 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.667000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffc31463e0 a2=50 a3=1 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.667000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.667000 audit: BPF prog-id=175 op=LOAD Nov 1 00:54:16.667000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffc31463e0 a2=94 a3=5 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.667000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.669000 audit: BPF prog-id=175 op=UNLOAD Nov 1 00:54:16.669000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.669000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffc3146490 a2=50 a3=1 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.669000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.669000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.669000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fffc31465b0 a2=4 a3=38 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.669000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672431 kubelet[1949]: E1101 00:54:16.672388 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:16.670000 audit[3662]: AVC avc: denied { confidentiality } for pid=3662 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:54:16.670000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffc3146600 a2=94 a3=6 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.670000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.671000 audit[3662]: AVC avc: denied { confidentiality } for pid=3662 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:54:16.671000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffc3145db0 a2=94 a3=88 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.671000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { confidentiality } for pid=3662 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:54:16.672000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffc3145db0 a2=94 a3=88 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.672000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffc31477e0 a2=10 a3=208 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.672000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffc3147680 a2=10 a3=3 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.672000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffc3147620 a2=10 a3=3 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.672000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.672000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:16.672000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffc3147620 a2=10 a3=7 items=0 ppid=3370 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.672000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:54:16.683000 audit: BPF prog-id=166 op=UNLOAD Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.596 [INFO][3694] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.597 [INFO][3694] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" iface="eth0" netns="/var/run/netns/cni-b0289122-79ed-1ceb-00e9-3728d9559685" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.597 [INFO][3694] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" iface="eth0" netns="/var/run/netns/cni-b0289122-79ed-1ceb-00e9-3728d9559685" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.597 [INFO][3694] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" iface="eth0" netns="/var/run/netns/cni-b0289122-79ed-1ceb-00e9-3728d9559685" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.597 [INFO][3694] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.597 [INFO][3694] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.648 [INFO][3722] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.648 [INFO][3722] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.648 [INFO][3722] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.680 [WARNING][3722] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.680 [INFO][3722] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.688 [INFO][3722] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:16.695281 env[1204]: 2025-11-01 00:54:16.693 [INFO][3694] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:16.695869 env[1204]: time="2025-11-01T00:54:16.695431835Z" level=info msg="TearDown network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\" successfully" Nov 1 00:54:16.695869 env[1204]: time="2025-11-01T00:54:16.695476039Z" level=info msg="StopPodSandbox for \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\" returns successfully" Nov 1 00:54:16.696229 env[1204]: time="2025-11-01T00:54:16.696199077Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66556cbf54-ddvsr,Uid:775ebd68-6412-4090-9511-da6f685868a7,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:54:16.702684 kubelet[1949]: I1101 00:54:16.702601 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-f8gzw" podStartSLOduration=36.702577304 podStartE2EDuration="36.702577304s" podCreationTimestamp="2025-11-01 00:53:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:54:16.699320974 +0000 UTC m=+44.316887780" watchObservedRunningTime="2025-11-01 00:54:16.702577304 +0000 UTC m=+44.320144100" Nov 1 00:54:16.709260 env[1204]: time="2025-11-01T00:54:16.709143492Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:16.734229 env[1204]: time="2025-11-01T00:54:16.734131788Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:54:16.734637 kubelet[1949]: E1101 00:54:16.734572 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:54:16.734736 kubelet[1949]: E1101 00:54:16.734644 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:54:16.734877 kubelet[1949]: E1101 00:54:16.734794 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cvxk6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-65cb786f6c-bk5pm_calico-system(dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:16.736618 kubelet[1949]: E1101 00:54:16.736567 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-65cb786f6c-bk5pm" podUID="dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a" Nov 1 00:54:16.738000 audit[3758]: NETFILTER_CFG table=filter:103 family=2 entries=20 op=nft_register_rule pid=3758 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:16.738000 audit[3758]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd52afb690 a2=0 a3=7ffd52afb67c items=0 ppid=2055 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.738000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:16.757000 audit[3758]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=3758 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:16.757000 audit[3758]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffd52afb690 a2=0 a3=0 items=0 ppid=2055 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.757000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.654 [INFO][3702] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.654 [INFO][3702] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" iface="eth0" netns="/var/run/netns/cni-47fd0eda-c36b-7664-484d-19873fad5dab" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.662 [INFO][3702] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" iface="eth0" netns="/var/run/netns/cni-47fd0eda-c36b-7664-484d-19873fad5dab" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.662 [INFO][3702] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" iface="eth0" netns="/var/run/netns/cni-47fd0eda-c36b-7664-484d-19873fad5dab" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.662 [INFO][3702] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.662 [INFO][3702] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.715 [INFO][3734] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.716 [INFO][3734] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.716 [INFO][3734] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.731 [WARNING][3734] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.731 [INFO][3734] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.740 [INFO][3734] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:16.765573 env[1204]: 2025-11-01 00:54:16.745 [INFO][3702] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:16.766711 env[1204]: time="2025-11-01T00:54:16.766525300Z" level=info msg="TearDown network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\" successfully" Nov 1 00:54:16.766938 env[1204]: time="2025-11-01T00:54:16.766911677Z" level=info msg="StopPodSandbox for \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\" returns successfully" Nov 1 00:54:16.769979 env[1204]: time="2025-11-01T00:54:16.769831694Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-rm2n9,Uid:3141111f-6c21-4e2a-82c8-54c3b4d00c87,Namespace:calico-system,Attempt:1,}" Nov 1 00:54:16.857000 audit[3803]: NETFILTER_CFG table=mangle:105 family=2 entries=16 op=nft_register_chain pid=3803 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:16.857000 audit[3803]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fffbe605e00 a2=0 a3=7fffbe605dec items=0 ppid=3370 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.857000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:16.875000 audit[3801]: NETFILTER_CFG table=raw:106 family=2 entries=21 op=nft_register_chain pid=3801 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:16.875000 audit[3801]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffefce87960 a2=0 a3=7ffefce8794c items=0 ppid=3370 pid=3801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.875000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:16.875000 audit[3809]: NETFILTER_CFG table=nat:107 family=2 entries=15 op=nft_register_chain pid=3809 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:16.875000 audit[3809]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffd62273570 a2=0 a3=7ffd6227355c items=0 ppid=3370 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.875000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:16.886000 audit[3805]: NETFILTER_CFG table=filter:108 family=2 entries=128 op=nft_register_chain pid=3805 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:16.886000 audit[3805]: SYSCALL arch=c000003e syscall=46 success=yes exit=72768 a0=3 a1=7ffd0d223e30 a2=0 a3=7ffd0d223e1c items=0 ppid=3370 pid=3805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:16.886000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:17.027478 systemd-networkd[1024]: calicb1b9253568: Gained IPv6LL Nov 1 00:54:17.162824 kubelet[1949]: I1101 00:54:17.162644 1949 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:54:17.163681 kubelet[1949]: E1101 00:54:17.163301 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:17.243991 systemd-networkd[1024]: calicf9d305e155: Link UP Nov 1 00:54:17.248746 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicf9d305e155: link becomes ready Nov 1 00:54:17.248549 systemd-networkd[1024]: calicf9d305e155: Gained carrier Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:16.814 [INFO][3759] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0 calico-apiserver-66556cbf54- calico-apiserver 775ebd68-6412-4090-9511-da6f685868a7 986 0 2025-11-01 00:53:49 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:66556cbf54 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-66556cbf54-ddvsr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calicf9d305e155 [] [] }} ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-ddvsr" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:16.815 [INFO][3759] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-ddvsr" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:16.907 [INFO][3792] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" HandleID="k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:16.907 [INFO][3792] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" HandleID="k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003a5390), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-66556cbf54-ddvsr", "timestamp":"2025-11-01 00:54:16.906981719 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:16.907 [INFO][3792] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:16.907 [INFO][3792] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:16.907 [INFO][3792] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:16.976 [INFO][3792] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.179 [INFO][3792] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.191 [INFO][3792] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.195 [INFO][3792] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.200 [INFO][3792] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.200 [INFO][3792] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.203 [INFO][3792] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682 Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.211 [INFO][3792] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.229 [INFO][3792] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.229 [INFO][3792] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" host="localhost" Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.233 [INFO][3792] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:17.272952 env[1204]: 2025-11-01 00:54:17.233 [INFO][3792] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" HandleID="k8s-pod-network.6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:17.274274 env[1204]: 2025-11-01 00:54:17.236 [INFO][3759] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-ddvsr" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0", GenerateName:"calico-apiserver-66556cbf54-", Namespace:"calico-apiserver", SelfLink:"", UID:"775ebd68-6412-4090-9511-da6f685868a7", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66556cbf54", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-66556cbf54-ddvsr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calicf9d305e155", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:17.274274 env[1204]: 2025-11-01 00:54:17.236 [INFO][3759] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-ddvsr" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:17.274274 env[1204]: 2025-11-01 00:54:17.236 [INFO][3759] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicf9d305e155 ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-ddvsr" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:17.274274 env[1204]: 2025-11-01 00:54:17.249 [INFO][3759] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-ddvsr" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:17.274274 env[1204]: 2025-11-01 00:54:17.250 [INFO][3759] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-ddvsr" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0", GenerateName:"calico-apiserver-66556cbf54-", Namespace:"calico-apiserver", SelfLink:"", UID:"775ebd68-6412-4090-9511-da6f685868a7", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66556cbf54", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682", Pod:"calico-apiserver-66556cbf54-ddvsr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calicf9d305e155", MAC:"c6:a3:66:b9:86:d0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:17.274274 env[1204]: 2025-11-01 00:54:17.269 [INFO][3759] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-ddvsr" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:17.281023 systemd[1]: run-netns-cni\x2db0289122\x2d79ed\x2d1ceb\x2d00e9\x2d3728d9559685.mount: Deactivated successfully. Nov 1 00:54:17.281142 systemd[1]: run-netns-cni\x2d47fd0eda\x2dc36b\x2d7664\x2d484d\x2d19873fad5dab.mount: Deactivated successfully. Nov 1 00:54:17.302975 env[1204]: time="2025-11-01T00:54:17.302886051Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:54:17.303343 env[1204]: time="2025-11-01T00:54:17.303234856Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:54:17.303343 env[1204]: time="2025-11-01T00:54:17.303277676Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:54:17.303866 env[1204]: time="2025-11-01T00:54:17.303741247Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682 pid=3863 runtime=io.containerd.runc.v2 Nov 1 00:54:17.313000 audit[3866]: NETFILTER_CFG table=filter:109 family=2 entries=60 op=nft_register_chain pid=3866 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:17.313000 audit[3866]: SYSCALL arch=c000003e syscall=46 success=yes exit=32248 a0=3 a1=7ffee8068240 a2=0 a3=7ffee806822c items=0 ppid=3370 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.313000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:17.337119 systemd-networkd[1024]: cali8752eaf9e93: Link UP Nov 1 00:54:17.340513 systemd-networkd[1024]: cali8752eaf9e93: Gained carrier Nov 1 00:54:17.343765 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8752eaf9e93: link becomes ready Nov 1 00:54:17.357131 systemd[1]: run-containerd-runc-k8s.io-6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682-runc.dKtyza.mount: Deactivated successfully. Nov 1 00:54:17.363244 systemd[1]: Started cri-containerd-6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682.scope. Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:16.900 [INFO][3779] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--rm2n9-eth0 csi-node-driver- calico-system 3141111f-6c21-4e2a-82c8-54c3b4d00c87 988 0 2025-11-01 00:53:53 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-rm2n9 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali8752eaf9e93 [] [] }} ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Namespace="calico-system" Pod="csi-node-driver-rm2n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--rm2n9-" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:16.900 [INFO][3779] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Namespace="calico-system" Pod="csi-node-driver-rm2n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:16.949 [INFO][3818] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" HandleID="k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:16.949 [INFO][3818] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" HandleID="k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000122670), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-rm2n9", "timestamp":"2025-11-01 00:54:16.949605876 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:16.950 [INFO][3818] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.229 [INFO][3818] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.229 [INFO][3818] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.252 [INFO][3818] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.285 [INFO][3818] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.298 [INFO][3818] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.302 [INFO][3818] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.305 [INFO][3818] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.305 [INFO][3818] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.308 [INFO][3818] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.318 [INFO][3818] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.330 [INFO][3818] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.331 [INFO][3818] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" host="localhost" Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.331 [INFO][3818] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:17.393177 env[1204]: 2025-11-01 00:54:17.331 [INFO][3818] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" HandleID="k8s-pod-network.8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:17.394121 env[1204]: 2025-11-01 00:54:17.333 [INFO][3779] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Namespace="calico-system" Pod="csi-node-driver-rm2n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--rm2n9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--rm2n9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3141111f-6c21-4e2a-82c8-54c3b4d00c87", ResourceVersion:"988", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-rm2n9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8752eaf9e93", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:17.394121 env[1204]: 2025-11-01 00:54:17.333 [INFO][3779] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Namespace="calico-system" Pod="csi-node-driver-rm2n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:17.394121 env[1204]: 2025-11-01 00:54:17.334 [INFO][3779] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8752eaf9e93 ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Namespace="calico-system" Pod="csi-node-driver-rm2n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:17.394121 env[1204]: 2025-11-01 00:54:17.341 [INFO][3779] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Namespace="calico-system" Pod="csi-node-driver-rm2n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:17.394121 env[1204]: 2025-11-01 00:54:17.345 [INFO][3779] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Namespace="calico-system" Pod="csi-node-driver-rm2n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--rm2n9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--rm2n9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3141111f-6c21-4e2a-82c8-54c3b4d00c87", ResourceVersion:"988", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f", Pod:"csi-node-driver-rm2n9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8752eaf9e93", MAC:"ba:c6:41:fa:0c:25", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:17.394121 env[1204]: 2025-11-01 00:54:17.361 [INFO][3779] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f" Namespace="calico-system" Pod="csi-node-driver-rm2n9" WorkloadEndpoint="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.397000 audit: BPF prog-id=176 op=LOAD Nov 1 00:54:17.401000 audit[3920]: NETFILTER_CFG table=filter:110 family=2 entries=54 op=nft_register_chain pid=3920 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:17.401000 audit[3920]: SYSCALL arch=c000003e syscall=46 success=yes exit=24928 a0=3 a1=7ffdb181f530 a2=0 a3=7ffdb181f51c items=0 ppid=3370 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.401000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:17.401000 audit[3920]: NETFILTER_CFG table=filter:111 family=2 entries=2 op=nft_unregister_chain pid=3920 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:17.401000 audit[3920]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdb181f530 a2=0 a3=560fa84a1000 items=0 ppid=3370 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.401000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:17.401000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.401000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3863 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633363662636634653835333431646631666434623039316133313832 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3863 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633363662636634653835333431646631666434623039316133313832 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit: BPF prog-id=177 op=LOAD Nov 1 00:54:17.405000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000025650 items=0 ppid=3863 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633363662636634653835333431646631666434623039316133313832 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.405000 audit: BPF prog-id=178 op=LOAD Nov 1 00:54:17.405000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000025698 items=0 ppid=3863 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633363662636634653835333431646631666434623039316133313832 Nov 1 00:54:17.406000 audit: BPF prog-id=178 op=UNLOAD Nov 1 00:54:17.406000 audit: BPF prog-id=177 op=UNLOAD Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { perfmon } for pid=3886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit[3886]: AVC avc: denied { bpf } for pid=3886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.406000 audit: BPF prog-id=179 op=LOAD Nov 1 00:54:17.406000 audit[3886]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000025aa8 items=0 ppid=3863 pid=3886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633363662636634653835333431646631666434623039316133313832 Nov 1 00:54:17.408272 systemd-resolved[1137]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:54:17.426549 env[1204]: time="2025-11-01T00:54:17.426095771Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:54:17.426549 env[1204]: time="2025-11-01T00:54:17.426152327Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:54:17.426549 env[1204]: time="2025-11-01T00:54:17.426166053Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:54:17.426549 env[1204]: time="2025-11-01T00:54:17.426335941Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f pid=3934 runtime=io.containerd.runc.v2 Nov 1 00:54:17.447024 env[1204]: time="2025-11-01T00:54:17.446970412Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66556cbf54-ddvsr,Uid:775ebd68-6412-4090-9511-da6f685868a7,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682\"" Nov 1 00:54:17.453035 env[1204]: time="2025-11-01T00:54:17.451992128Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:54:17.453211 env[1204]: time="2025-11-01T00:54:17.453047611Z" level=info msg="StopPodSandbox for \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\"" Nov 1 00:54:17.462209 systemd[1]: Started cri-containerd-8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f.scope. Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.491000 audit: BPF prog-id=180 op=LOAD Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3934 pid=3942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623239393762653465343663633137663736623334363536373163 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3934 pid=3942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623239393762653465343663633137663736623334363536373163 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit: BPF prog-id=181 op=LOAD Nov 1 00:54:17.493000 audit[3942]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000097090 items=0 ppid=3934 pid=3942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623239393762653465343663633137663736623334363536373163 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit: BPF prog-id=182 op=LOAD Nov 1 00:54:17.493000 audit[3942]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000970d8 items=0 ppid=3934 pid=3942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623239393762653465343663633137663736623334363536373163 Nov 1 00:54:17.493000 audit: BPF prog-id=182 op=UNLOAD Nov 1 00:54:17.493000 audit: BPF prog-id=181 op=UNLOAD Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { perfmon } for pid=3942 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit[3942]: AVC avc: denied { bpf } for pid=3942 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:17.493000 audit: BPF prog-id=183 op=LOAD Nov 1 00:54:17.493000 audit[3942]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000974e8 items=0 ppid=3934 pid=3942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623239393762653465343663633137663736623334363536373163 Nov 1 00:54:17.495773 systemd-resolved[1137]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:54:17.510905 env[1204]: time="2025-11-01T00:54:17.510840348Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-rm2n9,Uid:3141111f-6c21-4e2a-82c8-54c3b4d00c87,Namespace:calico-system,Attempt:1,} returns sandbox id \"8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f\"" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.556 [INFO][3971] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.557 [INFO][3971] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" iface="eth0" netns="/var/run/netns/cni-dced9cf4-78aa-273b-3da9-3f1e4e13302c" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.557 [INFO][3971] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" iface="eth0" netns="/var/run/netns/cni-dced9cf4-78aa-273b-3da9-3f1e4e13302c" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.557 [INFO][3971] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" iface="eth0" netns="/var/run/netns/cni-dced9cf4-78aa-273b-3da9-3f1e4e13302c" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.557 [INFO][3971] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.557 [INFO][3971] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.596 [INFO][3994] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.596 [INFO][3994] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.597 [INFO][3994] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.611 [WARNING][3994] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.611 [INFO][3994] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.615 [INFO][3994] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:17.622225 env[1204]: 2025-11-01 00:54:17.617 [INFO][3971] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:17.623090 env[1204]: time="2025-11-01T00:54:17.623031526Z" level=info msg="TearDown network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\" successfully" Nov 1 00:54:17.623090 env[1204]: time="2025-11-01T00:54:17.623079425Z" level=info msg="StopPodSandbox for \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\" returns successfully" Nov 1 00:54:17.624277 env[1204]: time="2025-11-01T00:54:17.624219878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-58ddd67d6b-xlsdg,Uid:b11a6908-1d77-40ff-ac28-4badb8791eee,Namespace:calico-system,Attempt:1,}" Nov 1 00:54:17.667444 systemd-networkd[1024]: calicb60f9c2e43: Gained IPv6LL Nov 1 00:54:17.685018 kubelet[1949]: E1101 00:54:17.684582 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:17.692940 kubelet[1949]: E1101 00:54:17.692772 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-65cb786f6c-bk5pm" podUID="dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a" Nov 1 00:54:17.729000 audit[4018]: NETFILTER_CFG table=filter:112 family=2 entries=20 op=nft_register_rule pid=4018 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:17.729000 audit[4018]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc5d6e1710 a2=0 a3=7ffc5d6e16fc items=0 ppid=2055 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.729000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:17.740000 audit[4018]: NETFILTER_CFG table=nat:113 family=2 entries=14 op=nft_register_rule pid=4018 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:17.740000 audit[4018]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc5d6e1710 a2=0 a3=0 items=0 ppid=2055 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.740000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:17.776000 audit[4027]: NETFILTER_CFG table=filter:114 family=2 entries=17 op=nft_register_rule pid=4027 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:17.780529 env[1204]: time="2025-11-01T00:54:17.778886674Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:17.776000 audit[4027]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff967e72a0 a2=0 a3=7fff967e728c items=0 ppid=2055 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.776000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:17.783134 env[1204]: time="2025-11-01T00:54:17.781640518Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:54:17.783134 env[1204]: time="2025-11-01T00:54:17.782684228Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:54:17.783296 kubelet[1949]: E1101 00:54:17.781938 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:17.783296 kubelet[1949]: E1101 00:54:17.782000 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:17.783296 kubelet[1949]: E1101 00:54:17.782292 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hdc5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-66556cbf54-ddvsr_calico-apiserver(775ebd68-6412-4090-9511-da6f685868a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:17.784931 kubelet[1949]: E1101 00:54:17.784626 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:54:17.791000 audit[4027]: NETFILTER_CFG table=nat:115 family=2 entries=35 op=nft_register_chain pid=4027 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:17.791000 audit[4027]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff967e72a0 a2=0 a3=7fff967e728c items=0 ppid=2055 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.791000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:17.899612 systemd-networkd[1024]: cali0654ad06488: Link UP Nov 1 00:54:17.908978 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:54:17.909081 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0654ad06488: link becomes ready Nov 1 00:54:17.909500 systemd-networkd[1024]: cali0654ad06488: Gained carrier Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.715 [INFO][4003] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0 calico-kube-controllers-58ddd67d6b- calico-system b11a6908-1d77-40ff-ac28-4badb8791eee 1013 0 2025-11-01 00:53:53 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:58ddd67d6b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-58ddd67d6b-xlsdg eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali0654ad06488 [] [] }} ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Namespace="calico-system" Pod="calico-kube-controllers-58ddd67d6b-xlsdg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.716 [INFO][4003] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Namespace="calico-system" Pod="calico-kube-controllers-58ddd67d6b-xlsdg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.804 [INFO][4020] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" HandleID="k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.804 [INFO][4020] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" HandleID="k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000134650), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-58ddd67d6b-xlsdg", "timestamp":"2025-11-01 00:54:17.804043841 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.804 [INFO][4020] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.804 [INFO][4020] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.804 [INFO][4020] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.815 [INFO][4020] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.829 [INFO][4020] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.838 [INFO][4020] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.843 [INFO][4020] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.851 [INFO][4020] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.851 [INFO][4020] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.854 [INFO][4020] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330 Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.867 [INFO][4020] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.884 [INFO][4020] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.884 [INFO][4020] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" host="localhost" Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.884 [INFO][4020] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:17.942906 env[1204]: 2025-11-01 00:54:17.884 [INFO][4020] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" HandleID="k8s-pod-network.d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.945352 env[1204]: 2025-11-01 00:54:17.891 [INFO][4003] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Namespace="calico-system" Pod="calico-kube-controllers-58ddd67d6b-xlsdg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0", GenerateName:"calico-kube-controllers-58ddd67d6b-", Namespace:"calico-system", SelfLink:"", UID:"b11a6908-1d77-40ff-ac28-4badb8791eee", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"58ddd67d6b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-58ddd67d6b-xlsdg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0654ad06488", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:17.945352 env[1204]: 2025-11-01 00:54:17.891 [INFO][4003] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Namespace="calico-system" Pod="calico-kube-controllers-58ddd67d6b-xlsdg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.945352 env[1204]: 2025-11-01 00:54:17.891 [INFO][4003] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0654ad06488 ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Namespace="calico-system" Pod="calico-kube-controllers-58ddd67d6b-xlsdg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.945352 env[1204]: 2025-11-01 00:54:17.910 [INFO][4003] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Namespace="calico-system" Pod="calico-kube-controllers-58ddd67d6b-xlsdg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.945352 env[1204]: 2025-11-01 00:54:17.910 [INFO][4003] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Namespace="calico-system" Pod="calico-kube-controllers-58ddd67d6b-xlsdg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0", GenerateName:"calico-kube-controllers-58ddd67d6b-", Namespace:"calico-system", SelfLink:"", UID:"b11a6908-1d77-40ff-ac28-4badb8791eee", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"58ddd67d6b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330", Pod:"calico-kube-controllers-58ddd67d6b-xlsdg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0654ad06488", MAC:"0e:17:55:43:13:fb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:17.945352 env[1204]: 2025-11-01 00:54:17.934 [INFO][4003] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330" Namespace="calico-system" Pod="calico-kube-controllers-58ddd67d6b-xlsdg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:17.981000 audit[4051]: NETFILTER_CFG table=filter:116 family=2 entries=40 op=nft_register_chain pid=4051 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:17.981000 audit[4051]: SYSCALL arch=c000003e syscall=46 success=yes exit=20748 a0=3 a1=7fff93b65c50 a2=0 a3=7fff93b65c3c items=0 ppid=3370 pid=4051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:17.981000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:17.983597 env[1204]: time="2025-11-01T00:54:17.983479625Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:54:17.983597 env[1204]: time="2025-11-01T00:54:17.983543775Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:54:17.983855 env[1204]: time="2025-11-01T00:54:17.983559385Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:54:17.986289 env[1204]: time="2025-11-01T00:54:17.985201009Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330 pid=4046 runtime=io.containerd.runc.v2 Nov 1 00:54:18.023664 systemd[1]: Started cri-containerd-d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330.scope. Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.038000 audit: BPF prog-id=184 op=LOAD Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4046 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:18.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432373430303134353363663934653931316231396261636635373435 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4046 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:18.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432373430303134353363663934653931316231396261636635373435 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.041000 audit: BPF prog-id=185 op=LOAD Nov 1 00:54:18.041000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003d84d0 items=0 ppid=4046 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:18.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432373430303134353363663934653931316231396261636635373435 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit: BPF prog-id=186 op=LOAD Nov 1 00:54:18.042000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003d8518 items=0 ppid=4046 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:18.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432373430303134353363663934653931316231396261636635373435 Nov 1 00:54:18.042000 audit: BPF prog-id=186 op=UNLOAD Nov 1 00:54:18.042000 audit: BPF prog-id=185 op=UNLOAD Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:18.042000 audit: BPF prog-id=187 op=LOAD Nov 1 00:54:18.042000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d8928 items=0 ppid=4046 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:18.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432373430303134353363663934653931316231396261636635373435 Nov 1 00:54:18.045042 systemd-resolved[1137]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:54:18.084050 env[1204]: time="2025-11-01T00:54:18.083989877Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-58ddd67d6b-xlsdg,Uid:b11a6908-1d77-40ff-ac28-4badb8791eee,Namespace:calico-system,Attempt:1,} returns sandbox id \"d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330\"" Nov 1 00:54:18.118177 env[1204]: time="2025-11-01T00:54:18.118105620Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:18.119787 env[1204]: time="2025-11-01T00:54:18.119703822Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:54:18.120061 kubelet[1949]: E1101 00:54:18.120000 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:54:18.120168 kubelet[1949]: E1101 00:54:18.120065 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:54:18.120501 kubelet[1949]: E1101 00:54:18.120400 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gksjl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-rm2n9_calico-system(3141111f-6c21-4e2a-82c8-54c3b4d00c87): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:18.120853 env[1204]: time="2025-11-01T00:54:18.120509195Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:54:18.179554 systemd-networkd[1024]: vxlan.calico: Gained IPv6LL Nov 1 00:54:18.284111 systemd[1]: run-netns-cni\x2ddced9cf4\x2d78aa\x2d273b\x2d3da9\x2d3f1e4e13302c.mount: Deactivated successfully. Nov 1 00:54:18.432758 env[1204]: time="2025-11-01T00:54:18.432560403Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:18.454229 env[1204]: time="2025-11-01T00:54:18.454103314Z" level=info msg="StopPodSandbox for \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\"" Nov 1 00:54:18.454447 env[1204]: time="2025-11-01T00:54:18.454312758Z" level=info msg="StopPodSandbox for \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\"" Nov 1 00:54:18.627129 systemd-networkd[1024]: cali8752eaf9e93: Gained IPv6LL Nov 1 00:54:18.636014 env[1204]: time="2025-11-01T00:54:18.635923809Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:54:18.637268 kubelet[1949]: E1101 00:54:18.637171 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:54:18.637268 kubelet[1949]: E1101 00:54:18.637242 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:54:18.637760 kubelet[1949]: E1101 00:54:18.637610 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b7m9v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-58ddd67d6b-xlsdg_calico-system(b11a6908-1d77-40ff-ac28-4badb8791eee): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:18.638603 env[1204]: time="2025-11-01T00:54:18.638538441Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:54:18.638835 kubelet[1949]: E1101 00:54:18.638780 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:54:18.688991 kubelet[1949]: E1101 00:54:18.688192 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:18.690755 kubelet[1949]: E1101 00:54:18.690661 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:54:18.691126 kubelet[1949]: E1101 00:54:18.690973 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.669 [INFO][4103] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.670 [INFO][4103] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" iface="eth0" netns="/var/run/netns/cni-d5d43562-6ab4-8c85-50fa-5b6d1c95022a" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.671 [INFO][4103] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" iface="eth0" netns="/var/run/netns/cni-d5d43562-6ab4-8c85-50fa-5b6d1c95022a" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.671 [INFO][4103] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" iface="eth0" netns="/var/run/netns/cni-d5d43562-6ab4-8c85-50fa-5b6d1c95022a" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.671 [INFO][4103] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.671 [INFO][4103] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.705 [INFO][4124] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.705 [INFO][4124] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.705 [INFO][4124] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.720 [WARNING][4124] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.720 [INFO][4124] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.724 [INFO][4124] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:18.733542 env[1204]: 2025-11-01 00:54:18.730 [INFO][4103] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:18.739142 env[1204]: time="2025-11-01T00:54:18.739014685Z" level=info msg="TearDown network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\" successfully" Nov 1 00:54:18.739142 env[1204]: time="2025-11-01T00:54:18.739068686Z" level=info msg="StopPodSandbox for \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\" returns successfully" Nov 1 00:54:18.739142 env[1204]: time="2025-11-01T00:54:18.740598631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-dn8br,Uid:b624f4d1-eb8b-4a77-ad58-aac63293cc33,Namespace:kube-system,Attempt:1,}" Nov 1 00:54:18.741217 kubelet[1949]: E1101 00:54:18.739443 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:18.739756 systemd[1]: run-netns-cni\x2dd5d43562\x2d6ab4\x2d8c85\x2d50fa\x2d5b6d1c95022a.mount: Deactivated successfully. Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.658 [INFO][4102] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.658 [INFO][4102] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" iface="eth0" netns="/var/run/netns/cni-a96f9f4e-26be-a068-d3d9-70b7232b7306" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.658 [INFO][4102] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" iface="eth0" netns="/var/run/netns/cni-a96f9f4e-26be-a068-d3d9-70b7232b7306" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.658 [INFO][4102] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" iface="eth0" netns="/var/run/netns/cni-a96f9f4e-26be-a068-d3d9-70b7232b7306" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.659 [INFO][4102] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.659 [INFO][4102] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.717 [INFO][4118] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.717 [INFO][4118] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.724 [INFO][4118] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.737 [WARNING][4118] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.738 [INFO][4118] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.742 [INFO][4118] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:18.749647 env[1204]: 2025-11-01 00:54:18.746 [INFO][4102] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:18.756208 systemd[1]: run-netns-cni\x2da96f9f4e\x2d26be\x2da068\x2dd3d9\x2d70b7232b7306.mount: Deactivated successfully. Nov 1 00:54:18.760897 env[1204]: time="2025-11-01T00:54:18.760790304Z" level=info msg="TearDown network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\" successfully" Nov 1 00:54:18.761128 env[1204]: time="2025-11-01T00:54:18.761094405Z" level=info msg="StopPodSandbox for \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\" returns successfully" Nov 1 00:54:18.762289 env[1204]: time="2025-11-01T00:54:18.762237152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-jstvg,Uid:dfb0b1fe-4456-4e60-b863-aa837603af90,Namespace:calico-system,Attempt:1,}" Nov 1 00:54:18.772000 audit[4134]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=4134 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:18.772000 audit[4134]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff12dfbd40 a2=0 a3=7fff12dfbd2c items=0 ppid=2055 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:18.772000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:18.785000 audit[4134]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=4134 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:18.785000 audit[4134]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff12dfbd40 a2=0 a3=7fff12dfbd2c items=0 ppid=2055 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:18.785000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:18.955898 systemd-networkd[1024]: calibece136f2f3: Link UP Nov 1 00:54:18.962070 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:54:18.962547 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibece136f2f3: link becomes ready Nov 1 00:54:18.963098 systemd-networkd[1024]: calibece136f2f3: Gained carrier Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.852 [INFO][4135] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--dn8br-eth0 coredns-668d6bf9bc- kube-system b624f4d1-eb8b-4a77-ad58-aac63293cc33 1045 0 2025-11-01 00:53:40 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-dn8br eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calibece136f2f3 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Namespace="kube-system" Pod="coredns-668d6bf9bc-dn8br" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dn8br-" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.852 [INFO][4135] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Namespace="kube-system" Pod="coredns-668d6bf9bc-dn8br" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.891 [INFO][4165] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" HandleID="k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.892 [INFO][4165] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" HandleID="k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df590), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-dn8br", "timestamp":"2025-11-01 00:54:18.891752481 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.892 [INFO][4165] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.892 [INFO][4165] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.892 [INFO][4165] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.903 [INFO][4165] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.914 [INFO][4165] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.920 [INFO][4165] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.923 [INFO][4165] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.926 [INFO][4165] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.926 [INFO][4165] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.928 [INFO][4165] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98 Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.935 [INFO][4165] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.949 [INFO][4165] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.949 [INFO][4165] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" host="localhost" Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.949 [INFO][4165] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:18.987132 env[1204]: 2025-11-01 00:54:18.949 [INFO][4165] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" HandleID="k8s-pod-network.2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.988742 env[1204]: 2025-11-01 00:54:18.952 [INFO][4135] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Namespace="kube-system" Pod="coredns-668d6bf9bc-dn8br" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--dn8br-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b624f4d1-eb8b-4a77-ad58-aac63293cc33", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-dn8br", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibece136f2f3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:18.988742 env[1204]: 2025-11-01 00:54:18.952 [INFO][4135] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Namespace="kube-system" Pod="coredns-668d6bf9bc-dn8br" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.988742 env[1204]: 2025-11-01 00:54:18.952 [INFO][4135] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibece136f2f3 ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Namespace="kube-system" Pod="coredns-668d6bf9bc-dn8br" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.988742 env[1204]: 2025-11-01 00:54:18.963 [INFO][4135] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Namespace="kube-system" Pod="coredns-668d6bf9bc-dn8br" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:18.988742 env[1204]: 2025-11-01 00:54:18.963 [INFO][4135] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Namespace="kube-system" Pod="coredns-668d6bf9bc-dn8br" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--dn8br-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b624f4d1-eb8b-4a77-ad58-aac63293cc33", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98", Pod:"coredns-668d6bf9bc-dn8br", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibece136f2f3", MAC:"ae:28:3a:6d:c0:77", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:18.988742 env[1204]: 2025-11-01 00:54:18.976 [INFO][4135] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98" Namespace="kube-system" Pod="coredns-668d6bf9bc-dn8br" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:19.003237 env[1204]: time="2025-11-01T00:54:19.003060364Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:54:19.003237 env[1204]: time="2025-11-01T00:54:19.003118934Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:54:19.003237 env[1204]: time="2025-11-01T00:54:19.003132460Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:54:19.003517 env[1204]: time="2025-11-01T00:54:19.003357222Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98 pid=4201 runtime=io.containerd.runc.v2 Nov 1 00:54:19.007000 audit[4210]: NETFILTER_CFG table=filter:119 family=2 entries=40 op=nft_register_chain pid=4210 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:19.007000 audit[4210]: SYSCALL arch=c000003e syscall=46 success=yes exit=20328 a0=3 a1=7ffd20d812f0 a2=0 a3=7ffd20d812dc items=0 ppid=3370 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.007000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:19.011153 systemd-networkd[1024]: calicf9d305e155: Gained IPv6LL Nov 1 00:54:19.030738 systemd[1]: Started cri-containerd-2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98.scope. Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit: BPF prog-id=188 op=LOAD Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=4201 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356632393030636432306434643232303138373263613430313463 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=c items=0 ppid=4201 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356632393030636432306434643232303138373263613430313463 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit: BPF prog-id=189 op=LOAD Nov 1 00:54:19.056000 audit[4211]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0003824e0 items=0 ppid=4201 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356632393030636432306434643232303138373263613430313463 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit: BPF prog-id=190 op=LOAD Nov 1 00:54:19.056000 audit[4211]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c000382528 items=0 ppid=4201 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356632393030636432306434643232303138373263613430313463 Nov 1 00:54:19.056000 audit: BPF prog-id=190 op=UNLOAD Nov 1 00:54:19.056000 audit: BPF prog-id=189 op=UNLOAD Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { perfmon } for pid=4211 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit[4211]: AVC avc: denied { bpf } for pid=4211 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.056000 audit: BPF prog-id=191 op=LOAD Nov 1 00:54:19.056000 audit[4211]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c000382938 items=0 ppid=4201 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356632393030636432306434643232303138373263613430313463 Nov 1 00:54:19.059908 systemd-resolved[1137]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:54:19.074128 env[1204]: time="2025-11-01T00:54:19.074050889Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:19.079970 env[1204]: time="2025-11-01T00:54:19.079882554Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:54:19.080643 kubelet[1949]: E1101 00:54:19.080544 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:54:19.080753 kubelet[1949]: E1101 00:54:19.080666 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:54:19.081006 kubelet[1949]: E1101 00:54:19.080884 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gksjl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-rm2n9_calico-system(3141111f-6c21-4e2a-82c8-54c3b4d00c87): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:19.082851 kubelet[1949]: E1101 00:54:19.082150 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:19.082911 systemd-networkd[1024]: cali37bbde76d7b: Link UP Nov 1 00:54:19.086893 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali37bbde76d7b: link becomes ready Nov 1 00:54:19.086300 systemd-networkd[1024]: cali37bbde76d7b: Gained carrier Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:18.864 [INFO][4149] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--666569f655--jstvg-eth0 goldmane-666569f655- calico-system dfb0b1fe-4456-4e60-b863-aa837603af90 1044 0 2025-11-01 00:53:51 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-666569f655-jstvg eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali37bbde76d7b [] [] }} ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Namespace="calico-system" Pod="goldmane-666569f655-jstvg" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--jstvg-" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:18.864 [INFO][4149] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Namespace="calico-system" Pod="goldmane-666569f655-jstvg" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:18.915 [INFO][4173] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" HandleID="k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:18.916 [INFO][4173] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" HandleID="k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002518d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-666569f655-jstvg", "timestamp":"2025-11-01 00:54:18.915775133 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:18.916 [INFO][4173] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:18.949 [INFO][4173] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:18.949 [INFO][4173] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.005 [INFO][4173] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.016 [INFO][4173] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.026 [INFO][4173] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.029 [INFO][4173] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.035 [INFO][4173] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.035 [INFO][4173] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.040 [INFO][4173] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3 Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.056 [INFO][4173] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.074 [INFO][4173] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.074 [INFO][4173] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" host="localhost" Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.074 [INFO][4173] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:19.112458 env[1204]: 2025-11-01 00:54:19.074 [INFO][4173] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" HandleID="k8s-pod-network.7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:19.113346 env[1204]: 2025-11-01 00:54:19.078 [INFO][4149] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Namespace="calico-system" Pod="goldmane-666569f655-jstvg" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--jstvg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--jstvg-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"dfb0b1fe-4456-4e60-b863-aa837603af90", ResourceVersion:"1044", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-666569f655-jstvg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali37bbde76d7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:19.113346 env[1204]: 2025-11-01 00:54:19.078 [INFO][4149] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Namespace="calico-system" Pod="goldmane-666569f655-jstvg" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:19.113346 env[1204]: 2025-11-01 00:54:19.078 [INFO][4149] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali37bbde76d7b ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Namespace="calico-system" Pod="goldmane-666569f655-jstvg" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:19.113346 env[1204]: 2025-11-01 00:54:19.086 [INFO][4149] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Namespace="calico-system" Pod="goldmane-666569f655-jstvg" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:19.113346 env[1204]: 2025-11-01 00:54:19.086 [INFO][4149] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Namespace="calico-system" Pod="goldmane-666569f655-jstvg" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--jstvg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--jstvg-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"dfb0b1fe-4456-4e60-b863-aa837603af90", ResourceVersion:"1044", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3", Pod:"goldmane-666569f655-jstvg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali37bbde76d7b", MAC:"e2:76:8c:f0:58:9c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:19.113346 env[1204]: 2025-11-01 00:54:19.107 [INFO][4149] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3" Namespace="calico-system" Pod="goldmane-666569f655-jstvg" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:19.113945 env[1204]: time="2025-11-01T00:54:19.112755845Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-dn8br,Uid:b624f4d1-eb8b-4a77-ad58-aac63293cc33,Namespace:kube-system,Attempt:1,} returns sandbox id \"2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98\"" Nov 1 00:54:19.115126 kubelet[1949]: E1101 00:54:19.115080 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:19.117419 env[1204]: time="2025-11-01T00:54:19.117343483Z" level=info msg="CreateContainer within sandbox \"2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:54:19.131000 audit[4252]: NETFILTER_CFG table=filter:120 family=2 entries=56 op=nft_register_chain pid=4252 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:19.135321 env[1204]: time="2025-11-01T00:54:19.135190639Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:54:19.135321 env[1204]: time="2025-11-01T00:54:19.135312247Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:54:19.135473 env[1204]: time="2025-11-01T00:54:19.135344468Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:54:19.131000 audit[4252]: SYSCALL arch=c000003e syscall=46 success=yes exit=28728 a0=3 a1=7ffdd61191e0 a2=0 a3=7ffdd61191cc items=0 ppid=3370 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.131000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:19.135782 env[1204]: time="2025-11-01T00:54:19.135584429Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3 pid=4251 runtime=io.containerd.runc.v2 Nov 1 00:54:19.155614 env[1204]: time="2025-11-01T00:54:19.155486624Z" level=info msg="CreateContainer within sandbox \"2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"d284cffd2ba8168d54157f5a03b569c12fce7b961f8d6dbfda9d229110902fad\"" Nov 1 00:54:19.159321 systemd[1]: Started cri-containerd-7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3.scope. Nov 1 00:54:19.160788 env[1204]: time="2025-11-01T00:54:19.160737038Z" level=info msg="StartContainer for \"d284cffd2ba8168d54157f5a03b569c12fce7b961f8d6dbfda9d229110902fad\"" Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.177000 audit: BPF prog-id=192 op=LOAD Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4251 pid=4262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.182546 systemd[1]: Started cri-containerd-d284cffd2ba8168d54157f5a03b569c12fce7b961f8d6dbfda9d229110902fad.scope. Nov 1 00:54:19.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761343134663730383863376534383263633566323735623633343633 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4251 pid=4262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761343134663730383863376534383263633566323735623633343633 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit: BPF prog-id=193 op=LOAD Nov 1 00:54:19.179000 audit[4262]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d4d70 items=0 ppid=4251 pid=4262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761343134663730383863376534383263633566323735623633343633 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit: BPF prog-id=194 op=LOAD Nov 1 00:54:19.179000 audit[4262]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d4db8 items=0 ppid=4251 pid=4262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761343134663730383863376534383263633566323735623633343633 Nov 1 00:54:19.179000 audit: BPF prog-id=194 op=UNLOAD Nov 1 00:54:19.179000 audit: BPF prog-id=193 op=UNLOAD Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { perfmon } for pid=4262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit[4262]: AVC avc: denied { bpf } for pid=4262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.179000 audit: BPF prog-id=195 op=LOAD Nov 1 00:54:19.179000 audit[4262]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d51c8 items=0 ppid=4251 pid=4262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761343134663730383863376534383263633566323735623633343633 Nov 1 00:54:19.186174 systemd-resolved[1137]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.197000 audit: BPF prog-id=196 op=LOAD Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4201 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432383463666664326261383136386435343135376635613033623536 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4201 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432383463666664326261383136386435343135376635613033623536 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.199000 audit: BPF prog-id=197 op=LOAD Nov 1 00:54:19.199000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003883a0 items=0 ppid=4201 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432383463666664326261383136386435343135376635613033623536 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.200000 audit: BPF prog-id=198 op=LOAD Nov 1 00:54:19.200000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003883e8 items=0 ppid=4201 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432383463666664326261383136386435343135376635613033623536 Nov 1 00:54:19.201000 audit: BPF prog-id=198 op=UNLOAD Nov 1 00:54:19.201000 audit: BPF prog-id=197 op=UNLOAD Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:19.202000 audit: BPF prog-id=199 op=LOAD Nov 1 00:54:19.202000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003887f8 items=0 ppid=4201 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432383463666664326261383136386435343135376635613033623536 Nov 1 00:54:19.220623 env[1204]: time="2025-11-01T00:54:19.220475915Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-jstvg,Uid:dfb0b1fe-4456-4e60-b863-aa837603af90,Namespace:calico-system,Attempt:1,} returns sandbox id \"7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3\"" Nov 1 00:54:19.227454 env[1204]: time="2025-11-01T00:54:19.227414199Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:54:19.236069 env[1204]: time="2025-11-01T00:54:19.236016829Z" level=info msg="StartContainer for \"d284cffd2ba8168d54157f5a03b569c12fce7b961f8d6dbfda9d229110902fad\" returns successfully" Nov 1 00:54:19.252000 audit[4298]: AVC avc: denied { getattr } for pid=4298 comm="coredns" path="cgroup:[4026532693]" dev="nsfs" ino=4026532693 scontext=system_u:system_r:svirt_lxc_net_t:s0:c2,c824 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:54:19.252000 audit[4298]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c0000ccd38 a3=0 items=0 ppid=4201 pid=4298 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c2,c824 key=(null) Nov 1 00:54:19.252000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:54:19.453472 env[1204]: time="2025-11-01T00:54:19.453416320Z" level=info msg="StopPodSandbox for \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\"" Nov 1 00:54:19.539341 env[1204]: time="2025-11-01T00:54:19.539240819Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:19.541152 env[1204]: time="2025-11-01T00:54:19.541093069Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:54:19.541585 kubelet[1949]: E1101 00:54:19.541520 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:54:19.541675 kubelet[1949]: E1101 00:54:19.541588 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:54:19.541891 kubelet[1949]: E1101 00:54:19.541780 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-qppwn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-jstvg_calico-system(dfb0b1fe-4456-4e60-b863-aa837603af90): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:19.544263 kubelet[1949]: E1101 00:54:19.543237 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.525 [INFO][4337] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.525 [INFO][4337] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" iface="eth0" netns="/var/run/netns/cni-f1721f23-9dd0-ff0c-01a3-6cb7e4b45695" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.525 [INFO][4337] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" iface="eth0" netns="/var/run/netns/cni-f1721f23-9dd0-ff0c-01a3-6cb7e4b45695" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.525 [INFO][4337] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" iface="eth0" netns="/var/run/netns/cni-f1721f23-9dd0-ff0c-01a3-6cb7e4b45695" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.525 [INFO][4337] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.525 [INFO][4337] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.555 [INFO][4345] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.555 [INFO][4345] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.556 [INFO][4345] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.566 [WARNING][4345] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.566 [INFO][4345] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.572 [INFO][4345] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:19.579760 env[1204]: 2025-11-01 00:54:19.575 [INFO][4337] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:19.583194 systemd[1]: run-netns-cni\x2df1721f23\x2d9dd0\x2dff0c\x2d01a3\x2d6cb7e4b45695.mount: Deactivated successfully. Nov 1 00:54:19.583613 env[1204]: time="2025-11-01T00:54:19.583477046Z" level=info msg="TearDown network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\" successfully" Nov 1 00:54:19.583613 env[1204]: time="2025-11-01T00:54:19.583544453Z" level=info msg="StopPodSandbox for \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\" returns successfully" Nov 1 00:54:19.584346 env[1204]: time="2025-11-01T00:54:19.584315160Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66556cbf54-7pxt9,Uid:85ec62b7-a3b1-4f12-a8e9-67f72f8011d9,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:54:19.699527 kubelet[1949]: E1101 00:54:19.698497 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:19.704550 kubelet[1949]: E1101 00:54:19.703275 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:19.707540 kubelet[1949]: E1101 00:54:19.707467 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:54:19.708197 kubelet[1949]: E1101 00:54:19.708155 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:54:19.708283 kubelet[1949]: E1101 00:54:19.708216 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:19.748587 kubelet[1949]: I1101 00:54:19.748400 1949 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-dn8br" podStartSLOduration=39.748376096 podStartE2EDuration="39.748376096s" podCreationTimestamp="2025-11-01 00:53:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:54:19.724799298 +0000 UTC m=+47.342366124" watchObservedRunningTime="2025-11-01 00:54:19.748376096 +0000 UTC m=+47.365942902" Nov 1 00:54:19.763889 kernel: kauditd_printk_skb: 1119 callbacks suppressed Nov 1 00:54:19.764054 kernel: audit: type=1325 audit(1761958459.754:1328): table=filter:121 family=2 entries=14 op=nft_register_rule pid=4376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:19.754000 audit[4376]: NETFILTER_CFG table=filter:121 family=2 entries=14 op=nft_register_rule pid=4376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:19.754000 audit[4376]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcd95e2860 a2=0 a3=7ffcd95e284c items=0 ppid=2055 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.779080 kernel: audit: type=1300 audit(1761958459.754:1328): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcd95e2860 a2=0 a3=7ffcd95e284c items=0 ppid=2055 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.754000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:19.794752 kernel: audit: type=1327 audit(1761958459.754:1328): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:19.794919 kernel: audit: type=1325 audit(1761958459.780:1329): table=nat:122 family=2 entries=44 op=nft_register_rule pid=4376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:19.780000 audit[4376]: NETFILTER_CFG table=nat:122 family=2 entries=44 op=nft_register_rule pid=4376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:19.780000 audit[4376]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffcd95e2860 a2=0 a3=7ffcd95e284c items=0 ppid=2055 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.816217 kernel: audit: type=1300 audit(1761958459.780:1329): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffcd95e2860 a2=0 a3=7ffcd95e284c items=0 ppid=2055 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.780000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:19.824026 kernel: audit: type=1327 audit(1761958459.780:1329): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:19.837691 systemd[1]: Started sshd@9-10.0.0.5:22-10.0.0.1:53786.service. Nov 1 00:54:19.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.5:22-10.0.0.1:53786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:19.850856 kernel: audit: type=1130 audit(1761958459.837:1330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.5:22-10.0.0.1:53786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:19.884247 systemd-networkd[1024]: caliee6b250cf2e: Link UP Nov 1 00:54:19.889070 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliee6b250cf2e: link becomes ready Nov 1 00:54:19.888771 systemd-networkd[1024]: caliee6b250cf2e: Gained carrier Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.668 [INFO][4352] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0 calico-apiserver-66556cbf54- calico-apiserver 85ec62b7-a3b1-4f12-a8e9-67f72f8011d9 1075 0 2025-11-01 00:53:49 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:66556cbf54 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-66556cbf54-7pxt9 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliee6b250cf2e [] [] }} ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-7pxt9" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.668 [INFO][4352] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-7pxt9" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.727 [INFO][4369] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" HandleID="k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.728 [INFO][4369] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" HandleID="k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00034d590), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-66556cbf54-7pxt9", "timestamp":"2025-11-01 00:54:19.72787206 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.728 [INFO][4369] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.728 [INFO][4369] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.728 [INFO][4369] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.754 [INFO][4369] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.795 [INFO][4369] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.812 [INFO][4369] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.822 [INFO][4369] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.831 [INFO][4369] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.831 [INFO][4369] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.844 [INFO][4369] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.858 [INFO][4369] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.875 [INFO][4369] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.875 [INFO][4369] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" host="localhost" Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.875 [INFO][4369] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:19.920428 env[1204]: 2025-11-01 00:54:19.875 [INFO][4369] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" HandleID="k8s-pod-network.48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.921337 env[1204]: 2025-11-01 00:54:19.882 [INFO][4352] cni-plugin/k8s.go 418: Populated endpoint ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-7pxt9" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0", GenerateName:"calico-apiserver-66556cbf54-", Namespace:"calico-apiserver", SelfLink:"", UID:"85ec62b7-a3b1-4f12-a8e9-67f72f8011d9", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66556cbf54", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-66556cbf54-7pxt9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliee6b250cf2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:19.921337 env[1204]: 2025-11-01 00:54:19.882 [INFO][4352] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-7pxt9" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.921337 env[1204]: 2025-11-01 00:54:19.882 [INFO][4352] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliee6b250cf2e ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-7pxt9" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.921337 env[1204]: 2025-11-01 00:54:19.884 [INFO][4352] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-7pxt9" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.921337 env[1204]: 2025-11-01 00:54:19.884 [INFO][4352] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-7pxt9" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0", GenerateName:"calico-apiserver-66556cbf54-", Namespace:"calico-apiserver", SelfLink:"", UID:"85ec62b7-a3b1-4f12-a8e9-67f72f8011d9", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66556cbf54", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a", Pod:"calico-apiserver-66556cbf54-7pxt9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliee6b250cf2e", MAC:"ba:4c:80:50:22:77", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:19.921337 env[1204]: 2025-11-01 00:54:19.917 [INFO][4352] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a" Namespace="calico-apiserver" Pod="calico-apiserver-66556cbf54-7pxt9" WorkloadEndpoint="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:19.921000 audit[4378]: USER_ACCT pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:19.923688 sshd[4378]: Accepted publickey for core from 10.0.0.1 port 53786 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:19.922000 audit[4378]: CRED_ACQ pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:19.936957 sshd[4378]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:19.939867 env[1204]: time="2025-11-01T00:54:19.939578867Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:54:19.939867 env[1204]: time="2025-11-01T00:54:19.939662875Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:54:19.939867 env[1204]: time="2025-11-01T00:54:19.939679336Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:54:19.942641 env[1204]: time="2025-11-01T00:54:19.940367348Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a pid=4395 runtime=io.containerd.runc.v2 Nov 1 00:54:19.957873 kernel: audit: type=1101 audit(1761958459.921:1331): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:19.958000 kernel: audit: type=1103 audit(1761958459.922:1332): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:19.922000 audit[4378]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5bccb6a0 a2=3 a3=0 items=0 ppid=1 pid=4378 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.922000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:19.963994 kernel: audit: type=1006 audit(1761958459.922:1333): pid=4378 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:54:19.963000 audit[4406]: NETFILTER_CFG table=filter:123 family=2 entries=53 op=nft_register_chain pid=4406 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:54:19.963000 audit[4406]: SYSCALL arch=c000003e syscall=46 success=yes exit=26624 a0=3 a1=7ffd789ef3e0 a2=0 a3=7ffd789ef3cc items=0 ppid=3370 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:19.963000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:54:19.970987 systemd-networkd[1024]: cali0654ad06488: Gained IPv6LL Nov 1 00:54:19.988928 systemd[1]: Started cri-containerd-48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a.scope. Nov 1 00:54:19.990827 systemd-logind[1185]: New session 10 of user core. Nov 1 00:54:19.991421 systemd[1]: Started session-10.scope. Nov 1 00:54:19.999000 audit[4378]: USER_START pid=4378 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:20.004000 audit[4423]: CRED_ACQ pid=4423 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit: BPF prog-id=200 op=LOAD Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4395 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:20.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835313462636139303531646539323837643039626439643830 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4395 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:20.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835313462636139303531646539323837643039626439643830 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.009000 audit: BPF prog-id=201 op=LOAD Nov 1 00:54:20.009000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003bb070 items=0 ppid=4395 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:20.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835313462636139303531646539323837643039626439643830 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit: BPF prog-id=202 op=LOAD Nov 1 00:54:20.010000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003bb0b8 items=0 ppid=4395 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:20.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835313462636139303531646539323837643039626439643830 Nov 1 00:54:20.010000 audit: BPF prog-id=202 op=UNLOAD Nov 1 00:54:20.010000 audit: BPF prog-id=201 op=UNLOAD Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { perfmon } for pid=4405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit[4405]: AVC avc: denied { bpf } for pid=4405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:54:20.010000 audit: BPF prog-id=203 op=LOAD Nov 1 00:54:20.010000 audit[4405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003bb4c8 items=0 ppid=4395 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:20.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438663835313462636139303531646539323837643039626439643830 Nov 1 00:54:20.013084 systemd-resolved[1137]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:54:20.038988 systemd-networkd[1024]: calibece136f2f3: Gained IPv6LL Nov 1 00:54:20.085409 env[1204]: time="2025-11-01T00:54:20.079206961Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66556cbf54-7pxt9,Uid:85ec62b7-a3b1-4f12-a8e9-67f72f8011d9,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a\"" Nov 1 00:54:20.089418 env[1204]: time="2025-11-01T00:54:20.087233106Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:54:20.250534 sshd[4378]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:20.252000 audit[4378]: USER_END pid=4378 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:20.252000 audit[4378]: CRED_DISP pid=4378 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:20.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.5:22-10.0.0.1:53786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:20.256942 systemd[1]: sshd@9-10.0.0.5:22-10.0.0.1:53786.service: Deactivated successfully. Nov 1 00:54:20.257859 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:54:20.258549 systemd-logind[1185]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:54:20.261065 systemd-logind[1185]: Removed session 10. Nov 1 00:54:20.406403 env[1204]: time="2025-11-01T00:54:20.406265189Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:20.484047 env[1204]: time="2025-11-01T00:54:20.483972476Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:54:20.487652 kubelet[1949]: E1101 00:54:20.484709 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:20.487652 kubelet[1949]: E1101 00:54:20.484770 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:20.487652 kubelet[1949]: E1101 00:54:20.484942 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sqpkt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-66556cbf54-7pxt9_calico-apiserver(85ec62b7-a3b1-4f12-a8e9-67f72f8011d9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:20.487652 kubelet[1949]: E1101 00:54:20.486301 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:54:20.675773 systemd-networkd[1024]: cali37bbde76d7b: Gained IPv6LL Nov 1 00:54:20.707027 kubelet[1949]: E1101 00:54:20.706997 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:20.708285 kubelet[1949]: E1101 00:54:20.708262 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:54:20.708520 kubelet[1949]: E1101 00:54:20.708477 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:54:20.760000 audit[4442]: NETFILTER_CFG table=filter:124 family=2 entries=14 op=nft_register_rule pid=4442 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:20.760000 audit[4442]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffead145fe0 a2=0 a3=7ffead145fcc items=0 ppid=2055 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:20.760000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:20.788000 audit[4442]: NETFILTER_CFG table=nat:125 family=2 entries=56 op=nft_register_chain pid=4442 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:54:20.788000 audit[4442]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffead145fe0 a2=0 a3=7ffead145fcc items=0 ppid=2055 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:20.788000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:54:21.571463 systemd-networkd[1024]: caliee6b250cf2e: Gained IPv6LL Nov 1 00:54:21.712431 kubelet[1949]: E1101 00:54:21.712376 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:21.713082 kubelet[1949]: E1101 00:54:21.713050 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:54:25.258427 systemd[1]: Started sshd@10-10.0.0.5:22-10.0.0.1:50394.service. Nov 1 00:54:25.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.5:22-10.0.0.1:50394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:25.260609 kernel: kauditd_printk_skb: 73 callbacks suppressed Nov 1 00:54:25.260753 kernel: audit: type=1130 audit(1761958465.256:1360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.5:22-10.0.0.1:50394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:25.300000 audit[4454]: USER_ACCT pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.302586 sshd[4454]: Accepted publickey for core from 10.0.0.1 port 50394 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:25.310620 sshd[4454]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:25.308000 audit[4454]: CRED_ACQ pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.317654 systemd-logind[1185]: New session 11 of user core. Nov 1 00:54:25.318858 systemd[1]: Started session-11.scope. Nov 1 00:54:25.319853 kernel: audit: type=1101 audit(1761958465.300:1361): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.319923 kernel: audit: type=1103 audit(1761958465.308:1362): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.326722 kernel: audit: type=1006 audit(1761958465.308:1363): pid=4454 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Nov 1 00:54:25.308000 audit[4454]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0fca59c0 a2=3 a3=0 items=0 ppid=1 pid=4454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:25.308000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:25.338421 kernel: audit: type=1300 audit(1761958465.308:1363): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0fca59c0 a2=3 a3=0 items=0 ppid=1 pid=4454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:25.338600 kernel: audit: type=1327 audit(1761958465.308:1363): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:25.338654 kernel: audit: type=1105 audit(1761958465.327:1364): pid=4454 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.327000 audit[4454]: USER_START pid=4454 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.347865 kernel: audit: type=1103 audit(1761958465.331:1365): pid=4456 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.331000 audit[4456]: CRED_ACQ pid=4456 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.797893 sshd[4454]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:25.800274 systemd[1]: Started sshd@11-10.0.0.5:22-10.0.0.1:50406.service. Nov 1 00:54:25.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.5:22-10.0.0.1:50406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:25.805410 systemd[1]: sshd@10-10.0.0.5:22-10.0.0.1:50394.service: Deactivated successfully. Nov 1 00:54:25.806547 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:54:25.809499 systemd-logind[1185]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:54:25.810594 systemd-logind[1185]: Removed session 11. Nov 1 00:54:25.824470 kernel: audit: type=1130 audit(1761958465.799:1366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.5:22-10.0.0.1:50406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:25.824720 kernel: audit: type=1106 audit(1761958465.800:1367): pid=4454 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.800000 audit[4454]: USER_END pid=4454 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.802000 audit[4454]: CRED_DISP pid=4454 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.5:22-10.0.0.1:50394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:25.888165 sshd[4467]: Accepted publickey for core from 10.0.0.1 port 50406 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:25.886000 audit[4467]: USER_ACCT pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.886000 audit[4467]: CRED_ACQ pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.886000 audit[4467]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7d7e0380 a2=3 a3=0 items=0 ppid=1 pid=4467 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:25.886000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:25.890092 sshd[4467]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:25.897450 systemd-logind[1185]: New session 12 of user core. Nov 1 00:54:25.898709 systemd[1]: Started session-12.scope. Nov 1 00:54:25.910000 audit[4467]: USER_START pid=4467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:25.912000 audit[4470]: CRED_ACQ pid=4470 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.348422 sshd[4467]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:26.349000 audit[4467]: USER_END pid=4467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.352000 audit[4467]: CRED_DISP pid=4467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.355854 systemd[1]: Started sshd@12-10.0.0.5:22-10.0.0.1:50414.service. Nov 1 00:54:26.356460 systemd[1]: sshd@11-10.0.0.5:22-10.0.0.1:50406.service: Deactivated successfully. Nov 1 00:54:26.358352 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:54:26.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.5:22-10.0.0.1:50414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:26.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.5:22-10.0.0.1:50406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:26.364080 systemd-logind[1185]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:54:26.374885 systemd-logind[1185]: Removed session 12. Nov 1 00:54:26.424000 audit[4479]: USER_ACCT pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.426990 sshd[4479]: Accepted publickey for core from 10.0.0.1 port 50414 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:26.432000 audit[4479]: CRED_ACQ pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.432000 audit[4479]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff65c37a30 a2=3 a3=0 items=0 ppid=1 pid=4479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:26.432000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:26.434425 sshd[4479]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:26.450985 systemd[1]: Started session-13.scope. Nov 1 00:54:26.453737 systemd-logind[1185]: New session 13 of user core. Nov 1 00:54:26.465000 audit[4479]: USER_START pid=4479 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.465000 audit[4482]: CRED_ACQ pid=4482 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.707897 sshd[4479]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:26.708000 audit[4479]: USER_END pid=4479 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.708000 audit[4479]: CRED_DISP pid=4479 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:26.715960 systemd[1]: sshd@12-10.0.0.5:22-10.0.0.1:50414.service: Deactivated successfully. Nov 1 00:54:26.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.5:22-10.0.0.1:50414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:26.716964 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:54:26.727037 systemd-logind[1185]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:54:26.740667 systemd-logind[1185]: Removed session 13. Nov 1 00:54:29.455139 env[1204]: time="2025-11-01T00:54:29.454802050Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:54:29.663000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:29.663000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:29.663000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002416bd0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:54:29.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:54:29.663000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010dd660 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:54:29.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:54:29.935000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:29.935000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c01456b880 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:54:29.935000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:54:29.935000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:29.935000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0146473e0 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:54:29.935000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:54:29.959000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:29.959000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c014c32f90 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:54:29.959000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:54:29.961000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:29.961000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c014b0abd0 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:54:29.961000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:54:29.959000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:29.959000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c014cac080 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:54:29.959000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:54:29.986000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:29.986000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c014647410 a2=fc6 a3=0 items=0 ppid=1677 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c551 key=(null) Nov 1 00:54:29.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E35002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Nov 1 00:54:29.999097 env[1204]: time="2025-11-01T00:54:29.997391308Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:30.041911 env[1204]: time="2025-11-01T00:54:30.041783117Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:54:30.042140 kubelet[1949]: E1101 00:54:30.042079 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:54:30.042140 kubelet[1949]: E1101 00:54:30.042133 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:54:30.042553 kubelet[1949]: E1101 00:54:30.042297 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:792c0a11335e437284b3c719225e7f42,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-cvxk6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-65cb786f6c-bk5pm_calico-system(dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:30.044995 env[1204]: time="2025-11-01T00:54:30.044700733Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:54:30.370168 env[1204]: time="2025-11-01T00:54:30.370085505Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:30.413150 env[1204]: time="2025-11-01T00:54:30.413008617Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:54:30.413390 kubelet[1949]: E1101 00:54:30.413345 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:54:30.413462 kubelet[1949]: E1101 00:54:30.413411 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:54:30.414060 kubelet[1949]: E1101 00:54:30.413550 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cvxk6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-65cb786f6c-bk5pm_calico-system(dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:30.416065 kubelet[1949]: E1101 00:54:30.415039 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-65cb786f6c-bk5pm" podUID="dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a" Nov 1 00:54:31.454658 env[1204]: time="2025-11-01T00:54:31.454574171Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:54:31.714197 systemd[1]: Started sshd@13-10.0.0.5:22-10.0.0.1:57372.service. Nov 1 00:54:31.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.5:22-10.0.0.1:57372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:31.716167 kernel: kauditd_printk_skb: 47 callbacks suppressed Nov 1 00:54:31.716242 kernel: audit: type=1130 audit(1761958471.712:1395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.5:22-10.0.0.1:57372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:31.754051 env[1204]: time="2025-11-01T00:54:31.753981126Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:31.755469 env[1204]: time="2025-11-01T00:54:31.755372888Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:54:31.755996 kubelet[1949]: E1101 00:54:31.755927 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:54:31.756599 kubelet[1949]: E1101 00:54:31.755995 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:54:31.756653 env[1204]: time="2025-11-01T00:54:31.756429070Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:54:31.757097 kubelet[1949]: E1101 00:54:31.756998 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b7m9v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-58ddd67d6b-xlsdg_calico-system(b11a6908-1d77-40ff-ac28-4badb8791eee): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:31.758757 kubelet[1949]: E1101 00:54:31.758715 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:54:31.765000 audit[4501]: USER_ACCT pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.767359 sshd[4501]: Accepted publickey for core from 10.0.0.1 port 57372 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:31.775102 sshd[4501]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:31.785146 systemd[1]: Started session-14.scope. Nov 1 00:54:31.789254 kernel: audit: type=1101 audit(1761958471.765:1396): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.789431 kernel: audit: type=1103 audit(1761958471.772:1397): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.772000 audit[4501]: CRED_ACQ pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.789304 systemd-logind[1185]: New session 14 of user core. Nov 1 00:54:31.805942 kernel: audit: type=1006 audit(1761958471.772:1398): pid=4501 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Nov 1 00:54:31.806074 kernel: audit: type=1300 audit(1761958471.772:1398): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2b338d70 a2=3 a3=0 items=0 ppid=1 pid=4501 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:31.772000 audit[4501]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2b338d70 a2=3 a3=0 items=0 ppid=1 pid=4501 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:31.815424 kernel: audit: type=1327 audit(1761958471.772:1398): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:31.772000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:31.800000 audit[4501]: USER_START pid=4501 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.828341 kernel: audit: type=1105 audit(1761958471.800:1399): pid=4501 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.828513 kernel: audit: type=1103 audit(1761958471.801:1400): pid=4503 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.801000 audit[4503]: CRED_ACQ pid=4503 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.978988 sshd[4501]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:31.981000 audit[4501]: USER_END pid=4501 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.999795 kernel: audit: type=1106 audit(1761958471.981:1401): pid=4501 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.999969 kernel: audit: type=1104 audit(1761958471.981:1402): pid=4501 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:31.981000 audit[4501]: CRED_DISP pid=4501 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:32.003541 systemd[1]: sshd@13-10.0.0.5:22-10.0.0.1:57372.service: Deactivated successfully. Nov 1 00:54:32.004565 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:54:32.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.5:22-10.0.0.1:57372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:32.005777 systemd-logind[1185]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:54:32.006869 systemd-logind[1185]: Removed session 14. Nov 1 00:54:32.123817 env[1204]: time="2025-11-01T00:54:32.123711173Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:32.127511 env[1204]: time="2025-11-01T00:54:32.127340004Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:54:32.127778 kubelet[1949]: E1101 00:54:32.127716 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:54:32.127865 kubelet[1949]: E1101 00:54:32.127781 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:54:32.128054 kubelet[1949]: E1101 00:54:32.127977 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-qppwn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-jstvg_calico-system(dfb0b1fe-4456-4e60-b863-aa837603af90): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:32.131362 kubelet[1949]: E1101 00:54:32.129545 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:54:32.461380 env[1204]: time="2025-11-01T00:54:32.460774493Z" level=info msg="StopPodSandbox for \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\"" Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.521 [WARNING][4525] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0", GenerateName:"calico-apiserver-66556cbf54-", Namespace:"calico-apiserver", SelfLink:"", UID:"85ec62b7-a3b1-4f12-a8e9-67f72f8011d9", ResourceVersion:"1123", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66556cbf54", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a", Pod:"calico-apiserver-66556cbf54-7pxt9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliee6b250cf2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.522 [INFO][4525] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.522 [INFO][4525] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" iface="eth0" netns="" Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.522 [INFO][4525] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.522 [INFO][4525] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.562 [INFO][4534] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.562 [INFO][4534] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.563 [INFO][4534] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.571 [WARNING][4534] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.571 [INFO][4534] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.574 [INFO][4534] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:32.589719 env[1204]: 2025-11-01 00:54:32.585 [INFO][4525] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:32.590315 env[1204]: time="2025-11-01T00:54:32.589758778Z" level=info msg="TearDown network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\" successfully" Nov 1 00:54:32.590315 env[1204]: time="2025-11-01T00:54:32.589803862Z" level=info msg="StopPodSandbox for \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\" returns successfully" Nov 1 00:54:32.590580 env[1204]: time="2025-11-01T00:54:32.590539443Z" level=info msg="RemovePodSandbox for \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\"" Nov 1 00:54:32.590640 env[1204]: time="2025-11-01T00:54:32.590582414Z" level=info msg="Forcibly stopping sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\"" Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.638 [WARNING][4552] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0", GenerateName:"calico-apiserver-66556cbf54-", Namespace:"calico-apiserver", SelfLink:"", UID:"85ec62b7-a3b1-4f12-a8e9-67f72f8011d9", ResourceVersion:"1123", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66556cbf54", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"48f8514bca9051de9287d09bd9d80240f1bcdbbadbd6a6d2fb427b122b78fb1a", Pod:"calico-apiserver-66556cbf54-7pxt9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliee6b250cf2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.638 [INFO][4552] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.638 [INFO][4552] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" iface="eth0" netns="" Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.638 [INFO][4552] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.638 [INFO][4552] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.665 [INFO][4561] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.665 [INFO][4561] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.665 [INFO][4561] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.673 [WARNING][4561] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.673 [INFO][4561] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" HandleID="k8s-pod-network.a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Workload="localhost-k8s-calico--apiserver--66556cbf54--7pxt9-eth0" Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.677 [INFO][4561] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:32.681738 env[1204]: 2025-11-01 00:54:32.679 [INFO][4552] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d" Nov 1 00:54:32.682534 env[1204]: time="2025-11-01T00:54:32.681773263Z" level=info msg="TearDown network for sandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\" successfully" Nov 1 00:54:32.695759 env[1204]: time="2025-11-01T00:54:32.695680072Z" level=info msg="RemovePodSandbox \"a75908b2b56d4de0695c354654af525adf3d87489d7ef0ffc94b3a671a3a212d\" returns successfully" Nov 1 00:54:32.696525 env[1204]: time="2025-11-01T00:54:32.696476577Z" level=info msg="StopPodSandbox for \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\"" Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.740 [WARNING][4579] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0", GenerateName:"calico-apiserver-66556cbf54-", Namespace:"calico-apiserver", SelfLink:"", UID:"775ebd68-6412-4090-9511-da6f685868a7", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66556cbf54", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682", Pod:"calico-apiserver-66556cbf54-ddvsr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calicf9d305e155", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.741 [INFO][4579] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.741 [INFO][4579] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" iface="eth0" netns="" Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.741 [INFO][4579] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.741 [INFO][4579] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.777 [INFO][4588] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.777 [INFO][4588] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.777 [INFO][4588] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.794 [WARNING][4588] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.794 [INFO][4588] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.798 [INFO][4588] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:32.802701 env[1204]: 2025-11-01 00:54:32.800 [INFO][4579] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:32.803474 env[1204]: time="2025-11-01T00:54:32.802727609Z" level=info msg="TearDown network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\" successfully" Nov 1 00:54:32.803474 env[1204]: time="2025-11-01T00:54:32.802802900Z" level=info msg="StopPodSandbox for \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\" returns successfully" Nov 1 00:54:32.803474 env[1204]: time="2025-11-01T00:54:32.803421722Z" level=info msg="RemovePodSandbox for \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\"" Nov 1 00:54:32.803845 env[1204]: time="2025-11-01T00:54:32.803455745Z" level=info msg="Forcibly stopping sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\"" Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.862 [WARNING][4606] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0", GenerateName:"calico-apiserver-66556cbf54-", Namespace:"calico-apiserver", SelfLink:"", UID:"775ebd68-6412-4090-9511-da6f685868a7", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 49, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66556cbf54", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6366bcf4e85341df1fd4b091a31826514f60f0b91dc426b8fecca5e7522c5682", Pod:"calico-apiserver-66556cbf54-ddvsr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calicf9d305e155", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.862 [INFO][4606] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.862 [INFO][4606] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" iface="eth0" netns="" Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.862 [INFO][4606] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.862 [INFO][4606] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.890 [INFO][4615] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.890 [INFO][4615] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.890 [INFO][4615] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.899 [WARNING][4615] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.899 [INFO][4615] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" HandleID="k8s-pod-network.bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Workload="localhost-k8s-calico--apiserver--66556cbf54--ddvsr-eth0" Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.901 [INFO][4615] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:32.905842 env[1204]: 2025-11-01 00:54:32.903 [INFO][4606] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081" Nov 1 00:54:32.906541 env[1204]: time="2025-11-01T00:54:32.905875237Z" level=info msg="TearDown network for sandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\" successfully" Nov 1 00:54:32.911204 env[1204]: time="2025-11-01T00:54:32.911119800Z" level=info msg="RemovePodSandbox \"bdcc1b3fec7173ed6feb69b362275ac2287f7e9e6fb7d066dc3f6636e8a0f081\" returns successfully" Nov 1 00:54:32.911724 env[1204]: time="2025-11-01T00:54:32.911695440Z" level=info msg="StopPodSandbox for \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\"" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.956 [WARNING][4634] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" WorkloadEndpoint="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.956 [INFO][4634] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.956 [INFO][4634] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" iface="eth0" netns="" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.956 [INFO][4634] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.956 [INFO][4634] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.990 [INFO][4642] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.990 [INFO][4642] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.990 [INFO][4642] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.998 [WARNING][4642] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:32.998 [INFO][4642] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:33.000 [INFO][4642] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.004478 env[1204]: 2025-11-01 00:54:33.002 [INFO][4634] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:33.005087 env[1204]: time="2025-11-01T00:54:33.004509224Z" level=info msg="TearDown network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\" successfully" Nov 1 00:54:33.005087 env[1204]: time="2025-11-01T00:54:33.004550862Z" level=info msg="StopPodSandbox for \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\" returns successfully" Nov 1 00:54:33.005087 env[1204]: time="2025-11-01T00:54:33.005050619Z" level=info msg="RemovePodSandbox for \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\"" Nov 1 00:54:33.005198 env[1204]: time="2025-11-01T00:54:33.005080405Z" level=info msg="Forcibly stopping sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\"" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.044 [WARNING][4660] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" WorkloadEndpoint="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.044 [INFO][4660] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.044 [INFO][4660] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" iface="eth0" netns="" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.044 [INFO][4660] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.044 [INFO][4660] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.078 [INFO][4669] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.078 [INFO][4669] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.078 [INFO][4669] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.085 [WARNING][4669] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.085 [INFO][4669] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" HandleID="k8s-pod-network.ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Workload="localhost-k8s-whisker--54f856f795--9x79g-eth0" Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.088 [INFO][4669] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.092108 env[1204]: 2025-11-01 00:54:33.089 [INFO][4660] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d" Nov 1 00:54:33.092108 env[1204]: time="2025-11-01T00:54:33.092036059Z" level=info msg="TearDown network for sandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\" successfully" Nov 1 00:54:33.096320 env[1204]: time="2025-11-01T00:54:33.096238615Z" level=info msg="RemovePodSandbox \"ded7f9e28503d5caf7159f9e4f56825e5cb57eebf4e5afbb5f697e825389f42d\" returns successfully" Nov 1 00:54:33.096936 env[1204]: time="2025-11-01T00:54:33.096883626Z" level=info msg="StopPodSandbox for \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\"" Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.137 [WARNING][4686] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0", GenerateName:"calico-kube-controllers-58ddd67d6b-", Namespace:"calico-system", SelfLink:"", UID:"b11a6908-1d77-40ff-ac28-4badb8791eee", ResourceVersion:"1095", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"58ddd67d6b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330", Pod:"calico-kube-controllers-58ddd67d6b-xlsdg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0654ad06488", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.137 [INFO][4686] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.138 [INFO][4686] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" iface="eth0" netns="" Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.138 [INFO][4686] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.138 [INFO][4686] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.170 [INFO][4695] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.170 [INFO][4695] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.170 [INFO][4695] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.179 [WARNING][4695] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.179 [INFO][4695] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.181 [INFO][4695] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.193370 env[1204]: 2025-11-01 00:54:33.183 [INFO][4686] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:33.193370 env[1204]: time="2025-11-01T00:54:33.191888984Z" level=info msg="TearDown network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\" successfully" Nov 1 00:54:33.197045 env[1204]: time="2025-11-01T00:54:33.195662807Z" level=info msg="StopPodSandbox for \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\" returns successfully" Nov 1 00:54:33.198252 env[1204]: time="2025-11-01T00:54:33.198188015Z" level=info msg="RemovePodSandbox for \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\"" Nov 1 00:54:33.198252 env[1204]: time="2025-11-01T00:54:33.198236156Z" level=info msg="Forcibly stopping sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\"" Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.246 [WARNING][4712] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0", GenerateName:"calico-kube-controllers-58ddd67d6b-", Namespace:"calico-system", SelfLink:"", UID:"b11a6908-1d77-40ff-ac28-4badb8791eee", ResourceVersion:"1095", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"58ddd67d6b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d274001453cf94e911b19bacf57458c20bf3dce68932df1f24a3d44c175fc330", Pod:"calico-kube-controllers-58ddd67d6b-xlsdg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0654ad06488", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.247 [INFO][4712] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.247 [INFO][4712] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" iface="eth0" netns="" Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.247 [INFO][4712] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.247 [INFO][4712] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.280 [INFO][4721] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.281 [INFO][4721] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.281 [INFO][4721] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.289 [WARNING][4721] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.290 [INFO][4721] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" HandleID="k8s-pod-network.8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Workload="localhost-k8s-calico--kube--controllers--58ddd67d6b--xlsdg-eth0" Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.292 [INFO][4721] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.305225 env[1204]: 2025-11-01 00:54:33.298 [INFO][4712] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8" Nov 1 00:54:33.305992 env[1204]: time="2025-11-01T00:54:33.305238950Z" level=info msg="TearDown network for sandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\" successfully" Nov 1 00:54:33.309900 env[1204]: time="2025-11-01T00:54:33.309792935Z" level=info msg="RemovePodSandbox \"8334b9a5e3cc160f575e56265e197d05d37d23c8ae361a94de7995eb23c482d8\" returns successfully" Nov 1 00:54:33.311092 env[1204]: time="2025-11-01T00:54:33.311043733Z" level=info msg="StopPodSandbox for \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\"" Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.366 [WARNING][4738] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--jstvg-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"dfb0b1fe-4456-4e60-b863-aa837603af90", ResourceVersion:"1116", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3", Pod:"goldmane-666569f655-jstvg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali37bbde76d7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.366 [INFO][4738] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.366 [INFO][4738] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" iface="eth0" netns="" Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.366 [INFO][4738] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.366 [INFO][4738] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.402 [INFO][4747] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.402 [INFO][4747] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.402 [INFO][4747] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.415 [WARNING][4747] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.416 [INFO][4747] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.421 [INFO][4747] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.431681 env[1204]: 2025-11-01 00:54:33.424 [INFO][4738] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:33.433618 env[1204]: time="2025-11-01T00:54:33.432465716Z" level=info msg="TearDown network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\" successfully" Nov 1 00:54:33.433618 env[1204]: time="2025-11-01T00:54:33.432507925Z" level=info msg="StopPodSandbox for \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\" returns successfully" Nov 1 00:54:33.433618 env[1204]: time="2025-11-01T00:54:33.433360676Z" level=info msg="RemovePodSandbox for \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\"" Nov 1 00:54:33.433618 env[1204]: time="2025-11-01T00:54:33.433454252Z" level=info msg="Forcibly stopping sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\"" Nov 1 00:54:33.455144 env[1204]: time="2025-11-01T00:54:33.455032756Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.497 [WARNING][4764] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--jstvg-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"dfb0b1fe-4456-4e60-b863-aa837603af90", ResourceVersion:"1116", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7a414f7088c7e482cc5f275b63463e8056c75b4867228ed8e54b67b6b2bc29a3", Pod:"goldmane-666569f655-jstvg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali37bbde76d7b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.497 [INFO][4764] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.497 [INFO][4764] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" iface="eth0" netns="" Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.498 [INFO][4764] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.498 [INFO][4764] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.526 [INFO][4772] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.526 [INFO][4772] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.526 [INFO][4772] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.533 [WARNING][4772] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.533 [INFO][4772] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" HandleID="k8s-pod-network.cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Workload="localhost-k8s-goldmane--666569f655--jstvg-eth0" Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.535 [INFO][4772] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.539177 env[1204]: 2025-11-01 00:54:33.537 [INFO][4764] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc" Nov 1 00:54:33.540065 env[1204]: time="2025-11-01T00:54:33.539197662Z" level=info msg="TearDown network for sandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\" successfully" Nov 1 00:54:33.543964 env[1204]: time="2025-11-01T00:54:33.543900879Z" level=info msg="RemovePodSandbox \"cf21ae3e9b5f49bf5c4f1a8f461ef39316806b6548b5b7a90afe15b2f9738adc\" returns successfully" Nov 1 00:54:33.544689 env[1204]: time="2025-11-01T00:54:33.544656787Z" level=info msg="StopPodSandbox for \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\"" Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.588 [WARNING][4789] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"94bba030-6145-4a60-bacc-3ca6b58f690c", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f", Pod:"coredns-668d6bf9bc-f8gzw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicb60f9c2e43", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.588 [INFO][4789] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.589 [INFO][4789] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" iface="eth0" netns="" Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.589 [INFO][4789] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.589 [INFO][4789] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.618 [INFO][4798] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.618 [INFO][4798] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.618 [INFO][4798] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.630 [WARNING][4798] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.630 [INFO][4798] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.633 [INFO][4798] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.638100 env[1204]: 2025-11-01 00:54:33.636 [INFO][4789] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:33.639036 env[1204]: time="2025-11-01T00:54:33.638963755Z" level=info msg="TearDown network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\" successfully" Nov 1 00:54:33.639036 env[1204]: time="2025-11-01T00:54:33.639030060Z" level=info msg="StopPodSandbox for \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\" returns successfully" Nov 1 00:54:33.639732 env[1204]: time="2025-11-01T00:54:33.639688986Z" level=info msg="RemovePodSandbox for \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\"" Nov 1 00:54:33.639849 env[1204]: time="2025-11-01T00:54:33.639741124Z" level=info msg="Forcibly stopping sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\"" Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.689 [WARNING][4816] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"94bba030-6145-4a60-bacc-3ca6b58f690c", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3f0c6ba1f3acf3eaaa86ee051dbdf8679d60d3b529bafa2fabfebb229850cb6f", Pod:"coredns-668d6bf9bc-f8gzw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicb60f9c2e43", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.689 [INFO][4816] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.689 [INFO][4816] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" iface="eth0" netns="" Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.689 [INFO][4816] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.689 [INFO][4816] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.722 [INFO][4824] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.722 [INFO][4824] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.722 [INFO][4824] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.733 [WARNING][4824] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.733 [INFO][4824] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" HandleID="k8s-pod-network.641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Workload="localhost-k8s-coredns--668d6bf9bc--f8gzw-eth0" Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.736 [INFO][4824] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.739782 env[1204]: 2025-11-01 00:54:33.738 [INFO][4816] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286" Nov 1 00:54:33.739782 env[1204]: time="2025-11-01T00:54:33.739727271Z" level=info msg="TearDown network for sandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\" successfully" Nov 1 00:54:33.745132 env[1204]: time="2025-11-01T00:54:33.745047064Z" level=info msg="RemovePodSandbox \"641df7e46555b1225e269b732ca4bd44bbc2deead017f9bc7b82d1a985f69286\" returns successfully" Nov 1 00:54:33.747532 env[1204]: time="2025-11-01T00:54:33.747488676Z" level=info msg="StopPodSandbox for \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\"" Nov 1 00:54:33.762486 env[1204]: time="2025-11-01T00:54:33.761193484Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:33.765187 env[1204]: time="2025-11-01T00:54:33.764563749Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:54:33.765356 kubelet[1949]: E1101 00:54:33.765022 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:33.765356 kubelet[1949]: E1101 00:54:33.765070 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:33.765356 kubelet[1949]: E1101 00:54:33.765312 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hdc5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-66556cbf54-ddvsr_calico-apiserver(775ebd68-6412-4090-9511-da6f685868a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:33.765904 env[1204]: time="2025-11-01T00:54:33.765412361Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:54:33.767320 kubelet[1949]: E1101 00:54:33.766572 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.818 [WARNING][4842] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--dn8br-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b624f4d1-eb8b-4a77-ad58-aac63293cc33", ResourceVersion:"1098", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98", Pod:"coredns-668d6bf9bc-dn8br", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibece136f2f3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.818 [INFO][4842] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.818 [INFO][4842] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" iface="eth0" netns="" Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.818 [INFO][4842] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.818 [INFO][4842] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.883 [INFO][4851] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.883 [INFO][4851] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.883 [INFO][4851] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.894 [WARNING][4851] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.894 [INFO][4851] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.896 [INFO][4851] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:33.909392 env[1204]: 2025-11-01 00:54:33.900 [INFO][4842] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:33.910094 env[1204]: time="2025-11-01T00:54:33.909427143Z" level=info msg="TearDown network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\" successfully" Nov 1 00:54:33.910094 env[1204]: time="2025-11-01T00:54:33.909469192Z" level=info msg="StopPodSandbox for \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\" returns successfully" Nov 1 00:54:33.910094 env[1204]: time="2025-11-01T00:54:33.910046465Z" level=info msg="RemovePodSandbox for \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\"" Nov 1 00:54:33.910279 env[1204]: time="2025-11-01T00:54:33.910101980Z" level=info msg="Forcibly stopping sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\"" Nov 1 00:54:34.068167 env[1204]: time="2025-11-01T00:54:34.068095277Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:34.069629 env[1204]: time="2025-11-01T00:54:34.069544888Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:54:34.070162 kubelet[1949]: E1101 00:54:34.070098 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:54:34.070238 kubelet[1949]: E1101 00:54:34.070170 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:54:34.070589 kubelet[1949]: E1101 00:54:34.070496 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gksjl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-rm2n9_calico-system(3141111f-6c21-4e2a-82c8-54c3b4d00c87): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:34.070899 env[1204]: time="2025-11-01T00:54:34.070610196Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.028 [WARNING][4869] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--dn8br-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b624f4d1-eb8b-4a77-ad58-aac63293cc33", ResourceVersion:"1098", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e5f2900cd20d4d2201872ca4014c0ff79f8d4f4d9455e6bd2a712506ae6fe98", Pod:"coredns-668d6bf9bc-dn8br", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibece136f2f3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.028 [INFO][4869] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.028 [INFO][4869] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" iface="eth0" netns="" Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.028 [INFO][4869] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.028 [INFO][4869] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.055 [INFO][4878] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.055 [INFO][4878] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.055 [INFO][4878] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.063 [WARNING][4878] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.063 [INFO][4878] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" HandleID="k8s-pod-network.bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Workload="localhost-k8s-coredns--668d6bf9bc--dn8br-eth0" Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.067 [INFO][4878] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:34.073518 env[1204]: 2025-11-01 00:54:34.069 [INFO][4869] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175" Nov 1 00:54:34.074197 env[1204]: time="2025-11-01T00:54:34.073550895Z" level=info msg="TearDown network for sandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\" successfully" Nov 1 00:54:34.078361 env[1204]: time="2025-11-01T00:54:34.078307330Z" level=info msg="RemovePodSandbox \"bf0104cec0cbb1d5f2c0a0cff7b7403c417b05c8ffa0917753a20b52ba355175\" returns successfully" Nov 1 00:54:34.080178 env[1204]: time="2025-11-01T00:54:34.080126474Z" level=info msg="StopPodSandbox for \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\"" Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.125 [WARNING][4897] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--rm2n9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3141111f-6c21-4e2a-82c8-54c3b4d00c87", ResourceVersion:"1208", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f", Pod:"csi-node-driver-rm2n9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8752eaf9e93", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.126 [INFO][4897] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.126 [INFO][4897] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" iface="eth0" netns="" Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.126 [INFO][4897] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.126 [INFO][4897] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.151 [INFO][4906] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.151 [INFO][4906] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.151 [INFO][4906] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.159 [WARNING][4906] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.159 [INFO][4906] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.162 [INFO][4906] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:34.168886 env[1204]: 2025-11-01 00:54:34.166 [INFO][4897] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:34.169480 env[1204]: time="2025-11-01T00:54:34.168920320Z" level=info msg="TearDown network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\" successfully" Nov 1 00:54:34.169480 env[1204]: time="2025-11-01T00:54:34.168959233Z" level=info msg="StopPodSandbox for \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\" returns successfully" Nov 1 00:54:34.169634 env[1204]: time="2025-11-01T00:54:34.169541836Z" level=info msg="RemovePodSandbox for \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\"" Nov 1 00:54:34.169634 env[1204]: time="2025-11-01T00:54:34.169578084Z" level=info msg="Forcibly stopping sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\"" Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.219 [WARNING][4923] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--rm2n9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"3141111f-6c21-4e2a-82c8-54c3b4d00c87", ResourceVersion:"1208", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 53, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ab2997be4e46cc17f76b3465671c87838abe02872ea4793c6bba9b11fff395f", Pod:"csi-node-driver-rm2n9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8752eaf9e93", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.220 [INFO][4923] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.220 [INFO][4923] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" iface="eth0" netns="" Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.220 [INFO][4923] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.220 [INFO][4923] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.251 [INFO][4931] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.251 [INFO][4931] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.251 [INFO][4931] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.259 [WARNING][4931] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.259 [INFO][4931] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" HandleID="k8s-pod-network.5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Workload="localhost-k8s-csi--node--driver--rm2n9-eth0" Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.261 [INFO][4931] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:54:34.270687 env[1204]: 2025-11-01 00:54:34.264 [INFO][4923] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029" Nov 1 00:54:34.271376 env[1204]: time="2025-11-01T00:54:34.270723888Z" level=info msg="TearDown network for sandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\" successfully" Nov 1 00:54:34.275653 env[1204]: time="2025-11-01T00:54:34.275578118Z" level=info msg="RemovePodSandbox \"5fab28bce3e437bcd1fd3a8920ee2fa69ba733abb3305b1bcefdf10c4066c029\" returns successfully" Nov 1 00:54:34.387452 env[1204]: time="2025-11-01T00:54:34.387256588Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:34.390719 env[1204]: time="2025-11-01T00:54:34.389142096Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:54:34.390719 env[1204]: time="2025-11-01T00:54:34.390396339Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:54:34.390995 kubelet[1949]: E1101 00:54:34.389449 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:34.390995 kubelet[1949]: E1101 00:54:34.389514 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:34.390995 kubelet[1949]: E1101 00:54:34.389879 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sqpkt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-66556cbf54-7pxt9_calico-apiserver(85ec62b7-a3b1-4f12-a8e9-67f72f8011d9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:34.391493 kubelet[1949]: E1101 00:54:34.391417 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:54:34.726381 env[1204]: time="2025-11-01T00:54:34.723363306Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:34.726381 env[1204]: time="2025-11-01T00:54:34.724845187Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:54:34.727011 kubelet[1949]: E1101 00:54:34.725091 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:54:34.727011 kubelet[1949]: E1101 00:54:34.725149 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:54:34.727011 kubelet[1949]: E1101 00:54:34.725294 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gksjl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-rm2n9_calico-system(3141111f-6c21-4e2a-82c8-54c3b4d00c87): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:34.727011 kubelet[1949]: E1101 00:54:34.726877 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:36.993141 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:54:36.993350 kernel: audit: type=1130 audit(1761958476.982:1404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.5:22-10.0.0.1:57380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:36.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.5:22-10.0.0.1:57380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:36.983740 systemd[1]: Started sshd@14-10.0.0.5:22-10.0.0.1:57380.service. Nov 1 00:54:37.031000 audit[4945]: USER_ACCT pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.044091 sshd[4945]: Accepted publickey for core from 10.0.0.1 port 57380 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:37.043000 audit[4945]: CRED_ACQ pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.046167 sshd[4945]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:37.058288 kernel: audit: type=1101 audit(1761958477.031:1405): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.058429 kernel: audit: type=1103 audit(1761958477.043:1406): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.058474 kernel: audit: type=1006 audit(1761958477.043:1407): pid=4945 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:54:37.057789 systemd-logind[1185]: New session 15 of user core. Nov 1 00:54:37.058331 systemd[1]: Started session-15.scope. Nov 1 00:54:37.043000 audit[4945]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebb1a6d00 a2=3 a3=0 items=0 ppid=1 pid=4945 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:37.075695 kernel: audit: type=1300 audit(1761958477.043:1407): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebb1a6d00 a2=3 a3=0 items=0 ppid=1 pid=4945 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:37.075862 kernel: audit: type=1327 audit(1761958477.043:1407): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:37.043000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:37.069000 audit[4945]: USER_START pid=4945 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.088465 kernel: audit: type=1105 audit(1761958477.069:1408): pid=4945 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.088650 kernel: audit: type=1103 audit(1761958477.071:1409): pid=4947 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.071000 audit[4947]: CRED_ACQ pid=4947 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.395675 sshd[4945]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:37.397000 audit[4945]: USER_END pid=4945 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.403358 systemd[1]: sshd@14-10.0.0.5:22-10.0.0.1:57380.service: Deactivated successfully. Nov 1 00:54:37.404336 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:54:37.397000 audit[4945]: CRED_DISP pid=4945 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.408980 systemd-logind[1185]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:54:37.410228 systemd-logind[1185]: Removed session 15. Nov 1 00:54:37.418311 kernel: audit: type=1106 audit(1761958477.397:1410): pid=4945 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.418466 kernel: audit: type=1104 audit(1761958477.397:1411): pid=4945 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:37.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.5:22-10.0.0.1:57380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:39.281000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:39.281000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00120c540 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:54:39.281000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:54:39.281000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:39.281000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00181a180 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:54:39.281000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:54:39.281000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:39.281000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00120c560 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:54:39.281000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:54:39.282000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:54:39.282000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00120c5a0 a2=fc6 a3=0 items=0 ppid=1686 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c422 key=(null) Nov 1 00:54:39.282000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:54:42.410842 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:54:42.410990 kernel: audit: type=1130 audit(1761958482.402:1417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.5:22-10.0.0.1:51928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:42.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.5:22-10.0.0.1:51928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:42.403289 systemd[1]: Started sshd@15-10.0.0.5:22-10.0.0.1:51928.service. Nov 1 00:54:42.452000 audit[4966]: USER_ACCT pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.458057 kubelet[1949]: E1101 00:54:42.455545 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:42.458057 kubelet[1949]: E1101 00:54:42.456081 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:54:42.458435 sshd[4966]: Accepted publickey for core from 10.0.0.1 port 51928 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:42.462562 sshd[4966]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:42.462876 kernel: audit: type=1101 audit(1761958482.452:1418): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.462929 kernel: audit: type=1103 audit(1761958482.461:1419): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.461000 audit[4966]: CRED_ACQ pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.472213 kernel: audit: type=1006 audit(1761958482.461:1420): pid=4966 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:54:42.489106 kernel: audit: type=1300 audit(1761958482.461:1420): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0b1f0190 a2=3 a3=0 items=0 ppid=1 pid=4966 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:42.461000 audit[4966]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0b1f0190 a2=3 a3=0 items=0 ppid=1 pid=4966 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:42.487384 systemd-logind[1185]: New session 16 of user core. Nov 1 00:54:42.487875 systemd[1]: Started session-16.scope. Nov 1 00:54:42.461000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:42.495610 kernel: audit: type=1327 audit(1761958482.461:1420): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:42.499000 audit[4966]: USER_START pid=4966 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.499000 audit[4968]: CRED_ACQ pid=4968 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.523862 kernel: audit: type=1105 audit(1761958482.499:1421): pid=4966 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.524113 kernel: audit: type=1103 audit(1761958482.499:1422): pid=4968 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.660522 sshd[4966]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:42.661000 audit[4966]: USER_END pid=4966 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.664622 systemd[1]: sshd@15-10.0.0.5:22-10.0.0.1:51928.service: Deactivated successfully. Nov 1 00:54:42.665592 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:54:42.666614 systemd-logind[1185]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:54:42.667590 systemd-logind[1185]: Removed session 16. Nov 1 00:54:42.674847 kernel: audit: type=1106 audit(1761958482.661:1423): pid=4966 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.661000 audit[4966]: CRED_DISP pid=4966 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:42.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.5:22-10.0.0.1:51928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:42.684874 kernel: audit: type=1104 audit(1761958482.661:1424): pid=4966 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:43.454206 kubelet[1949]: E1101 00:54:43.454148 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:54:43.455295 kubelet[1949]: E1101 00:54:43.455202 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-65cb786f6c-bk5pm" podUID="dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a" Nov 1 00:54:46.455027 kubelet[1949]: E1101 00:54:46.454962 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:47.435748 kubelet[1949]: E1101 00:54:47.435159 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:47.667378 systemd[1]: Started sshd@16-10.0.0.5:22-10.0.0.1:51940.service. Nov 1 00:54:47.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.5:22-10.0.0.1:51940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:47.669704 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:54:47.669874 kernel: audit: type=1130 audit(1761958487.666:1426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.5:22-10.0.0.1:51940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:47.721000 audit[5002]: USER_ACCT pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.722672 sshd[5002]: Accepted publickey for core from 10.0.0.1 port 51940 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:47.727691 sshd[5002]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:47.726000 audit[5002]: CRED_ACQ pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.734152 systemd-logind[1185]: New session 17 of user core. Nov 1 00:54:47.734622 systemd[1]: Started session-17.scope. Nov 1 00:54:47.740882 kernel: audit: type=1101 audit(1761958487.721:1427): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.741053 kernel: audit: type=1103 audit(1761958487.726:1428): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.741084 kernel: audit: type=1006 audit(1761958487.726:1429): pid=5002 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Nov 1 00:54:47.726000 audit[5002]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff77bf2a30 a2=3 a3=0 items=0 ppid=1 pid=5002 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:47.753852 kernel: audit: type=1300 audit(1761958487.726:1429): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff77bf2a30 a2=3 a3=0 items=0 ppid=1 pid=5002 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:47.754035 kernel: audit: type=1327 audit(1761958487.726:1429): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:47.726000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:47.740000 audit[5002]: USER_START pid=5002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.765095 kernel: audit: type=1105 audit(1761958487.740:1430): pid=5002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.765303 kernel: audit: type=1103 audit(1761958487.742:1431): pid=5004 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.742000 audit[5004]: CRED_ACQ pid=5004 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.874272 sshd[5002]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:47.874000 audit[5002]: USER_END pid=5002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.877692 systemd[1]: sshd@16-10.0.0.5:22-10.0.0.1:51940.service: Deactivated successfully. Nov 1 00:54:47.878707 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:54:47.880335 systemd-logind[1185]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:54:47.881573 systemd-logind[1185]: Removed session 17. Nov 1 00:54:47.874000 audit[5002]: CRED_DISP pid=5002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.891714 kernel: audit: type=1106 audit(1761958487.874:1432): pid=5002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.891915 kernel: audit: type=1104 audit(1761958487.874:1433): pid=5002 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:47.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.5:22-10.0.0.1:51940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:48.454827 kubelet[1949]: E1101 00:54:48.454735 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:54:48.455321 kubelet[1949]: E1101 00:54:48.455193 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:54:50.453693 kubelet[1949]: E1101 00:54:50.453649 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:50.454787 kubelet[1949]: E1101 00:54:50.454757 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:54:52.884384 systemd[1]: Started sshd@17-10.0.0.5:22-10.0.0.1:37642.service. Nov 1 00:54:52.893608 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:54:52.893775 kernel: audit: type=1130 audit(1761958492.890:1435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.5:22-10.0.0.1:37642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:52.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.5:22-10.0.0.1:37642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:52.939000 audit[5015]: USER_ACCT pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:52.944168 sshd[5015]: Accepted publickey for core from 10.0.0.1 port 37642 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:52.950254 sshd[5015]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:52.948000 audit[5015]: CRED_ACQ pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:52.963777 systemd[1]: Started session-18.scope. Nov 1 00:54:52.966525 kernel: audit: type=1101 audit(1761958492.939:1436): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:52.966646 kernel: audit: type=1103 audit(1761958492.948:1437): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:52.966688 kernel: audit: type=1006 audit(1761958492.948:1438): pid=5015 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Nov 1 00:54:52.966295 systemd-logind[1185]: New session 18 of user core. Nov 1 00:54:52.948000 audit[5015]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb39565e0 a2=3 a3=0 items=0 ppid=1 pid=5015 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:52.992504 kernel: audit: type=1300 audit(1761958492.948:1438): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb39565e0 a2=3 a3=0 items=0 ppid=1 pid=5015 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:52.992646 kernel: audit: type=1327 audit(1761958492.948:1438): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:52.948000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:52.996862 kernel: audit: type=1105 audit(1761958492.989:1439): pid=5015 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:52.989000 audit[5015]: USER_START pid=5015 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:52.993000 audit[5017]: CRED_ACQ pid=5017 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:53.020656 kernel: audit: type=1103 audit(1761958492.993:1440): pid=5017 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:53.146801 sshd[5015]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:53.148000 audit[5015]: USER_END pid=5015 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:53.158129 systemd[1]: sshd@17-10.0.0.5:22-10.0.0.1:37642.service: Deactivated successfully. Nov 1 00:54:53.159247 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:54:53.163318 systemd-logind[1185]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:54:53.164593 systemd-logind[1185]: Removed session 18. Nov 1 00:54:53.148000 audit[5015]: CRED_DISP pid=5015 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:53.174128 kernel: audit: type=1106 audit(1761958493.148:1441): pid=5015 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:53.174309 kernel: audit: type=1104 audit(1761958493.148:1442): pid=5015 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:53.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.5:22-10.0.0.1:37642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:55.455190 env[1204]: time="2025-11-01T00:54:55.455140658Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:54:55.772932 env[1204]: time="2025-11-01T00:54:55.772803433Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:55.775147 env[1204]: time="2025-11-01T00:54:55.774972251Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:54:55.776995 kubelet[1949]: E1101 00:54:55.775597 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:54:55.776995 kubelet[1949]: E1101 00:54:55.775661 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:54:55.776995 kubelet[1949]: E1101 00:54:55.776415 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:792c0a11335e437284b3c719225e7f42,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-cvxk6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-65cb786f6c-bk5pm_calico-system(dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:55.780858 env[1204]: time="2025-11-01T00:54:55.776052882Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:54:56.107443 env[1204]: time="2025-11-01T00:54:56.104457251Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:56.115611 env[1204]: time="2025-11-01T00:54:56.113478547Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:54:56.115825 kubelet[1949]: E1101 00:54:56.113767 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:54:56.115825 kubelet[1949]: E1101 00:54:56.113842 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:54:56.115825 kubelet[1949]: E1101 00:54:56.114081 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b7m9v,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-58ddd67d6b-xlsdg_calico-system(b11a6908-1d77-40ff-ac28-4badb8791eee): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:56.117638 kubelet[1949]: E1101 00:54:56.117604 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:54:56.120143 env[1204]: time="2025-11-01T00:54:56.118489068Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:54:56.425040 env[1204]: time="2025-11-01T00:54:56.424874269Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:56.435351 env[1204]: time="2025-11-01T00:54:56.435175428Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:54:56.435700 kubelet[1949]: E1101 00:54:56.435660 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:54:56.435843 kubelet[1949]: E1101 00:54:56.435800 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:54:56.436140 kubelet[1949]: E1101 00:54:56.436095 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cvxk6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-65cb786f6c-bk5pm_calico-system(dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:56.437771 kubelet[1949]: E1101 00:54:56.437735 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-65cb786f6c-bk5pm" podUID="dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a" Nov 1 00:54:57.455226 env[1204]: time="2025-11-01T00:54:57.455178096Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:54:57.796707 env[1204]: time="2025-11-01T00:54:57.796367239Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:57.805153 env[1204]: time="2025-11-01T00:54:57.803264128Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:54:57.805354 kubelet[1949]: E1101 00:54:57.803553 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:54:57.805354 kubelet[1949]: E1101 00:54:57.803627 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:54:57.805354 kubelet[1949]: E1101 00:54:57.803774 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gksjl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-rm2n9_calico-system(3141111f-6c21-4e2a-82c8-54c3b4d00c87): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:57.807528 env[1204]: time="2025-11-01T00:54:57.807484039Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:54:58.126504 env[1204]: time="2025-11-01T00:54:58.126350896Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:58.129012 env[1204]: time="2025-11-01T00:54:58.128349220Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:54:58.129113 kubelet[1949]: E1101 00:54:58.128610 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:54:58.129113 kubelet[1949]: E1101 00:54:58.128669 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:54:58.129113 kubelet[1949]: E1101 00:54:58.128865 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-gksjl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-rm2n9_calico-system(3141111f-6c21-4e2a-82c8-54c3b4d00c87): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:58.130507 kubelet[1949]: E1101 00:54:58.130314 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:54:58.158268 systemd[1]: Started sshd@18-10.0.0.5:22-10.0.0.1:37646.service. Nov 1 00:54:58.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.5:22-10.0.0.1:37646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:58.163888 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:54:58.163972 kernel: audit: type=1130 audit(1761958498.156:1444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.5:22-10.0.0.1:37646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:58.218000 audit[5034]: USER_ACCT pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.220133 sshd[5034]: Accepted publickey for core from 10.0.0.1 port 37646 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:54:58.230015 sshd[5034]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:54:58.228000 audit[5034]: CRED_ACQ pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.239250 kernel: audit: type=1101 audit(1761958498.218:1445): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.239381 kernel: audit: type=1103 audit(1761958498.228:1446): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.246720 kernel: audit: type=1006 audit(1761958498.228:1447): pid=5034 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Nov 1 00:54:58.228000 audit[5034]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd446ae350 a2=3 a3=0 items=0 ppid=1 pid=5034 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:58.250620 systemd-logind[1185]: New session 19 of user core. Nov 1 00:54:58.250884 systemd[1]: Started session-19.scope. Nov 1 00:54:58.228000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:58.260697 kernel: audit: type=1300 audit(1761958498.228:1447): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd446ae350 a2=3 a3=0 items=0 ppid=1 pid=5034 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:54:58.260879 kernel: audit: type=1327 audit(1761958498.228:1447): proctitle=737368643A20636F7265205B707269765D Nov 1 00:54:58.263000 audit[5034]: USER_START pid=5034 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.265000 audit[5036]: CRED_ACQ pid=5036 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.282734 kernel: audit: type=1105 audit(1761958498.263:1448): pid=5034 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.282931 kernel: audit: type=1103 audit(1761958498.265:1449): pid=5036 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.439296 sshd[5034]: pam_unix(sshd:session): session closed for user core Nov 1 00:54:58.439000 audit[5034]: USER_END pid=5034 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.443491 systemd-logind[1185]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:54:58.444542 systemd[1]: sshd@18-10.0.0.5:22-10.0.0.1:37646.service: Deactivated successfully. Nov 1 00:54:58.445411 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:54:58.448666 systemd-logind[1185]: Removed session 19. Nov 1 00:54:58.452869 kernel: audit: type=1106 audit(1761958498.439:1450): pid=5034 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.439000 audit[5034]: CRED_DISP pid=5034 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.5:22-10.0.0.1:37646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:54:58.460902 kernel: audit: type=1104 audit(1761958498.439:1451): pid=5034 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:54:58.470616 env[1204]: time="2025-11-01T00:54:58.470290727Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:54:58.803658 env[1204]: time="2025-11-01T00:54:58.797768468Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:58.809688 env[1204]: time="2025-11-01T00:54:58.809604523Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:54:58.810195 kubelet[1949]: E1101 00:54:58.810151 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:54:58.810654 kubelet[1949]: E1101 00:54:58.810620 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:54:58.810956 kubelet[1949]: E1101 00:54:58.810889 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-qppwn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-jstvg_calico-system(dfb0b1fe-4456-4e60-b863-aa837603af90): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:58.815604 kubelet[1949]: E1101 00:54:58.813896 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:54:59.454775 env[1204]: time="2025-11-01T00:54:59.454700978Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:54:59.805943 env[1204]: time="2025-11-01T00:54:59.805787853Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:54:59.898959 env[1204]: time="2025-11-01T00:54:59.898824713Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:54:59.899488 kubelet[1949]: E1101 00:54:59.899362 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:59.899488 kubelet[1949]: E1101 00:54:59.899435 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:54:59.900113 kubelet[1949]: E1101 00:54:59.899603 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sqpkt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-66556cbf54-7pxt9_calico-apiserver(85ec62b7-a3b1-4f12-a8e9-67f72f8011d9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:54:59.905356 kubelet[1949]: E1101 00:54:59.901730 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:55:03.446017 systemd[1]: Started sshd@19-10.0.0.5:22-10.0.0.1:41214.service. Nov 1 00:55:03.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.5:22-10.0.0.1:41214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:03.448737 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:55:03.448859 kernel: audit: type=1130 audit(1761958503.445:1453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.5:22-10.0.0.1:41214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:03.454294 env[1204]: time="2025-11-01T00:55:03.454167374Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:55:03.503000 audit[5049]: USER_ACCT pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.507596 sshd[5049]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:03.508382 sshd[5049]: Accepted publickey for core from 10.0.0.1 port 41214 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:03.513097 systemd-logind[1185]: New session 20 of user core. Nov 1 00:55:03.513884 systemd[1]: Started session-20.scope. Nov 1 00:55:03.506000 audit[5049]: CRED_ACQ pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.522215 kernel: audit: type=1101 audit(1761958503.503:1454): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.522373 kernel: audit: type=1103 audit(1761958503.506:1455): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.522396 kernel: audit: type=1006 audit(1761958503.506:1456): pid=5049 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Nov 1 00:55:03.506000 audit[5049]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe151ff80 a2=3 a3=0 items=0 ppid=1 pid=5049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:03.537371 kernel: audit: type=1300 audit(1761958503.506:1456): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe151ff80 a2=3 a3=0 items=0 ppid=1 pid=5049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:03.537549 kernel: audit: type=1327 audit(1761958503.506:1456): proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:03.506000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:03.540110 kernel: audit: type=1105 audit(1761958503.521:1457): pid=5049 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.521000 audit[5049]: USER_START pid=5049 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.523000 audit[5051]: CRED_ACQ pid=5051 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.555905 kernel: audit: type=1103 audit(1761958503.523:1458): pid=5051 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.701564 sshd[5049]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:03.702000 audit[5049]: USER_END pid=5049 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.706406 systemd[1]: sshd@19-10.0.0.5:22-10.0.0.1:41214.service: Deactivated successfully. Nov 1 00:55:03.707200 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:55:03.709246 systemd[1]: Started sshd@20-10.0.0.5:22-10.0.0.1:41230.service. Nov 1 00:55:03.712869 systemd-logind[1185]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:55:03.715121 systemd-logind[1185]: Removed session 20. Nov 1 00:55:03.703000 audit[5049]: CRED_DISP pid=5049 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.731672 kernel: audit: type=1106 audit(1761958503.702:1459): pid=5049 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.731941 kernel: audit: type=1104 audit(1761958503.703:1460): pid=5049 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.5:22-10.0.0.1:41214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:03.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.5:22-10.0.0.1:41230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:03.759000 audit[5062]: USER_ACCT pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.763794 sshd[5062]: Accepted publickey for core from 10.0.0.1 port 41230 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:03.764091 env[1204]: time="2025-11-01T00:55:03.763787852Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:55:03.762000 audit[5062]: CRED_ACQ pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.762000 audit[5062]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd95fadf20 a2=3 a3=0 items=0 ppid=1 pid=5062 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:03.762000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:03.764901 sshd[5062]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:03.766412 env[1204]: time="2025-11-01T00:55:03.766259821Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:55:03.766637 kubelet[1949]: E1101 00:55:03.766566 1949 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:55:03.766968 kubelet[1949]: E1101 00:55:03.766646 1949 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:55:03.766968 kubelet[1949]: E1101 00:55:03.766801 1949 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hdc5b,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-66556cbf54-ddvsr_calico-apiserver(775ebd68-6412-4090-9511-da6f685868a7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:55:03.768512 kubelet[1949]: E1101 00:55:03.768477 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:55:03.774249 systemd-logind[1185]: New session 21 of user core. Nov 1 00:55:03.780000 systemd[1]: Started session-21.scope. Nov 1 00:55:03.788000 audit[5062]: USER_START pid=5062 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:03.790000 audit[5064]: CRED_ACQ pid=5064 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:04.060017 sshd[5062]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:04.060000 audit[5062]: USER_END pid=5062 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:04.060000 audit[5062]: CRED_DISP pid=5062 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:04.066511 systemd[1]: sshd@20-10.0.0.5:22-10.0.0.1:41230.service: Deactivated successfully. Nov 1 00:55:04.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.5:22-10.0.0.1:41230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:04.067477 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:55:04.068565 systemd-logind[1185]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:55:04.070174 systemd[1]: Started sshd@21-10.0.0.5:22-10.0.0.1:41232.service. Nov 1 00:55:04.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.5:22-10.0.0.1:41232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:04.072503 systemd-logind[1185]: Removed session 21. Nov 1 00:55:04.118000 audit[5073]: USER_ACCT pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:04.119267 sshd[5073]: Accepted publickey for core from 10.0.0.1 port 41232 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:04.119000 audit[5073]: CRED_ACQ pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:04.119000 audit[5073]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc60081260 a2=3 a3=0 items=0 ppid=1 pid=5073 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:04.119000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:04.120839 sshd[5073]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:04.126434 systemd-logind[1185]: New session 22 of user core. Nov 1 00:55:04.127756 systemd[1]: Started session-22.scope. Nov 1 00:55:04.134000 audit[5073]: USER_START pid=5073 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:04.136000 audit[5075]: CRED_ACQ pid=5075 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.031000 audit[5087]: NETFILTER_CFG table=filter:126 family=2 entries=26 op=nft_register_rule pid=5087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:55:05.031000 audit[5087]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffe9c7af810 a2=0 a3=7ffe9c7af7fc items=0 ppid=2055 pid=5087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:05.031000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:55:05.044000 audit[5087]: NETFILTER_CFG table=nat:127 family=2 entries=20 op=nft_register_rule pid=5087 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:55:05.044000 audit[5087]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe9c7af810 a2=0 a3=0 items=0 ppid=2055 pid=5087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:05.044000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:55:05.070000 audit[5089]: NETFILTER_CFG table=filter:128 family=2 entries=38 op=nft_register_rule pid=5089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:55:05.070000 audit[5089]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffcbf8cdea0 a2=0 a3=7ffcbf8cde8c items=0 ppid=2055 pid=5089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:05.070000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:55:05.081000 audit[5089]: NETFILTER_CFG table=nat:129 family=2 entries=20 op=nft_register_rule pid=5089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:55:05.081000 audit[5089]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffcbf8cdea0 a2=0 a3=0 items=0 ppid=2055 pid=5089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:05.081000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:55:05.132883 sshd[5073]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:05.132000 audit[5073]: USER_END pid=5073 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.132000 audit[5073]: CRED_DISP pid=5073 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.136623 systemd[1]: sshd@21-10.0.0.5:22-10.0.0.1:41232.service: Deactivated successfully. Nov 1 00:55:05.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.5:22-10.0.0.1:41232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:05.137537 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:55:05.138476 systemd-logind[1185]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:55:05.140160 systemd[1]: Started sshd@22-10.0.0.5:22-10.0.0.1:41242.service. Nov 1 00:55:05.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.5:22-10.0.0.1:41242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:05.145370 systemd-logind[1185]: Removed session 22. Nov 1 00:55:05.183000 audit[5092]: USER_ACCT pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.184663 sshd[5092]: Accepted publickey for core from 10.0.0.1 port 41242 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:05.184000 audit[5092]: CRED_ACQ pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.184000 audit[5092]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc88424130 a2=3 a3=0 items=0 ppid=1 pid=5092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:05.184000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:05.186010 sshd[5092]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:05.190844 systemd-logind[1185]: New session 23 of user core. Nov 1 00:55:05.192129 systemd[1]: Started session-23.scope. Nov 1 00:55:05.207000 audit[5092]: USER_START pid=5092 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.212000 audit[5094]: CRED_ACQ pid=5094 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.635528 sshd[5092]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:05.637000 audit[5092]: USER_END pid=5092 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.638000 audit[5092]: CRED_DISP pid=5092 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.644479 systemd[1]: Started sshd@23-10.0.0.5:22-10.0.0.1:41244.service. Nov 1 00:55:05.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.5:22-10.0.0.1:41244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:05.645312 systemd[1]: sshd@22-10.0.0.5:22-10.0.0.1:41242.service: Deactivated successfully. Nov 1 00:55:05.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.5:22-10.0.0.1:41242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:05.646286 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:55:05.651165 systemd-logind[1185]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:55:05.661427 systemd-logind[1185]: Removed session 23. Nov 1 00:55:05.695000 audit[5102]: USER_ACCT pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.696380 sshd[5102]: Accepted publickey for core from 10.0.0.1 port 41244 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:05.696000 audit[5102]: CRED_ACQ pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.696000 audit[5102]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd150cfff0 a2=3 a3=0 items=0 ppid=1 pid=5102 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:05.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:05.698185 sshd[5102]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:05.703411 systemd-logind[1185]: New session 24 of user core. Nov 1 00:55:05.704591 systemd[1]: Started session-24.scope. Nov 1 00:55:05.711000 audit[5102]: USER_START pid=5102 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.715000 audit[5105]: CRED_ACQ pid=5105 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.871164 sshd[5102]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:05.871000 audit[5102]: USER_END pid=5102 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.872000 audit[5102]: CRED_DISP pid=5102 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:05.874825 systemd[1]: sshd@23-10.0.0.5:22-10.0.0.1:41244.service: Deactivated successfully. Nov 1 00:55:05.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.5:22-10.0.0.1:41244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:05.875889 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:55:05.876899 systemd-logind[1185]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:55:05.878132 systemd-logind[1185]: Removed session 24. Nov 1 00:55:08.459549 kubelet[1949]: E1101 00:55:08.458230 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-65cb786f6c-bk5pm" podUID="dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a" Nov 1 00:55:09.454092 kubelet[1949]: E1101 00:55:09.454022 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:55:09.455253 kubelet[1949]: E1101 00:55:09.455206 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:55:10.888159 systemd[1]: Started sshd@24-10.0.0.5:22-10.0.0.1:51776.service. Nov 1 00:55:10.893520 kernel: kauditd_printk_skb: 57 callbacks suppressed Nov 1 00:55:10.893594 kernel: audit: type=1130 audit(1761958510.886:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.5:22-10.0.0.1:51776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:10.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.5:22-10.0.0.1:51776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:10.932000 audit[5119]: USER_ACCT pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:10.936729 sshd[5119]: Accepted publickey for core from 10.0.0.1 port 51776 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:10.946373 sshd[5119]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:10.948930 kernel: audit: type=1101 audit(1761958510.932:1503): pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:10.949033 kernel: audit: type=1103 audit(1761958510.945:1504): pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:10.945000 audit[5119]: CRED_ACQ pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:10.955487 systemd-logind[1185]: New session 25 of user core. Nov 1 00:55:10.957006 systemd[1]: Started session-25.scope. Nov 1 00:55:10.962173 kernel: audit: type=1006 audit(1761958510.945:1505): pid=5119 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:55:10.945000 audit[5119]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb2f019b0 a2=3 a3=0 items=0 ppid=1 pid=5119 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:10.970887 kernel: audit: type=1300 audit(1761958510.945:1505): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb2f019b0 a2=3 a3=0 items=0 ppid=1 pid=5119 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:10.970995 kernel: audit: type=1327 audit(1761958510.945:1505): proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:10.945000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:10.971000 audit[5119]: USER_START pid=5119 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:10.983604 kernel: audit: type=1105 audit(1761958510.971:1506): pid=5119 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:10.983800 kernel: audit: type=1103 audit(1761958510.974:1507): pid=5121 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:10.974000 audit[5121]: CRED_ACQ pid=5121 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:11.127276 sshd[5119]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:11.131000 audit[5119]: USER_END pid=5119 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:11.142646 kernel: audit: type=1106 audit(1761958511.131:1508): pid=5119 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:11.142792 kernel: audit: type=1104 audit(1761958511.132:1509): pid=5119 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:11.132000 audit[5119]: CRED_DISP pid=5119 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:11.135436 systemd[1]: sshd@24-10.0.0.5:22-10.0.0.1:51776.service: Deactivated successfully. Nov 1 00:55:11.136407 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:55:11.148301 systemd-logind[1185]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:55:11.149488 systemd-logind[1185]: Removed session 25. Nov 1 00:55:11.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.5:22-10.0.0.1:51776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:11.454465 kubelet[1949]: E1101 00:55:11.454310 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:55:12.456699 kubelet[1949]: E1101 00:55:12.456337 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:55:13.456190 kubelet[1949]: E1101 00:55:13.454907 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:55:14.253000 audit[5133]: NETFILTER_CFG table=filter:130 family=2 entries=26 op=nft_register_rule pid=5133 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:55:14.253000 audit[5133]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffccc409210 a2=0 a3=7ffccc4091fc items=0 ppid=2055 pid=5133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:14.253000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:55:14.263000 audit[5133]: NETFILTER_CFG table=nat:131 family=2 entries=104 op=nft_register_chain pid=5133 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:55:14.263000 audit[5133]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffccc409210 a2=0 a3=7ffccc4091fc items=0 ppid=2055 pid=5133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:14.263000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:55:15.453988 kubelet[1949]: E1101 00:55:15.453919 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:55:16.139351 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:55:16.139564 kernel: audit: type=1130 audit(1761958516.129:1513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.5:22-10.0.0.1:51780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:16.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.5:22-10.0.0.1:51780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:16.130411 systemd[1]: Started sshd@25-10.0.0.5:22-10.0.0.1:51780.service. Nov 1 00:55:16.173000 audit[5135]: USER_ACCT pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.174710 sshd[5135]: Accepted publickey for core from 10.0.0.1 port 51780 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:16.182000 audit[5135]: CRED_ACQ pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.184051 sshd[5135]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:16.192557 kernel: audit: type=1101 audit(1761958516.173:1514): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.192704 kernel: audit: type=1103 audit(1761958516.182:1515): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.192740 kernel: audit: type=1006 audit(1761958516.182:1516): pid=5135 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 00:55:16.191625 systemd[1]: Started session-26.scope. Nov 1 00:55:16.192111 systemd-logind[1185]: New session 26 of user core. Nov 1 00:55:16.182000 audit[5135]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1632dbf0 a2=3 a3=0 items=0 ppid=1 pid=5135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:16.205317 kernel: audit: type=1300 audit(1761958516.182:1516): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1632dbf0 a2=3 a3=0 items=0 ppid=1 pid=5135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:16.208547 kernel: audit: type=1327 audit(1761958516.182:1516): proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:16.182000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:16.203000 audit[5135]: USER_START pid=5135 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.218073 kernel: audit: type=1105 audit(1761958516.203:1517): pid=5135 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.218243 kernel: audit: type=1103 audit(1761958516.204:1518): pid=5137 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.204000 audit[5137]: CRED_ACQ pid=5137 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.352672 sshd[5135]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:16.353000 audit[5135]: USER_END pid=5135 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.355402 systemd[1]: sshd@25-10.0.0.5:22-10.0.0.1:51780.service: Deactivated successfully. Nov 1 00:55:16.356110 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 00:55:16.356791 systemd-logind[1185]: Session 26 logged out. Waiting for processes to exit. Nov 1 00:55:16.357707 systemd-logind[1185]: Removed session 26. Nov 1 00:55:16.363843 kernel: audit: type=1106 audit(1761958516.353:1519): pid=5135 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.353000 audit[5135]: CRED_DISP pid=5135 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.372025 kernel: audit: type=1104 audit(1761958516.353:1520): pid=5135 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:16.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.5:22-10.0.0.1:51780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:21.354984 systemd[1]: Started sshd@26-10.0.0.5:22-10.0.0.1:39784.service. Nov 1 00:55:21.358830 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:55:21.358892 kernel: audit: type=1130 audit(1761958521.354:1522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.5:22-10.0.0.1:39784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:21.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.5:22-10.0.0.1:39784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:21.390000 audit[5170]: USER_ACCT pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.391488 sshd[5170]: Accepted publickey for core from 10.0.0.1 port 39784 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:21.394430 sshd[5170]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:21.393000 audit[5170]: CRED_ACQ pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.398041 systemd-logind[1185]: New session 27 of user core. Nov 1 00:55:21.398391 systemd[1]: Started session-27.scope. Nov 1 00:55:21.404490 kernel: audit: type=1101 audit(1761958521.390:1523): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.404580 kernel: audit: type=1103 audit(1761958521.393:1524): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.404626 kernel: audit: type=1006 audit(1761958521.393:1525): pid=5170 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Nov 1 00:55:21.408353 kernel: audit: type=1300 audit(1761958521.393:1525): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd839672b0 a2=3 a3=0 items=0 ppid=1 pid=5170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:21.393000 audit[5170]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd839672b0 a2=3 a3=0 items=0 ppid=1 pid=5170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:21.393000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:21.417493 kernel: audit: type=1327 audit(1761958521.393:1525): proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:21.417535 kernel: audit: type=1105 audit(1761958521.401:1526): pid=5170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.401000 audit[5170]: USER_START pid=5170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.402000 audit[5172]: CRED_ACQ pid=5172 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.430393 kernel: audit: type=1103 audit(1761958521.402:1527): pid=5172 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.453629 kubelet[1949]: E1101 00:55:21.453561 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-58ddd67d6b-xlsdg" podUID="b11a6908-1d77-40ff-ac28-4badb8791eee" Nov 1 00:55:21.454222 kubelet[1949]: E1101 00:55:21.453736 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-65cb786f6c-bk5pm" podUID="dbaab719-a329-4fec-b2e9-c1a2bf4c2d6a" Nov 1 00:55:21.528900 sshd[5170]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:21.528000 audit[5170]: USER_END pid=5170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.530897 systemd[1]: sshd@26-10.0.0.5:22-10.0.0.1:39784.service: Deactivated successfully. Nov 1 00:55:21.531602 systemd[1]: session-27.scope: Deactivated successfully. Nov 1 00:55:21.532163 systemd-logind[1185]: Session 27 logged out. Waiting for processes to exit. Nov 1 00:55:21.533134 systemd-logind[1185]: Removed session 27. Nov 1 00:55:21.529000 audit[5170]: CRED_DISP pid=5170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.543033 kernel: audit: type=1106 audit(1761958521.528:1528): pid=5170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.543083 kernel: audit: type=1104 audit(1761958521.529:1529): pid=5170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:21.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.5:22-10.0.0.1:39784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:23.454137 kubelet[1949]: E1101 00:55:23.454081 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-7pxt9" podUID="85ec62b7-a3b1-4f12-a8e9-67f72f8011d9" Nov 1 00:55:24.452909 kubelet[1949]: E1101 00:55:24.452862 1949 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:55:24.453380 kubelet[1949]: E1101 00:55:24.453305 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-rm2n9" podUID="3141111f-6c21-4e2a-82c8-54c3b4d00c87" Nov 1 00:55:25.454177 kubelet[1949]: E1101 00:55:25.454138 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-jstvg" podUID="dfb0b1fe-4456-4e60-b863-aa837603af90" Nov 1 00:55:26.456412 kubelet[1949]: E1101 00:55:26.456294 1949 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-66556cbf54-ddvsr" podUID="775ebd68-6412-4090-9511-da6f685868a7" Nov 1 00:55:26.533502 systemd[1]: Started sshd@27-10.0.0.5:22-10.0.0.1:39798.service. Nov 1 00:55:26.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.5:22-10.0.0.1:39798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:26.535009 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:55:26.535127 kernel: audit: type=1130 audit(1761958526.532:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.5:22-10.0.0.1:39798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:55:26.567000 audit[5183]: USER_ACCT pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.568230 sshd[5183]: Accepted publickey for core from 10.0.0.1 port 39798 ssh2: RSA SHA256:JwSvRXjevaP+36Z07zi+kDtNd6c0wXFNiI7LiMiVJEU Nov 1 00:55:26.573000 audit[5183]: CRED_ACQ pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.574919 sshd[5183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:55:26.578134 systemd-logind[1185]: New session 28 of user core. Nov 1 00:55:26.578944 systemd[1]: Started session-28.scope. Nov 1 00:55:26.580705 kernel: audit: type=1101 audit(1761958526.567:1532): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.580761 kernel: audit: type=1103 audit(1761958526.573:1533): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.580781 kernel: audit: type=1006 audit(1761958526.573:1534): pid=5183 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Nov 1 00:55:26.589843 kernel: audit: type=1300 audit(1761958526.573:1534): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff09b61930 a2=3 a3=0 items=0 ppid=1 pid=5183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:26.573000 audit[5183]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff09b61930 a2=3 a3=0 items=0 ppid=1 pid=5183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:55:26.573000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:26.593513 kernel: audit: type=1327 audit(1761958526.573:1534): proctitle=737368643A20636F7265205B707269765D Nov 1 00:55:26.593565 kernel: audit: type=1105 audit(1761958526.579:1535): pid=5183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.579000 audit[5183]: USER_START pid=5183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.583000 audit[5185]: CRED_ACQ pid=5185 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.606464 kernel: audit: type=1103 audit(1761958526.583:1536): pid=5185 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.687724 sshd[5183]: pam_unix(sshd:session): session closed for user core Nov 1 00:55:26.687000 audit[5183]: USER_END pid=5183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.689797 systemd[1]: sshd@27-10.0.0.5:22-10.0.0.1:39798.service: Deactivated successfully. Nov 1 00:55:26.690494 systemd[1]: session-28.scope: Deactivated successfully. Nov 1 00:55:26.691340 systemd-logind[1185]: Session 28 logged out. Waiting for processes to exit. Nov 1 00:55:26.692126 systemd-logind[1185]: Removed session 28. Nov 1 00:55:26.687000 audit[5183]: CRED_DISP pid=5183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.702192 kernel: audit: type=1106 audit(1761958526.687:1537): pid=5183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.702298 kernel: audit: type=1104 audit(1761958526.687:1538): pid=5183 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:55:26.689000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.5:22-10.0.0.1:39798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'