Nov 1 00:17:53.014176 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Nov 1 00:17:53.014195 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Oct 31 23:12:38 -00 2025 Nov 1 00:17:53.014203 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Nov 1 00:17:53.014210 kernel: printk: bootconsole [pl11] enabled Nov 1 00:17:53.014216 kernel: efi: EFI v2.70 by EDK II Nov 1 00:17:53.014221 kernel: efi: ACPI 2.0=0x3fd5f018 SMBIOS=0x3e580000 SMBIOS 3.0=0x3e560000 MEMATTR=0x3ead8a98 RNG=0x3fd5f998 MEMRESERVE=0x3761cf98 Nov 1 00:17:53.014228 kernel: random: crng init done Nov 1 00:17:53.014234 kernel: ACPI: Early table checksum verification disabled Nov 1 00:17:53.014239 kernel: ACPI: RSDP 0x000000003FD5F018 000024 (v02 VRTUAL) Nov 1 00:17:53.014245 kernel: ACPI: XSDT 0x000000003FD5FF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014251 kernel: ACPI: FACP 0x000000003FD5FC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014256 kernel: ACPI: DSDT 0x000000003FD41018 01DFCD (v02 MSFTVM DSDT01 00000001 INTL 20230628) Nov 1 00:17:53.014263 kernel: ACPI: DBG2 0x000000003FD5FB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014269 kernel: ACPI: GTDT 0x000000003FD5FD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014276 kernel: ACPI: OEM0 0x000000003FD5F098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014282 kernel: ACPI: SPCR 0x000000003FD5FA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014288 kernel: ACPI: APIC 0x000000003FD5F818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014295 kernel: ACPI: SRAT 0x000000003FD5F198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014301 kernel: ACPI: PPTT 0x000000003FD5F418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Nov 1 00:17:53.014307 kernel: ACPI: BGRT 0x000000003FD5FE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:17:53.014313 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Nov 1 00:17:53.014318 kernel: NUMA: Failed to initialise from firmware Nov 1 00:17:53.014324 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Nov 1 00:17:53.014330 kernel: NUMA: NODE_DATA [mem 0x1bf7f1900-0x1bf7f6fff] Nov 1 00:17:53.014336 kernel: Zone ranges: Nov 1 00:17:53.014342 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Nov 1 00:17:53.014348 kernel: DMA32 empty Nov 1 00:17:53.014353 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Nov 1 00:17:53.014360 kernel: Movable zone start for each node Nov 1 00:17:53.014366 kernel: Early memory node ranges Nov 1 00:17:53.014372 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Nov 1 00:17:53.014378 kernel: node 0: [mem 0x0000000000824000-0x000000003e54ffff] Nov 1 00:17:53.014384 kernel: node 0: [mem 0x000000003e550000-0x000000003e87ffff] Nov 1 00:17:53.014389 kernel: node 0: [mem 0x000000003e880000-0x000000003fc7ffff] Nov 1 00:17:53.014395 kernel: node 0: [mem 0x000000003fc80000-0x000000003fcfffff] Nov 1 00:17:53.014401 kernel: node 0: [mem 0x000000003fd00000-0x000000003fffffff] Nov 1 00:17:53.014406 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Nov 1 00:17:53.014413 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Nov 1 00:17:53.014418 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Nov 1 00:17:53.014424 kernel: psci: probing for conduit method from ACPI. Nov 1 00:17:53.014434 kernel: psci: PSCIv1.1 detected in firmware. Nov 1 00:17:53.014440 kernel: psci: Using standard PSCI v0.2 function IDs Nov 1 00:17:53.014447 kernel: psci: MIGRATE_INFO_TYPE not supported. Nov 1 00:17:53.014453 kernel: psci: SMC Calling Convention v1.4 Nov 1 00:17:53.014459 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Nov 1 00:17:53.014466 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Nov 1 00:17:53.014473 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Nov 1 00:17:53.014479 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Nov 1 00:17:53.014486 kernel: pcpu-alloc: [0] 0 [0] 1 Nov 1 00:17:53.014492 kernel: Detected PIPT I-cache on CPU0 Nov 1 00:17:53.014498 kernel: CPU features: detected: GIC system register CPU interface Nov 1 00:17:53.014504 kernel: CPU features: detected: Hardware dirty bit management Nov 1 00:17:53.014510 kernel: CPU features: detected: Spectre-BHB Nov 1 00:17:53.014517 kernel: CPU features: kernel page table isolation forced ON by KASLR Nov 1 00:17:53.014523 kernel: CPU features: detected: Kernel page table isolation (KPTI) Nov 1 00:17:53.014529 kernel: CPU features: detected: ARM erratum 1418040 Nov 1 00:17:53.014536 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Nov 1 00:17:53.014543 kernel: CPU features: detected: SSBS not fully self-synchronizing Nov 1 00:17:53.014549 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Nov 1 00:17:53.014555 kernel: Policy zone: Normal Nov 1 00:17:53.014563 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:17:53.014569 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:17:53.014576 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:17:53.014582 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:17:53.014588 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:17:53.014594 kernel: software IO TLB: mapped [mem 0x000000003a550000-0x000000003e550000] (64MB) Nov 1 00:17:53.014601 kernel: Memory: 3986872K/4194160K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 207288K reserved, 0K cma-reserved) Nov 1 00:17:53.014609 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Nov 1 00:17:53.014615 kernel: trace event string verifier disabled Nov 1 00:17:53.014621 kernel: rcu: Preemptible hierarchical RCU implementation. Nov 1 00:17:53.014627 kernel: rcu: RCU event tracing is enabled. Nov 1 00:17:53.014634 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Nov 1 00:17:53.014641 kernel: Trampoline variant of Tasks RCU enabled. Nov 1 00:17:53.014647 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:17:53.014653 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:17:53.014659 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Nov 1 00:17:53.014666 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Nov 1 00:17:53.014672 kernel: GICv3: 960 SPIs implemented Nov 1 00:17:53.014680 kernel: GICv3: 0 Extended SPIs implemented Nov 1 00:17:53.014686 kernel: GICv3: Distributor has no Range Selector support Nov 1 00:17:53.014692 kernel: Root IRQ handler: gic_handle_irq Nov 1 00:17:53.014698 kernel: GICv3: 16 PPIs implemented Nov 1 00:17:53.014705 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Nov 1 00:17:53.014711 kernel: ITS: No ITS available, not enabling LPIs Nov 1 00:17:53.014717 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:17:53.014724 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Nov 1 00:17:53.014730 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Nov 1 00:17:53.014737 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Nov 1 00:17:53.014743 kernel: Console: colour dummy device 80x25 Nov 1 00:17:53.014751 kernel: printk: console [tty1] enabled Nov 1 00:17:53.014758 kernel: ACPI: Core revision 20210730 Nov 1 00:17:53.014765 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Nov 1 00:17:53.014771 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:17:53.014778 kernel: LSM: Security Framework initializing Nov 1 00:17:53.014784 kernel: SELinux: Initializing. Nov 1 00:17:53.014791 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:17:53.014797 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:17:53.014804 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Nov 1 00:17:53.014812 kernel: Hyper-V: Host Build 10.0.22477.1619-1-0 Nov 1 00:17:53.014818 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:17:53.014825 kernel: Remapping and enabling EFI services. Nov 1 00:17:53.014831 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:17:53.014837 kernel: Detected PIPT I-cache on CPU1 Nov 1 00:17:53.014844 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Nov 1 00:17:53.014851 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:17:53.014857 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Nov 1 00:17:53.014863 kernel: smp: Brought up 1 node, 2 CPUs Nov 1 00:17:53.014870 kernel: SMP: Total of 2 processors activated. Nov 1 00:17:53.014877 kernel: CPU features: detected: 32-bit EL0 Support Nov 1 00:17:53.014884 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Nov 1 00:17:53.014890 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Nov 1 00:17:53.014897 kernel: CPU features: detected: CRC32 instructions Nov 1 00:17:53.014903 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Nov 1 00:17:53.014910 kernel: CPU features: detected: LSE atomic instructions Nov 1 00:17:53.014955 kernel: CPU features: detected: Privileged Access Never Nov 1 00:17:53.014962 kernel: CPU: All CPU(s) started at EL1 Nov 1 00:17:53.014969 kernel: alternatives: patching kernel code Nov 1 00:17:53.014977 kernel: devtmpfs: initialized Nov 1 00:17:53.014988 kernel: KASLR enabled Nov 1 00:17:53.014995 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:17:53.015003 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Nov 1 00:17:53.015010 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:17:53.015017 kernel: SMBIOS 3.1.0 present. Nov 1 00:17:53.015024 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 Nov 1 00:17:53.015030 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:17:53.015037 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Nov 1 00:17:53.015045 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Nov 1 00:17:53.015052 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Nov 1 00:17:53.015059 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:17:53.015066 kernel: audit: type=2000 audit(0.091:1): state=initialized audit_enabled=0 res=1 Nov 1 00:17:53.015073 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:17:53.015080 kernel: cpuidle: using governor menu Nov 1 00:17:53.015087 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Nov 1 00:17:53.015095 kernel: ASID allocator initialised with 32768 entries Nov 1 00:17:53.015101 kernel: ACPI: bus type PCI registered Nov 1 00:17:53.015108 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:17:53.015115 kernel: Serial: AMBA PL011 UART driver Nov 1 00:17:53.015122 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:17:53.015129 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Nov 1 00:17:53.015135 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:17:53.015142 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Nov 1 00:17:53.015149 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:17:53.015157 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Nov 1 00:17:53.015164 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:17:53.015171 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:17:53.015178 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:17:53.015185 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:17:53.015191 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:17:53.015198 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:17:53.015205 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:17:53.015212 kernel: ACPI: Interpreter enabled Nov 1 00:17:53.015220 kernel: ACPI: Using GIC for interrupt routing Nov 1 00:17:53.015227 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Nov 1 00:17:53.015234 kernel: printk: console [ttyAMA0] enabled Nov 1 00:17:53.015241 kernel: printk: bootconsole [pl11] disabled Nov 1 00:17:53.015248 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Nov 1 00:17:53.015254 kernel: iommu: Default domain type: Translated Nov 1 00:17:53.015261 kernel: iommu: DMA domain TLB invalidation policy: strict mode Nov 1 00:17:53.015268 kernel: vgaarb: loaded Nov 1 00:17:53.015275 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:17:53.015282 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:17:53.015290 kernel: PTP clock support registered Nov 1 00:17:53.015296 kernel: Registered efivars operations Nov 1 00:17:53.015303 kernel: No ACPI PMU IRQ for CPU0 Nov 1 00:17:53.015310 kernel: No ACPI PMU IRQ for CPU1 Nov 1 00:17:53.015316 kernel: clocksource: Switched to clocksource arch_sys_counter Nov 1 00:17:53.015323 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:17:53.015330 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:17:53.015337 kernel: pnp: PnP ACPI init Nov 1 00:17:53.015343 kernel: pnp: PnP ACPI: found 0 devices Nov 1 00:17:53.015351 kernel: NET: Registered PF_INET protocol family Nov 1 00:17:53.015358 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:17:53.015365 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Nov 1 00:17:53.015372 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:17:53.015379 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:17:53.015386 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Nov 1 00:17:53.015393 kernel: TCP: Hash tables configured (established 32768 bind 32768) Nov 1 00:17:53.015400 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:17:53.015408 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:17:53.015414 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:17:53.015421 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:17:53.015428 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Nov 1 00:17:53.015435 kernel: kvm [1]: HYP mode not available Nov 1 00:17:53.015442 kernel: Initialise system trusted keyrings Nov 1 00:17:53.015448 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Nov 1 00:17:53.015455 kernel: Key type asymmetric registered Nov 1 00:17:53.015462 kernel: Asymmetric key parser 'x509' registered Nov 1 00:17:53.015470 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:17:53.015476 kernel: io scheduler mq-deadline registered Nov 1 00:17:53.015484 kernel: io scheduler kyber registered Nov 1 00:17:53.015490 kernel: io scheduler bfq registered Nov 1 00:17:53.015497 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:17:53.015504 kernel: thunder_xcv, ver 1.0 Nov 1 00:17:53.015511 kernel: thunder_bgx, ver 1.0 Nov 1 00:17:53.015517 kernel: nicpf, ver 1.0 Nov 1 00:17:53.015524 kernel: nicvf, ver 1.0 Nov 1 00:17:53.015645 kernel: rtc-efi rtc-efi.0: registered as rtc0 Nov 1 00:17:53.015714 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-11-01T00:17:52 UTC (1761956272) Nov 1 00:17:53.015724 kernel: efifb: probing for efifb Nov 1 00:17:53.015731 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Nov 1 00:17:53.015738 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Nov 1 00:17:53.015745 kernel: efifb: scrolling: redraw Nov 1 00:17:53.015752 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Nov 1 00:17:53.015759 kernel: Console: switching to colour frame buffer device 128x48 Nov 1 00:17:53.015767 kernel: fb0: EFI VGA frame buffer device Nov 1 00:17:53.015774 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Nov 1 00:17:53.015781 kernel: hid: raw HID events driver (C) Jiri Kosina Nov 1 00:17:53.015788 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:17:53.015795 kernel: Segment Routing with IPv6 Nov 1 00:17:53.015802 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:17:53.015808 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:17:53.015815 kernel: Key type dns_resolver registered Nov 1 00:17:53.015822 kernel: registered taskstats version 1 Nov 1 00:17:53.015829 kernel: Loading compiled-in X.509 certificates Nov 1 00:17:53.015837 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 4aa5071b9a6f96878595e36d4bd5862a671c915d' Nov 1 00:17:53.015844 kernel: Key type .fscrypt registered Nov 1 00:17:53.015851 kernel: Key type fscrypt-provisioning registered Nov 1 00:17:53.015858 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:17:53.015865 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:17:53.015871 kernel: ima: No architecture policies found Nov 1 00:17:53.015878 kernel: clk: Disabling unused clocks Nov 1 00:17:53.015885 kernel: Freeing unused kernel memory: 36416K Nov 1 00:17:53.015893 kernel: Run /init as init process Nov 1 00:17:53.015900 kernel: with arguments: Nov 1 00:17:53.015907 kernel: /init Nov 1 00:17:53.023822 kernel: with environment: Nov 1 00:17:53.023842 kernel: HOME=/ Nov 1 00:17:53.023849 kernel: TERM=linux Nov 1 00:17:53.023856 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:17:53.023867 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:17:53.023884 systemd[1]: Detected virtualization microsoft. Nov 1 00:17:53.023892 systemd[1]: Detected architecture arm64. Nov 1 00:17:53.023899 systemd[1]: Running in initrd. Nov 1 00:17:53.023907 systemd[1]: No hostname configured, using default hostname. Nov 1 00:17:53.023934 systemd[1]: Hostname set to . Nov 1 00:17:53.023943 systemd[1]: Initializing machine ID from random generator. Nov 1 00:17:53.023951 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:17:53.023958 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:17:53.023967 systemd[1]: Reached target cryptsetup.target. Nov 1 00:17:53.023975 systemd[1]: Reached target paths.target. Nov 1 00:17:53.023982 systemd[1]: Reached target slices.target. Nov 1 00:17:53.023990 systemd[1]: Reached target swap.target. Nov 1 00:17:53.023997 systemd[1]: Reached target timers.target. Nov 1 00:17:53.024005 systemd[1]: Listening on iscsid.socket. Nov 1 00:17:53.024012 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:17:53.024020 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:17:53.024029 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:17:53.024036 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:17:53.024044 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:17:53.024052 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:17:53.024060 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:17:53.024067 systemd[1]: Reached target sockets.target. Nov 1 00:17:53.024075 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:17:53.024083 systemd[1]: Finished network-cleanup.service. Nov 1 00:17:53.024091 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:17:53.024100 systemd[1]: Starting systemd-journald.service... Nov 1 00:17:53.024107 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:17:53.024115 systemd[1]: Starting systemd-resolved.service... Nov 1 00:17:53.024123 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:17:53.024135 systemd-journald[276]: Journal started Nov 1 00:17:53.024195 systemd-journald[276]: Runtime Journal (/run/log/journal/7c180fa43fd74bf8b7c65f582fab3776) is 8.0M, max 78.5M, 70.5M free. Nov 1 00:17:53.016344 systemd-modules-load[277]: Inserted module 'overlay' Nov 1 00:17:53.048671 systemd-resolved[278]: Positive Trust Anchors: Nov 1 00:17:53.052876 systemd[1]: Started systemd-journald.service. Nov 1 00:17:53.048688 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:17:53.092515 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:17:53.092539 kernel: audit: type=1130 audit(1761956273.068:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.048718 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:17:53.151413 kernel: audit: type=1130 audit(1761956273.096:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.151437 kernel: Bridge firewalling registered Nov 1 00:17:53.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.050883 systemd-resolved[278]: Defaulting to hostname 'linux'. Nov 1 00:17:53.069134 systemd[1]: Started systemd-resolved.service. Nov 1 00:17:53.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.097019 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:17:53.187466 kernel: audit: type=1130 audit(1761956273.160:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.187490 kernel: SCSI subsystem initialized Nov 1 00:17:53.146577 systemd-modules-load[277]: Inserted module 'br_netfilter' Nov 1 00:17:53.254011 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:17:53.254036 kernel: audit: type=1130 audit(1761956273.187:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.254047 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:17:53.254055 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:17:53.254065 kernel: audit: type=1130 audit(1761956273.233:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.175446 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:17:53.280993 kernel: audit: type=1130 audit(1761956273.258:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.196205 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:17:53.233590 systemd-modules-load[277]: Inserted module 'dm_multipath' Nov 1 00:17:53.235228 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:17:53.259123 systemd[1]: Reached target nss-lookup.target. Nov 1 00:17:53.282843 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:17:53.291530 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:17:53.300581 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:17:53.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.316557 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:17:53.360574 kernel: audit: type=1130 audit(1761956273.336:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.337559 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:17:53.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.386701 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:17:53.390938 kernel: audit: type=1130 audit(1761956273.365:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.396265 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:17:53.420729 kernel: audit: type=1130 audit(1761956273.394:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.420752 dracut-cmdline[299]: dracut-dracut-053 Nov 1 00:17:53.420752 dracut-cmdline[299]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=t Nov 1 00:17:53.420752 dracut-cmdline[299]: tyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:17:53.487932 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:17:53.500951 kernel: iscsi: registered transport (tcp) Nov 1 00:17:53.521393 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:17:53.521451 kernel: QLogic iSCSI HBA Driver Nov 1 00:17:53.551737 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:17:53.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:53.557057 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:17:53.609934 kernel: raid6: neonx8 gen() 13750 MB/s Nov 1 00:17:53.630934 kernel: raid6: neonx8 xor() 10802 MB/s Nov 1 00:17:53.650925 kernel: raid6: neonx4 gen() 13516 MB/s Nov 1 00:17:53.670941 kernel: raid6: neonx4 xor() 11088 MB/s Nov 1 00:17:53.691950 kernel: raid6: neonx2 gen() 13057 MB/s Nov 1 00:17:53.712947 kernel: raid6: neonx2 xor() 10262 MB/s Nov 1 00:17:53.732943 kernel: raid6: neonx1 gen() 10562 MB/s Nov 1 00:17:53.753924 kernel: raid6: neonx1 xor() 8787 MB/s Nov 1 00:17:53.773923 kernel: raid6: int64x8 gen() 6272 MB/s Nov 1 00:17:53.793922 kernel: raid6: int64x8 xor() 3544 MB/s Nov 1 00:17:53.814928 kernel: raid6: int64x4 gen() 7218 MB/s Nov 1 00:17:53.835922 kernel: raid6: int64x4 xor() 3853 MB/s Nov 1 00:17:53.855926 kernel: raid6: int64x2 gen() 6156 MB/s Nov 1 00:17:53.876922 kernel: raid6: int64x2 xor() 3320 MB/s Nov 1 00:17:53.896927 kernel: raid6: int64x1 gen() 5047 MB/s Nov 1 00:17:53.921354 kernel: raid6: int64x1 xor() 2646 MB/s Nov 1 00:17:53.921375 kernel: raid6: using algorithm neonx8 gen() 13750 MB/s Nov 1 00:17:53.921392 kernel: raid6: .... xor() 10802 MB/s, rmw enabled Nov 1 00:17:53.927042 kernel: raid6: using neon recovery algorithm Nov 1 00:17:53.948574 kernel: xor: measuring software checksum speed Nov 1 00:17:53.948599 kernel: 8regs : 17213 MB/sec Nov 1 00:17:53.952434 kernel: 32regs : 20665 MB/sec Nov 1 00:17:53.956257 kernel: arm64_neon : 27654 MB/sec Nov 1 00:17:53.956267 kernel: xor: using function: arm64_neon (27654 MB/sec) Nov 1 00:17:54.017931 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Nov 1 00:17:54.027750 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:17:54.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:54.035000 audit: BPF prog-id=7 op=LOAD Nov 1 00:17:54.035000 audit: BPF prog-id=8 op=LOAD Nov 1 00:17:54.036788 systemd[1]: Starting systemd-udevd.service... Nov 1 00:17:54.051655 systemd-udevd[475]: Using default interface naming scheme 'v252'. Nov 1 00:17:54.058693 systemd[1]: Started systemd-udevd.service. Nov 1 00:17:54.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:54.069168 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:17:54.084702 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Nov 1 00:17:54.118562 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:17:54.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:54.124277 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:17:54.162454 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:17:54.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:54.217983 kernel: hv_vmbus: Vmbus version:5.3 Nov 1 00:17:54.233940 kernel: hv_vmbus: registering driver hid_hyperv Nov 1 00:17:54.234004 kernel: hv_vmbus: registering driver hyperv_keyboard Nov 1 00:17:54.256279 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Nov 1 00:17:54.256342 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Nov 1 00:17:54.263945 kernel: hv_vmbus: registering driver hv_netvsc Nov 1 00:17:54.264016 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Nov 1 00:17:54.282945 kernel: hv_vmbus: registering driver hv_storvsc Nov 1 00:17:54.291241 kernel: scsi host1: storvsc_host_t Nov 1 00:17:54.291490 kernel: scsi host0: storvsc_host_t Nov 1 00:17:54.298713 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Nov 1 00:17:54.307878 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Nov 1 00:17:54.327666 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Nov 1 00:17:54.328803 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Nov 1 00:17:54.328817 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Nov 1 00:17:54.344883 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Nov 1 00:17:54.373220 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Nov 1 00:17:54.373363 kernel: sd 0:0:0:0: [sda] Write Protect is off Nov 1 00:17:54.373480 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Nov 1 00:17:54.373599 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Nov 1 00:17:54.373686 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:17:54.373696 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Nov 1 00:17:54.392950 kernel: hv_netvsc 000d3a06-11b4-000d-3a06-11b4000d3a06 eth0: VF slot 1 added Nov 1 00:17:54.407859 kernel: hv_vmbus: registering driver hv_pci Nov 1 00:17:54.407924 kernel: hv_pci 42af778a-d05a-4f9d-8658-157d756a2e21: PCI VMBus probing: Using version 0x10004 Nov 1 00:17:54.502185 kernel: hv_pci 42af778a-d05a-4f9d-8658-157d756a2e21: PCI host bridge to bus d05a:00 Nov 1 00:17:54.502302 kernel: pci_bus d05a:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Nov 1 00:17:54.502399 kernel: pci_bus d05a:00: No busn resource found for root bus, will use [bus 00-ff] Nov 1 00:17:54.502476 kernel: pci d05a:00:02.0: [15b3:1018] type 00 class 0x020000 Nov 1 00:17:54.502600 kernel: pci d05a:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Nov 1 00:17:54.502685 kernel: pci d05a:00:02.0: enabling Extended Tags Nov 1 00:17:54.502767 kernel: pci d05a:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at d05a:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Nov 1 00:17:54.502851 kernel: pci_bus d05a:00: busn_res: [bus 00-ff] end is updated to 00 Nov 1 00:17:54.502960 kernel: pci d05a:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Nov 1 00:17:54.546184 kernel: mlx5_core d05a:00:02.0: enabling device (0000 -> 0002) Nov 1 00:17:54.818208 kernel: mlx5_core d05a:00:02.0: firmware version: 16.30.1284 Nov 1 00:17:54.818351 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (538) Nov 1 00:17:54.818362 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:17:54.818372 kernel: mlx5_core d05a:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Nov 1 00:17:54.818475 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:17:54.818492 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:17:54.818501 kernel: hv_netvsc 000d3a06-11b4-000d-3a06-11b4000d3a06 eth0: VF registering: eth1 Nov 1 00:17:54.818590 kernel: mlx5_core d05a:00:02.0 eth1: joined to eth0 Nov 1 00:17:54.575437 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:17:54.604945 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:17:54.634531 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:17:54.643065 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:17:54.853083 kernel: mlx5_core d05a:00:02.0 enP53338s1: renamed from eth1 Nov 1 00:17:54.654481 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:17:54.661249 systemd[1]: Starting disk-uuid.service... Nov 1 00:17:55.727938 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:17:55.728278 disk-uuid[598]: The operation has completed successfully. Nov 1 00:17:55.795015 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:17:55.798060 systemd[1]: Finished disk-uuid.service. Nov 1 00:17:55.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:55.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:55.808833 systemd[1]: Starting verity-setup.service... Nov 1 00:17:55.839936 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Nov 1 00:17:55.967130 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:17:55.973343 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:17:55.982360 systemd[1]: Finished verity-setup.service. Nov 1 00:17:55.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:56.044941 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:17:56.045434 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:17:56.049312 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:17:56.050149 systemd[1]: Starting ignition-setup.service... Nov 1 00:17:56.056724 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:17:56.091094 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:17:56.091123 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:17:56.095907 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:17:56.145478 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:17:56.151176 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:17:56.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:56.159000 audit: BPF prog-id=9 op=LOAD Nov 1 00:17:56.160607 systemd[1]: Starting systemd-networkd.service... Nov 1 00:17:56.183677 systemd-networkd[877]: lo: Link UP Nov 1 00:17:56.183691 systemd-networkd[877]: lo: Gained carrier Nov 1 00:17:56.184516 systemd-networkd[877]: Enumeration completed Nov 1 00:17:56.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:56.187302 systemd[1]: Started systemd-networkd.service. Nov 1 00:17:56.187700 systemd-networkd[877]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:17:56.195814 systemd[1]: Reached target network.target. Nov 1 00:17:56.204337 systemd[1]: Starting iscsiuio.service... Nov 1 00:17:56.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:56.218076 systemd[1]: Started iscsiuio.service. Nov 1 00:17:56.234033 iscsid[882]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:17:56.234033 iscsid[882]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Nov 1 00:17:56.234033 iscsid[882]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:17:56.234033 iscsid[882]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:17:56.234033 iscsid[882]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:17:56.234033 iscsid[882]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:17:56.234033 iscsid[882]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:17:56.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:56.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:56.229487 systemd[1]: Starting iscsid.service... Nov 1 00:17:56.245107 systemd[1]: Started iscsid.service. Nov 1 00:17:56.282772 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:17:56.307533 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:17:56.317465 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:17:56.330454 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:17:56.343156 systemd[1]: Reached target remote-fs.target. Nov 1 00:17:56.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:56.355878 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:17:56.366189 systemd[1]: Finished ignition-setup.service. Nov 1 00:17:56.377779 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:17:56.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:56.390879 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:17:56.415940 kernel: mlx5_core d05a:00:02.0 enP53338s1: Link up Nov 1 00:17:56.416135 kernel: buffer_size[0]=0 is not enough for lossless buffer Nov 1 00:17:56.461949 kernel: hv_netvsc 000d3a06-11b4-000d-3a06-11b4000d3a06 eth0: Data path switched to VF: enP53338s1 Nov 1 00:17:56.462261 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:17:56.468857 systemd-networkd[877]: enP53338s1: Link UP Nov 1 00:17:56.468976 systemd-networkd[877]: eth0: Link UP Nov 1 00:17:56.469138 systemd-networkd[877]: eth0: Gained carrier Nov 1 00:17:56.481678 systemd-networkd[877]: enP53338s1: Gained carrier Nov 1 00:17:56.492017 systemd-networkd[877]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Nov 1 00:17:57.234343 ignition[897]: Ignition 2.14.0 Nov 1 00:17:57.237839 ignition[897]: Stage: fetch-offline Nov 1 00:17:57.237946 ignition[897]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:17:57.237978 ignition[897]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:17:57.277418 ignition[897]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:17:57.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.285322 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:17:57.316432 kernel: kauditd_printk_skb: 18 callbacks suppressed Nov 1 00:17:57.316457 kernel: audit: type=1130 audit(1761956277.289:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.277560 ignition[897]: parsed url from cmdline: "" Nov 1 00:17:57.294209 systemd[1]: Starting ignition-fetch.service... Nov 1 00:17:57.277564 ignition[897]: no config URL provided Nov 1 00:17:57.277569 ignition[897]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:17:57.277577 ignition[897]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:17:57.277583 ignition[897]: failed to fetch config: resource requires networking Nov 1 00:17:57.277691 ignition[897]: Ignition finished successfully Nov 1 00:17:57.307869 ignition[904]: Ignition 2.14.0 Nov 1 00:17:57.307876 ignition[904]: Stage: fetch Nov 1 00:17:57.308012 ignition[904]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:17:57.308030 ignition[904]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:17:57.310673 ignition[904]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:17:57.310792 ignition[904]: parsed url from cmdline: "" Nov 1 00:17:57.310796 ignition[904]: no config URL provided Nov 1 00:17:57.310801 ignition[904]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:17:57.310810 ignition[904]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:17:57.310841 ignition[904]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Nov 1 00:17:57.420956 ignition[904]: GET result: OK Nov 1 00:17:57.424525 unknown[904]: fetched base config from "system" Nov 1 00:17:57.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.421059 ignition[904]: config has been read from IMDS userdata Nov 1 00:17:57.463257 kernel: audit: type=1130 audit(1761956277.432:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.424533 unknown[904]: fetched base config from "system" Nov 1 00:17:57.421102 ignition[904]: parsing config with SHA512: 43a3c533332c92995f340ac51ff3706e8db45791bb6cda6face2ff88b4a5ed6a36e475a8cb76b59e0a51eee360948f2ebb03d09da1ffecd69e81067511e9e269 Nov 1 00:17:57.424539 unknown[904]: fetched user config from "azure" Nov 1 00:17:57.425037 ignition[904]: fetch: fetch complete Nov 1 00:17:57.426217 systemd[1]: Finished ignition-fetch.service. Nov 1 00:17:57.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.425041 ignition[904]: fetch: fetch passed Nov 1 00:17:57.511316 kernel: audit: type=1130 audit(1761956277.480:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.453887 systemd[1]: Starting ignition-kargs.service... Nov 1 00:17:57.425087 ignition[904]: Ignition finished successfully Nov 1 00:17:57.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.476074 systemd[1]: Finished ignition-kargs.service. Nov 1 00:17:57.552304 kernel: audit: type=1130 audit(1761956277.521:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.465718 ignition[910]: Ignition 2.14.0 Nov 1 00:17:57.481409 systemd[1]: Starting ignition-disks.service... Nov 1 00:17:57.465725 ignition[910]: Stage: kargs Nov 1 00:17:57.512270 systemd[1]: Finished ignition-disks.service. Nov 1 00:17:57.465848 ignition[910]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:17:57.541644 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:17:57.465867 ignition[910]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:17:57.547855 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:17:57.468792 ignition[910]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:17:57.556814 systemd[1]: Reached target local-fs.target. Nov 1 00:17:57.471892 ignition[910]: kargs: kargs passed Nov 1 00:17:57.565167 systemd[1]: Reached target sysinit.target. Nov 1 00:17:57.471964 ignition[910]: Ignition finished successfully Nov 1 00:17:57.574807 systemd[1]: Reached target basic.target. Nov 1 00:17:57.494438 ignition[916]: Ignition 2.14.0 Nov 1 00:17:57.584685 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:17:57.494444 ignition[916]: Stage: disks Nov 1 00:17:57.621377 systemd-networkd[877]: eth0: Gained IPv6LL Nov 1 00:17:57.494571 ignition[916]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:17:57.494595 ignition[916]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:17:57.498310 ignition[916]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:17:57.501378 ignition[916]: disks: disks passed Nov 1 00:17:57.501437 ignition[916]: Ignition finished successfully Nov 1 00:17:57.692424 systemd-fsck[924]: ROOT: clean, 637/7326000 files, 481087/7359488 blocks Nov 1 00:17:57.703136 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:17:57.732094 kernel: audit: type=1130 audit(1761956277.707:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:57.709254 systemd[1]: Mounting sysroot.mount... Nov 1 00:17:57.758935 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:17:57.759192 systemd[1]: Mounted sysroot.mount. Nov 1 00:17:57.763059 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:17:57.779742 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:17:57.784663 systemd[1]: Starting flatcar-metadata-hostname.service... Nov 1 00:17:57.792851 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:17:57.792887 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:17:57.799054 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:17:57.827050 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:17:57.833425 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:17:57.850934 initrd-setup-root[939]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:17:57.869010 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (934) Nov 1 00:17:57.875960 initrd-setup-root[947]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:17:57.887027 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:17:57.887049 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:17:57.894228 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:17:57.895987 initrd-setup-root[955]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:17:57.910226 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:17:57.921420 initrd-setup-root[981]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:17:58.118212 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:17:58.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:58.123817 systemd[1]: Starting ignition-mount.service... Nov 1 00:17:58.153170 kernel: audit: type=1130 audit(1761956278.122:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:58.151746 systemd[1]: Starting sysroot-boot.service... Nov 1 00:17:58.162546 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Nov 1 00:17:58.162728 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Nov 1 00:17:58.197282 ignition[1003]: INFO : Ignition 2.14.0 Nov 1 00:17:58.198735 systemd[1]: Finished sysroot-boot.service. Nov 1 00:17:58.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:58.228750 ignition[1003]: INFO : Stage: mount Nov 1 00:17:58.228750 ignition[1003]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:17:58.228750 ignition[1003]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:17:58.283585 kernel: audit: type=1130 audit(1761956278.207:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:58.283613 kernel: audit: type=1130 audit(1761956278.243:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:58.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:58.238407 systemd[1]: Finished ignition-mount.service. Nov 1 00:17:58.288252 ignition[1003]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:17:58.288252 ignition[1003]: INFO : mount: mount passed Nov 1 00:17:58.288252 ignition[1003]: INFO : Ignition finished successfully Nov 1 00:17:58.350322 coreos-metadata[933]: Nov 01 00:17:58.350 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Nov 1 00:17:58.360250 coreos-metadata[933]: Nov 01 00:17:58.360 INFO Fetch successful Nov 1 00:17:58.395064 coreos-metadata[933]: Nov 01 00:17:58.394 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Nov 1 00:17:58.407347 coreos-metadata[933]: Nov 01 00:17:58.407 INFO Fetch successful Nov 1 00:17:58.413141 coreos-metadata[933]: Nov 01 00:17:58.413 INFO wrote hostname ci-3510.3.8-n-c6a118d14a to /sysroot/etc/hostname Nov 1 00:17:58.421216 systemd[1]: Finished flatcar-metadata-hostname.service. Nov 1 00:17:58.448999 kernel: audit: type=1130 audit(1761956278.425:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:58.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:58.427060 systemd[1]: Starting ignition-files.service... Nov 1 00:17:58.453883 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:17:58.478930 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (1012) Nov 1 00:17:58.491221 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:17:58.491252 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:17:58.491275 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:17:58.506262 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:17:58.520227 ignition[1031]: INFO : Ignition 2.14.0 Nov 1 00:17:58.520227 ignition[1031]: INFO : Stage: files Nov 1 00:17:58.532156 ignition[1031]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:17:58.532156 ignition[1031]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:17:58.532156 ignition[1031]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:17:58.532156 ignition[1031]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:17:58.564607 ignition[1031]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:17:58.564607 ignition[1031]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:17:58.588938 ignition[1031]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:17:58.597352 ignition[1031]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:17:58.611871 unknown[1031]: wrote ssh authorized keys file for user: core Nov 1 00:17:58.618885 ignition[1031]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:17:58.618885 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Nov 1 00:17:58.618885 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Nov 1 00:17:58.717250 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Nov 1 00:17:58.802004 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Nov 1 00:17:58.813859 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:17:58.813859 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:17:58.813859 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:17:58.813859 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:17:58.813859 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:17:58.813859 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:17:58.813859 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:17:58.813859 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem385778404" Nov 1 00:17:58.898466 ignition[1031]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem385778404": device or resource busy Nov 1 00:17:58.898466 ignition[1031]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem385778404", trying btrfs: device or resource busy Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem385778404" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem385778404" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem385778404" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem385778404" Nov 1 00:17:58.898466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Nov 1 00:17:58.868077 systemd[1]: mnt-oem385778404.mount: Deactivated successfully. Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1711798541" Nov 1 00:17:59.080156 ignition[1031]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1711798541": device or resource busy Nov 1 00:17:59.080156 ignition[1031]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1711798541", trying btrfs: device or resource busy Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1711798541" Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1711798541" Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem1711798541" Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem1711798541" Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:17:59.080156 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Nov 1 00:17:59.307339 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Nov 1 00:17:59.590134 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(13): [started] processing unit "waagent.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(13): [finished] processing unit "waagent.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(14): [started] processing unit "nvidia.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(14): [finished] processing unit "nvidia.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:17:59.603251 ignition[1031]: INFO : files: files passed Nov 1 00:17:59.603251 ignition[1031]: INFO : Ignition finished successfully Nov 1 00:17:59.816464 kernel: audit: type=1130 audit(1761956279.614:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.604220 systemd[1]: Finished ignition-files.service. Nov 1 00:17:59.639806 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:17:59.827153 initrd-setup-root-after-ignition[1056]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:17:59.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.645236 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:17:59.646089 systemd[1]: Starting ignition-quench.service... Nov 1 00:17:59.663951 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:17:59.664099 systemd[1]: Finished ignition-quench.service. Nov 1 00:17:59.687019 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:17:59.692790 systemd[1]: Reached target ignition-complete.target. Nov 1 00:17:59.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.708724 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:17:59.740832 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:17:59.740960 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:17:59.750863 systemd[1]: Reached target initrd-fs.target. Nov 1 00:17:59.762112 systemd[1]: Reached target initrd.target. Nov 1 00:17:59.773738 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:17:59.774688 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:17:59.822146 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:17:59.835533 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:17:59.861240 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:17:59.870153 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:17:59.879934 systemd[1]: Stopped target timers.target. Nov 1 00:18:00.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.888214 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:17:59.888334 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:18:00.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.897864 systemd[1]: Stopped target initrd.target. Nov 1 00:18:00.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.906181 systemd[1]: Stopped target basic.target. Nov 1 00:18:00.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.914378 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:18:00.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.924162 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:17:59.933464 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:18:00.066359 iscsid[882]: iscsid shutting down. Nov 1 00:17:59.942808 systemd[1]: Stopped target remote-fs.target. Nov 1 00:18:00.076808 ignition[1069]: INFO : Ignition 2.14.0 Nov 1 00:18:00.076808 ignition[1069]: INFO : Stage: umount Nov 1 00:18:00.076808 ignition[1069]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:18:00.076808 ignition[1069]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:18:00.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.950834 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:18:00.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.140725 ignition[1069]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:18:00.140725 ignition[1069]: INFO : umount: umount passed Nov 1 00:18:00.140725 ignition[1069]: INFO : Ignition finished successfully Nov 1 00:18:00.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.962178 systemd[1]: Stopped target sysinit.target. Nov 1 00:18:00.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.970427 systemd[1]: Stopped target local-fs.target. Nov 1 00:18:00.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.978323 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:18:00.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:17:59.987257 systemd[1]: Stopped target swap.target. Nov 1 00:17:59.994685 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:17:59.994800 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:18:00.003517 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:18:00.011562 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:18:00.011674 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:18:00.021013 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:18:00.021113 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:18:00.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.030167 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:18:00.030253 systemd[1]: Stopped ignition-files.service. Nov 1 00:18:00.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.038393 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Nov 1 00:18:00.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.038483 systemd[1]: Stopped flatcar-metadata-hostname.service. Nov 1 00:18:00.047564 systemd[1]: Stopping ignition-mount.service... Nov 1 00:18:00.066803 systemd[1]: Stopping iscsid.service... Nov 1 00:18:00.080368 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:18:00.080532 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:18:00.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.086909 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:18:00.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.333000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:18:00.100230 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:18:00.100404 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:18:00.105158 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:18:00.105263 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:18:00.119804 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:18:00.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.119943 systemd[1]: Stopped iscsid.service. Nov 1 00:18:00.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.137486 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:18:00.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.138025 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:18:00.138115 systemd[1]: Stopped ignition-mount.service. Nov 1 00:18:00.146779 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:18:00.146857 systemd[1]: Stopped ignition-disks.service. Nov 1 00:18:00.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.155908 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:18:00.156052 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:18:00.168746 systemd[1]: ignition-fetch.service: Deactivated successfully. Nov 1 00:18:00.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.168800 systemd[1]: Stopped ignition-fetch.service. Nov 1 00:18:00.471557 kernel: hv_netvsc 000d3a06-11b4-000d-3a06-11b4000d3a06 eth0: Data path switched from VF: enP53338s1 Nov 1 00:18:00.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.177162 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:18:00.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.177213 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:18:00.186414 systemd[1]: Stopped target paths.target. Nov 1 00:18:00.191044 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:18:00.203688 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:18:00.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.208717 systemd[1]: Stopped target slices.target. Nov 1 00:18:00.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.217269 systemd[1]: Stopped target sockets.target. Nov 1 00:18:00.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.225707 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:18:00.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.225766 systemd[1]: Closed iscsid.socket. Nov 1 00:18:00.235717 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:18:00.235769 systemd[1]: Stopped ignition-setup.service. Nov 1 00:18:00.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:00.250416 systemd[1]: Stopping iscsiuio.service... Nov 1 00:18:00.259567 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:18:00.259671 systemd[1]: Stopped iscsiuio.service. Nov 1 00:18:00.268526 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:18:00.268609 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:18:00.277995 systemd[1]: Stopped target network.target. Nov 1 00:18:00.282192 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:18:00.282239 systemd[1]: Closed iscsiuio.socket. Nov 1 00:18:00.291484 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:18:00.299585 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:18:00.311836 systemd-networkd[877]: eth0: DHCPv6 lease lost Nov 1 00:18:00.609000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:18:00.318115 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:18:00.318218 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:18:00.628436 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Nov 1 00:18:00.324078 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:18:00.324168 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:18:00.334129 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:18:00.334169 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:18:00.342731 systemd[1]: Stopping network-cleanup.service... Nov 1 00:18:00.360768 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:18:00.360847 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:18:00.370002 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:18:00.370054 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:18:00.383090 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:18:00.383144 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:18:00.391085 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:18:00.396267 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:18:00.410067 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:18:00.410239 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:18:00.420205 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:18:00.420249 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:18:00.431328 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:18:00.431387 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:18:00.440794 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:18:00.440854 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:18:00.449378 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:18:00.449423 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:18:00.467771 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:18:00.467826 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:18:00.477521 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:18:00.498747 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:18:00.498827 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:18:00.510113 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:18:00.510227 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:18:00.518666 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:18:00.518754 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:18:00.527661 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:18:00.527714 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:18:00.543793 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:18:00.543886 systemd[1]: Stopped network-cleanup.service. Nov 1 00:18:00.552572 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:18:00.561533 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:18:00.578194 systemd[1]: Switching root. Nov 1 00:18:00.629475 systemd-journald[276]: Journal stopped Nov 1 00:18:05.839183 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:18:05.839206 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:18:05.839217 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:18:05.839227 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:18:05.839235 kernel: SELinux: policy capability open_perms=1 Nov 1 00:18:05.839243 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:18:05.839252 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:18:05.839260 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:18:05.839268 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:18:05.839276 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:18:05.839284 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:18:05.839295 systemd[1]: Successfully loaded SELinux policy in 137.322ms. Nov 1 00:18:05.839306 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 13.014ms. Nov 1 00:18:05.839317 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:18:05.839327 systemd[1]: Detected virtualization microsoft. Nov 1 00:18:05.839337 systemd[1]: Detected architecture arm64. Nov 1 00:18:05.839346 systemd[1]: Detected first boot. Nov 1 00:18:05.839356 systemd[1]: Hostname set to . Nov 1 00:18:05.839365 systemd[1]: Initializing machine ID from random generator. Nov 1 00:18:05.839374 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:18:05.839382 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:18:05.839392 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:18:05.839404 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:18:05.839415 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:18:05.839431 kernel: kauditd_printk_skb: 58 callbacks suppressed Nov 1 00:18:05.839442 kernel: audit: type=1334 audit(1761956285.067:90): prog-id=12 op=LOAD Nov 1 00:18:05.839451 kernel: audit: type=1334 audit(1761956285.067:91): prog-id=3 op=UNLOAD Nov 1 00:18:05.839460 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:18:05.839469 kernel: audit: type=1334 audit(1761956285.073:92): prog-id=13 op=LOAD Nov 1 00:18:05.839480 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:18:05.839493 kernel: audit: type=1334 audit(1761956285.079:93): prog-id=14 op=LOAD Nov 1 00:18:05.839503 kernel: audit: type=1334 audit(1761956285.079:94): prog-id=4 op=UNLOAD Nov 1 00:18:05.839512 kernel: audit: type=1334 audit(1761956285.079:95): prog-id=5 op=UNLOAD Nov 1 00:18:05.839521 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:18:05.839531 kernel: audit: type=1131 audit(1761956285.081:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.839543 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:18:05.839554 kernel: audit: type=1334 audit(1761956285.115:97): prog-id=12 op=UNLOAD Nov 1 00:18:05.839563 kernel: audit: type=1130 audit(1761956285.126:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.839572 kernel: audit: type=1131 audit(1761956285.126:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.839581 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:18:05.839595 systemd[1]: Created slice system-getty.slice. Nov 1 00:18:05.839605 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:18:05.839614 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:18:05.839625 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:18:05.839639 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:18:05.839649 systemd[1]: Created slice user.slice. Nov 1 00:18:05.839658 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:18:05.839667 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:18:05.839679 systemd[1]: Set up automount boot.automount. Nov 1 00:18:05.839689 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:18:05.839698 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:18:05.839708 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:18:05.839717 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:18:05.839731 systemd[1]: Reached target integritysetup.target. Nov 1 00:18:05.839741 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:18:05.839751 systemd[1]: Reached target remote-fs.target. Nov 1 00:18:05.839760 systemd[1]: Reached target slices.target. Nov 1 00:18:05.839770 systemd[1]: Reached target swap.target. Nov 1 00:18:05.839779 systemd[1]: Reached target torcx.target. Nov 1 00:18:05.839788 systemd[1]: Reached target veritysetup.target. Nov 1 00:18:05.839800 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:18:05.839811 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:18:05.839821 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:18:05.839830 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:18:05.839841 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:18:05.839851 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:18:05.839861 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:18:05.839871 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:18:05.839884 systemd[1]: Mounting media.mount... Nov 1 00:18:05.839893 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:18:05.839903 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:18:05.839919 systemd[1]: Mounting tmp.mount... Nov 1 00:18:05.839929 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:18:05.839939 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:05.839949 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:18:05.839963 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:18:05.839973 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:05.839982 systemd[1]: Starting modprobe@drm.service... Nov 1 00:18:05.839991 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:05.840001 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:18:05.840011 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:05.840024 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:18:05.840034 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:18:05.840044 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:18:05.840054 kernel: fuse: init (API version 7.34) Nov 1 00:18:05.840064 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:18:05.840077 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:18:05.840086 systemd[1]: Stopped systemd-journald.service. Nov 1 00:18:05.840096 kernel: loop: module loaded Nov 1 00:18:05.840105 systemd[1]: systemd-journald.service: Consumed 2.877s CPU time. Nov 1 00:18:05.840115 systemd[1]: Starting systemd-journald.service... Nov 1 00:18:05.840131 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:18:05.840143 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:18:05.840153 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:18:05.840163 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:18:05.840172 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:18:05.840185 systemd-journald[1209]: Journal started Nov 1 00:18:05.840232 systemd-journald[1209]: Runtime Journal (/run/log/journal/f25b19fb002244f281d6e9e19f88d1a0) is 8.0M, max 78.5M, 70.5M free. Nov 1 00:18:01.343000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:18:01.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:18:01.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:18:01.661000 audit: BPF prog-id=10 op=LOAD Nov 1 00:18:01.661000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:18:01.661000 audit: BPF prog-id=11 op=LOAD Nov 1 00:18:01.661000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:18:02.036000 audit[1103]: AVC avc: denied { associate } for pid=1103 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:18:02.036000 audit[1103]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40000227ec a1=4000028ac8 a2=4000026d00 a3=32 items=0 ppid=1086 pid=1103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:02.036000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:18:02.047000 audit[1103]: AVC avc: denied { associate } for pid=1103 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:18:02.047000 audit[1103]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40000228c9 a2=1ed a3=0 items=2 ppid=1086 pid=1103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:02.047000 audit: CWD cwd="/" Nov 1 00:18:02.047000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:02.047000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:02.047000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:18:05.067000 audit: BPF prog-id=12 op=LOAD Nov 1 00:18:05.067000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:18:05.073000 audit: BPF prog-id=13 op=LOAD Nov 1 00:18:05.079000 audit: BPF prog-id=14 op=LOAD Nov 1 00:18:05.079000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:18:05.079000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:18:05.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.115000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:18:05.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.763000 audit: BPF prog-id=15 op=LOAD Nov 1 00:18:05.763000 audit: BPF prog-id=16 op=LOAD Nov 1 00:18:05.763000 audit: BPF prog-id=17 op=LOAD Nov 1 00:18:05.763000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:18:05.763000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:18:05.836000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:18:05.836000 audit[1209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffe910c430 a2=4000 a3=1 items=0 ppid=1 pid=1209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:05.836000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:18:02.015805 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:18:05.066376 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:18:02.024194 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:18:05.066389 systemd[1]: Unnecessary job was removed for dev-sda6.device. Nov 1 00:18:02.024221 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:18:05.081796 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:18:02.024262 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:18:05.082188 systemd[1]: systemd-journald.service: Consumed 2.877s CPU time. Nov 1 00:18:02.024273 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:18:02.024314 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:18:02.024326 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:18:02.024544 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:18:02.024580 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:18:02.024592 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:18:02.032617 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:18:02.032652 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:18:02.032672 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:18:02.032687 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:18:02.032706 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:18:02.032718 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:02Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:18:04.024327 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:04Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:18:04.024590 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:04Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:18:04.024697 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:04Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:18:04.024856 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:04Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:18:04.024904 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:04Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:18:04.024974 /usr/lib/systemd/system-generators/torcx-generator[1103]: time="2025-11-01T00:18:04Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:18:05.845827 systemd[1]: Stopped verity-setup.service. Nov 1 00:18:05.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.864245 systemd[1]: Started systemd-journald.service. Nov 1 00:18:05.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.864094 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:18:05.869456 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:18:05.874274 systemd[1]: Mounted media.mount. Nov 1 00:18:05.878756 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:18:05.884564 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:18:05.889433 systemd[1]: Mounted tmp.mount. Nov 1 00:18:05.893602 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:18:05.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.899794 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:18:05.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.905165 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:18:05.905294 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:18:05.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.910833 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:05.910972 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:05.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.915000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.917086 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:18:05.917213 systemd[1]: Finished modprobe@drm.service. Nov 1 00:18:05.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.922383 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:05.922510 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:05.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.929112 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:18:05.929240 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:18:05.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.934994 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:05.935125 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:05.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.941233 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:18:05.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.948643 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:18:05.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.955603 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:18:05.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.962843 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:18:05.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:05.969834 systemd[1]: Reached target network-pre.target. Nov 1 00:18:05.976293 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:18:05.982682 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:18:05.987345 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:18:05.996609 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:18:06.002799 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:18:06.008231 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:18:06.009454 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:18:06.014515 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:18:06.015756 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:18:06.022876 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:18:06.029490 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:18:06.033601 systemd-journald[1209]: Time spent on flushing to /var/log/journal/f25b19fb002244f281d6e9e19f88d1a0 is 16.026ms for 1072 entries. Nov 1 00:18:06.033601 systemd-journald[1209]: System Journal (/var/log/journal/f25b19fb002244f281d6e9e19f88d1a0) is 8.0M, max 2.6G, 2.6G free. Nov 1 00:18:06.124127 systemd-journald[1209]: Received client request to flush runtime journal. Nov 1 00:18:06.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:06.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:06.045661 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:18:06.051934 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:18:06.124564 udevadm[1223]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Nov 1 00:18:06.061989 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:18:06.068313 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:18:06.117164 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:18:06.125135 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:18:06.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:06.272034 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:18:06.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:06.692085 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:18:06.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:06.696000 audit: BPF prog-id=18 op=LOAD Nov 1 00:18:06.696000 audit: BPF prog-id=19 op=LOAD Nov 1 00:18:06.696000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:18:06.696000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:18:06.698296 systemd[1]: Starting systemd-udevd.service... Nov 1 00:18:06.717112 systemd-udevd[1226]: Using default interface naming scheme 'v252'. Nov 1 00:18:06.963418 systemd[1]: Started systemd-udevd.service. Nov 1 00:18:06.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:06.972000 audit: BPF prog-id=20 op=LOAD Nov 1 00:18:06.975428 systemd[1]: Starting systemd-networkd.service... Nov 1 00:18:06.994000 audit: BPF prog-id=21 op=LOAD Nov 1 00:18:06.994000 audit: BPF prog-id=22 op=LOAD Nov 1 00:18:06.994000 audit: BPF prog-id=23 op=LOAD Nov 1 00:18:06.996274 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:18:07.007880 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Nov 1 00:18:07.053875 systemd[1]: Started systemd-userdbd.service. Nov 1 00:18:07.056935 kernel: mousedev: PS/2 mouse device common for all mice Nov 1 00:18:07.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:07.090000 audit[1230]: AVC avc: denied { confidentiality } for pid=1230 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:18:07.120939 kernel: hv_vmbus: registering driver hv_balloon Nov 1 00:18:07.121046 kernel: hv_vmbus: registering driver hyperv_fb Nov 1 00:18:07.136468 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Nov 1 00:18:07.136575 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Nov 1 00:18:07.136601 kernel: hv_balloon: Memory hot add disabled on ARM64 Nov 1 00:18:07.136621 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Nov 1 00:18:07.150499 kernel: hv_utils: Registering HyperV Utility Driver Nov 1 00:18:07.157768 kernel: Console: switching to colour dummy device 80x25 Nov 1 00:18:07.157949 kernel: hv_vmbus: registering driver hv_utils Nov 1 00:18:07.171340 kernel: hv_utils: Heartbeat IC version 3.0 Nov 1 00:18:07.171448 kernel: hv_utils: Shutdown IC version 3.2 Nov 1 00:18:07.171469 kernel: hv_utils: TimeSync IC version 4.0 Nov 1 00:18:07.399728 kernel: Console: switching to colour frame buffer device 128x48 Nov 1 00:18:07.090000 audit[1230]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaad93ce630 a1=aa2c a2=ffff915424b0 a3=aaaad932e010 items=12 ppid=1226 pid=1230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:07.090000 audit: CWD cwd="/" Nov 1 00:18:07.090000 audit: PATH item=0 name=(null) inode=6435 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=1 name=(null) inode=10705 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=2 name=(null) inode=10705 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=3 name=(null) inode=10706 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=4 name=(null) inode=10705 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=5 name=(null) inode=10707 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=6 name=(null) inode=10705 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=7 name=(null) inode=10708 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=8 name=(null) inode=10705 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=9 name=(null) inode=10709 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=10 name=(null) inode=10705 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PATH item=11 name=(null) inode=10710 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:07.090000 audit: PROCTITLE proctitle="(udev-worker)" Nov 1 00:18:07.498986 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:18:07.505222 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:18:07.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:07.512043 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:18:07.544184 systemd-networkd[1245]: lo: Link UP Nov 1 00:18:07.544200 systemd-networkd[1245]: lo: Gained carrier Nov 1 00:18:07.544717 systemd-networkd[1245]: Enumeration completed Nov 1 00:18:07.544865 systemd[1]: Started systemd-networkd.service. Nov 1 00:18:07.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:07.551284 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:18:07.557445 systemd-networkd[1245]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:18:07.607610 lvm[1303]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:18:07.612656 kernel: mlx5_core d05a:00:02.0 enP53338s1: Link up Nov 1 00:18:07.612897 kernel: buffer_size[0]=0 is not enough for lossless buffer Nov 1 00:18:07.640979 kernel: hv_netvsc 000d3a06-11b4-000d-3a06-11b4000d3a06 eth0: Data path switched to VF: enP53338s1 Nov 1 00:18:07.642343 systemd-networkd[1245]: enP53338s1: Link UP Nov 1 00:18:07.642885 systemd-networkd[1245]: eth0: Link UP Nov 1 00:18:07.642957 systemd-networkd[1245]: eth0: Gained carrier Nov 1 00:18:07.649646 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:18:07.651220 systemd-networkd[1245]: enP53338s1: Gained carrier Nov 1 00:18:07.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:07.655008 systemd[1]: Reached target cryptsetup.target. Nov 1 00:18:07.660794 systemd[1]: Starting lvm2-activation.service... Nov 1 00:18:07.665284 lvm[1305]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:18:07.669777 systemd-networkd[1245]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Nov 1 00:18:07.692709 systemd[1]: Finished lvm2-activation.service. Nov 1 00:18:07.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:07.697318 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:18:07.702396 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:18:07.702427 systemd[1]: Reached target local-fs.target. Nov 1 00:18:07.707271 systemd[1]: Reached target machines.target. Nov 1 00:18:07.713330 systemd[1]: Starting ldconfig.service... Nov 1 00:18:07.724134 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:07.724204 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:07.725480 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:18:07.731331 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:18:07.738359 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:18:07.744410 systemd[1]: Starting systemd-sysext.service... Nov 1 00:18:07.749379 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1307 (bootctl) Nov 1 00:18:07.750875 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:18:08.004588 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:18:08.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.124781 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:18:08.125871 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:18:08.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.151717 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:18:08.167002 systemd-fsck[1314]: fsck.fat 4.2 (2021-01-31) Nov 1 00:18:08.167002 systemd-fsck[1314]: /dev/sda1: 236 files, 117310/258078 clusters Nov 1 00:18:08.169269 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:18:08.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.177878 systemd[1]: Mounting boot.mount... Nov 1 00:18:08.187756 systemd[1]: Mounted boot.mount. Nov 1 00:18:08.203880 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:18:08.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.262769 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:18:08.262981 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:18:08.410651 kernel: loop0: detected capacity change from 0 to 211168 Nov 1 00:18:08.545657 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:18:08.572718 kernel: loop1: detected capacity change from 0 to 211168 Nov 1 00:18:08.587723 (sd-sysext)[1323]: Using extensions 'kubernetes'. Nov 1 00:18:08.588403 (sd-sysext)[1323]: Merged extensions into '/usr'. Nov 1 00:18:08.606530 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:18:08.611195 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:08.612645 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:08.618612 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:08.624334 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:08.628580 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:08.628746 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:08.631347 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:18:08.636346 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:08.636482 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:08.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.641749 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:08.641878 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:08.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.647896 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:08.648018 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:08.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.653501 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:18:08.653609 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:18:08.654774 systemd[1]: Finished systemd-sysext.service. Nov 1 00:18:08.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.660846 systemd[1]: Starting ensure-sysext.service... Nov 1 00:18:08.666479 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:18:08.673076 systemd[1]: Reloading. Nov 1 00:18:08.730036 /usr/lib/systemd/system-generators/torcx-generator[1350]: time="2025-11-01T00:18:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:18:08.730372 /usr/lib/systemd/system-generators/torcx-generator[1350]: time="2025-11-01T00:18:08Z" level=info msg="torcx already run" Nov 1 00:18:08.758472 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:18:08.815440 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:18:08.815459 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:18:08.822686 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:18:08.832193 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:18:08.899000 audit: BPF prog-id=24 op=LOAD Nov 1 00:18:08.899000 audit: BPF prog-id=25 op=LOAD Nov 1 00:18:08.899000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:18:08.899000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:18:08.900000 audit: BPF prog-id=26 op=LOAD Nov 1 00:18:08.900000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:18:08.901000 audit: BPF prog-id=27 op=LOAD Nov 1 00:18:08.901000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:18:08.901000 audit: BPF prog-id=28 op=LOAD Nov 1 00:18:08.901000 audit: BPF prog-id=29 op=LOAD Nov 1 00:18:08.901000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:18:08.901000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:18:08.902000 audit: BPF prog-id=30 op=LOAD Nov 1 00:18:08.902000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:18:08.902000 audit: BPF prog-id=31 op=LOAD Nov 1 00:18:08.902000 audit: BPF prog-id=32 op=LOAD Nov 1 00:18:08.902000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:18:08.902000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:18:08.908684 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:18:08.915744 systemd-networkd[1245]: eth0: Gained IPv6LL Nov 1 00:18:08.918812 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:18:08.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.927610 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:08.929187 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:08.934963 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:08.940725 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:08.944786 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:08.944938 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:08.945820 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:08.945976 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:08.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.951392 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:08.951528 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:08.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.957723 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:08.957857 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:08.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.964331 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:08.966188 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:08.972317 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:08.979373 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:08.983609 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:08.983847 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:08.984962 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:08.985133 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:08.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.990278 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:08.990436 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:08.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:08.996183 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:08.996369 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:09.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.007191 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:09.008506 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:09.014230 systemd[1]: Starting modprobe@drm.service... Nov 1 00:18:09.019339 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:09.025234 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:09.029804 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:09.029867 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:09.030576 systemd[1]: Finished ensure-sysext.service. Nov 1 00:18:09.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.035587 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:09.035770 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:09.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.041038 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:18:09.041168 systemd[1]: Finished modprobe@drm.service. Nov 1 00:18:09.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.046048 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:09.046174 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:09.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.051372 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:09.051489 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:09.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.058614 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:18:09.058674 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:18:09.766165 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:18:09.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.772875 systemd[1]: Starting audit-rules.service... Nov 1 00:18:09.778268 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:18:09.784350 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:18:09.788000 audit: BPF prog-id=33 op=LOAD Nov 1 00:18:09.791377 systemd[1]: Starting systemd-resolved.service... Nov 1 00:18:09.795000 audit: BPF prog-id=34 op=LOAD Nov 1 00:18:09.798247 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:18:09.806063 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:18:09.812001 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:18:09.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.817142 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:18:09.824000 audit[1432]: SYSTEM_BOOT pid=1432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.830141 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:18:09.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.880025 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:18:09.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.885304 systemd[1]: Reached target time-set.target. Nov 1 00:18:09.902422 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:18:09.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.917898 systemd-resolved[1425]: Positive Trust Anchors: Nov 1 00:18:09.918249 systemd-resolved[1425]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:18:09.918340 systemd-resolved[1425]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:18:09.941139 systemd-resolved[1425]: Using system hostname 'ci-3510.3.8-n-c6a118d14a'. Nov 1 00:18:09.942976 systemd[1]: Started systemd-resolved.service. Nov 1 00:18:09.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:09.947601 systemd[1]: Reached target network.target. Nov 1 00:18:09.951904 systemd[1]: Reached target network-online.target. Nov 1 00:18:09.956828 systemd[1]: Reached target nss-lookup.target. Nov 1 00:18:09.968000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:18:09.968000 audit[1442]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff683fcd0 a2=420 a3=0 items=0 ppid=1421 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:09.968000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:18:09.970809 augenrules[1442]: No rules Nov 1 00:18:09.971763 systemd[1]: Finished audit-rules.service. Nov 1 00:18:10.126117 systemd-timesyncd[1429]: Contacted time server 155.248.196.28:123 (0.flatcar.pool.ntp.org). Nov 1 00:18:10.126188 systemd-timesyncd[1429]: Initial clock synchronization to Sat 2025-11-01 00:18:10.125924 UTC. Nov 1 00:18:10.959581 ldconfig[1306]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:18:10.978966 systemd[1]: Finished ldconfig.service. Nov 1 00:18:10.984373 systemd[1]: Starting systemd-update-done.service... Nov 1 00:18:11.002447 systemd[1]: Finished systemd-update-done.service. Nov 1 00:18:11.007740 systemd[1]: Reached target sysinit.target. Nov 1 00:18:11.012358 systemd[1]: Started motdgen.path. Nov 1 00:18:11.016436 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:18:11.023057 systemd[1]: Started logrotate.timer. Nov 1 00:18:11.027175 systemd[1]: Started mdadm.timer. Nov 1 00:18:11.030822 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:18:11.035609 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:18:11.035673 systemd[1]: Reached target paths.target. Nov 1 00:18:11.039663 systemd[1]: Reached target timers.target. Nov 1 00:18:11.044715 systemd[1]: Listening on dbus.socket. Nov 1 00:18:11.050219 systemd[1]: Starting docker.socket... Nov 1 00:18:11.066265 systemd[1]: Listening on sshd.socket. Nov 1 00:18:11.070996 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:11.071523 systemd[1]: Listening on docker.socket. Nov 1 00:18:11.076531 systemd[1]: Reached target sockets.target. Nov 1 00:18:11.081025 systemd[1]: Reached target basic.target. Nov 1 00:18:11.085346 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:18:11.085374 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:18:11.086514 systemd[1]: Starting containerd.service... Nov 1 00:18:11.091697 systemd[1]: Starting dbus.service... Nov 1 00:18:11.096352 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:18:11.101882 systemd[1]: Starting extend-filesystems.service... Nov 1 00:18:11.106825 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:18:11.132947 jq[1452]: false Nov 1 00:18:11.144835 systemd[1]: Starting kubelet.service... Nov 1 00:18:11.146798 extend-filesystems[1453]: Found loop1 Nov 1 00:18:11.153991 extend-filesystems[1453]: Found sda Nov 1 00:18:11.153991 extend-filesystems[1453]: Found sda1 Nov 1 00:18:11.153991 extend-filesystems[1453]: Found sda2 Nov 1 00:18:11.153991 extend-filesystems[1453]: Found sda3 Nov 1 00:18:11.153991 extend-filesystems[1453]: Found usr Nov 1 00:18:11.153991 extend-filesystems[1453]: Found sda4 Nov 1 00:18:11.153991 extend-filesystems[1453]: Found sda6 Nov 1 00:18:11.153991 extend-filesystems[1453]: Found sda7 Nov 1 00:18:11.153991 extend-filesystems[1453]: Found sda9 Nov 1 00:18:11.153991 extend-filesystems[1453]: Checking size of /dev/sda9 Nov 1 00:18:11.149976 systemd[1]: Starting motdgen.service... Nov 1 00:18:11.288740 extend-filesystems[1453]: Old size kept for /dev/sda9 Nov 1 00:18:11.288740 extend-filesystems[1453]: Found sr0 Nov 1 00:18:11.167791 systemd[1]: Started nvidia.service. Nov 1 00:18:11.184102 systemd[1]: Starting prepare-helm.service... Nov 1 00:18:11.195029 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:18:11.219909 systemd[1]: Starting sshd-keygen.service... Nov 1 00:18:11.235581 systemd[1]: Starting systemd-logind.service... Nov 1 00:18:11.243487 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:11.243573 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:18:11.244201 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:18:11.348447 jq[1485]: true Nov 1 00:18:11.245504 systemd[1]: Starting update-engine.service... Nov 1 00:18:11.257614 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:18:11.271597 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:18:11.271845 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:18:11.353929 jq[1492]: true Nov 1 00:18:11.272176 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:18:11.272346 systemd[1]: Finished extend-filesystems.service. Nov 1 00:18:11.282116 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:18:11.282340 systemd[1]: Finished motdgen.service. Nov 1 00:18:11.296271 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:18:11.296469 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:18:11.354586 systemd-logind[1480]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 1 00:18:11.356617 systemd-logind[1480]: New seat seat0. Nov 1 00:18:11.363526 dbus-daemon[1451]: [system] SELinux support is enabled Nov 1 00:18:11.363757 systemd[1]: Started dbus.service. Nov 1 00:18:11.370741 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:18:11.370779 systemd[1]: Reached target system-config.target. Nov 1 00:18:11.379340 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:18:11.379373 systemd[1]: Reached target user-config.target. Nov 1 00:18:11.388898 dbus-daemon[1451]: [system] Successfully activated service 'org.freedesktop.systemd1' Nov 1 00:18:11.389618 systemd[1]: Started systemd-logind.service. Nov 1 00:18:11.403989 systemd[1]: nvidia.service: Deactivated successfully. Nov 1 00:18:11.421321 env[1493]: time="2025-11-01T00:18:11.421243939Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:18:11.472894 bash[1539]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:18:11.473775 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:18:11.491565 env[1493]: time="2025-11-01T00:18:11.491519534Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:18:11.492236 env[1493]: time="2025-11-01T00:18:11.492209691Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:11.498297 env[1493]: time="2025-11-01T00:18:11.498246107Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:18:11.498456 env[1493]: time="2025-11-01T00:18:11.498437986Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:11.499553 env[1493]: time="2025-11-01T00:18:11.499518182Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:18:11.499734 env[1493]: time="2025-11-01T00:18:11.499716341Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:11.500812 env[1493]: time="2025-11-01T00:18:11.500783456Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:18:11.502375 env[1493]: time="2025-11-01T00:18:11.502343730Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:11.502647 env[1493]: time="2025-11-01T00:18:11.502604369Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:11.503001 env[1493]: time="2025-11-01T00:18:11.502974568Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:11.503873 env[1493]: time="2025-11-01T00:18:11.503843684Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:18:11.503973 env[1493]: time="2025-11-01T00:18:11.503957044Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:18:11.504109 env[1493]: time="2025-11-01T00:18:11.504087723Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:18:11.504397 env[1493]: time="2025-11-01T00:18:11.504373842Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523090046Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523171646Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523186606Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523238685Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523257405Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523272365Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523285725Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523741163Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523762043Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523776803Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523801963Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523815843Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.523999402Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:18:11.524724 env[1493]: time="2025-11-01T00:18:11.524096362Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524397801Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524437681Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524452920Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524502880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524528480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524541480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524553120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524565200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524579760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524601720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524613640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525089 env[1493]: time="2025-11-01T00:18:11.524641840Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:18:11.525789 env[1493]: time="2025-11-01T00:18:11.525450396Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525789 env[1493]: time="2025-11-01T00:18:11.525477316Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525789 env[1493]: time="2025-11-01T00:18:11.525505556Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.525789 env[1493]: time="2025-11-01T00:18:11.525517716Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:18:11.525789 env[1493]: time="2025-11-01T00:18:11.525534676Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:18:11.525789 env[1493]: time="2025-11-01T00:18:11.525546636Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:18:11.525789 env[1493]: time="2025-11-01T00:18:11.525575636Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:18:11.525789 env[1493]: time="2025-11-01T00:18:11.525610476Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:18:11.526184 env[1493]: time="2025-11-01T00:18:11.526068634Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:18:11.526184 env[1493]: time="2025-11-01T00:18:11.526152274Z" level=info msg="Connect containerd service" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.526406113Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527100350Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527191829Z" level=info msg="Start subscribing containerd event" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527233509Z" level=info msg="Start recovering state" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527303509Z" level=info msg="Start event monitor" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527322949Z" level=info msg="Start snapshots syncer" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527332429Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527339949Z" level=info msg="Start streaming server" Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527728707Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:18:11.532912 env[1493]: time="2025-11-01T00:18:11.527775667Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:18:11.527930 systemd[1]: Started containerd.service. Nov 1 00:18:11.533488 update_engine[1483]: I1101 00:18:11.526661 1483 main.cc:92] Flatcar Update Engine starting Nov 1 00:18:11.551484 env[1493]: time="2025-11-01T00:18:11.527861427Z" level=info msg="containerd successfully booted in 0.108186s" Nov 1 00:18:11.559103 update_engine[1483]: I1101 00:18:11.559057 1483 update_check_scheduler.cc:74] Next update check in 3m48s Nov 1 00:18:11.559237 systemd[1]: Started update-engine.service. Nov 1 00:18:11.569850 systemd[1]: Started locksmithd.service. Nov 1 00:18:11.670599 tar[1491]: linux-arm64/LICENSE Nov 1 00:18:11.670599 tar[1491]: linux-arm64/helm Nov 1 00:18:12.222673 tar[1491]: linux-arm64/README.md Nov 1 00:18:12.227480 systemd[1]: Finished prepare-helm.service. Nov 1 00:18:12.343870 systemd[1]: Started kubelet.service. Nov 1 00:18:12.364871 locksmithd[1563]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:18:12.728515 sshd_keygen[1481]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:18:12.750762 systemd[1]: Finished sshd-keygen.service. Nov 1 00:18:12.757302 systemd[1]: Starting issuegen.service... Nov 1 00:18:12.763468 systemd[1]: Started waagent.service. Nov 1 00:18:12.771972 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:18:12.772153 systemd[1]: Finished issuegen.service. Nov 1 00:18:12.778933 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:18:12.809525 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:18:12.816644 systemd[1]: Started getty@tty1.service. Nov 1 00:18:12.822908 systemd[1]: Started serial-getty@ttyAMA0.service. Nov 1 00:18:12.828554 systemd[1]: Reached target getty.target. Nov 1 00:18:12.833327 systemd[1]: Reached target multi-user.target. Nov 1 00:18:12.840788 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:18:12.851465 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:18:12.851662 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:18:12.857731 systemd[1]: Startup finished in 748ms (kernel) + 8.516s (initrd) + 11.476s (userspace) = 20.741s. Nov 1 00:18:12.957712 kubelet[1572]: E1101 00:18:12.957655 1572 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:18:12.959905 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:18:12.960043 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:18:13.103754 login[1591]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Nov 1 00:18:13.113273 login[1592]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Nov 1 00:18:13.160044 systemd[1]: Created slice user-500.slice. Nov 1 00:18:13.161258 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:18:13.164134 systemd-logind[1480]: New session 1 of user core. Nov 1 00:18:13.185101 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:18:13.186611 systemd[1]: Starting user@500.service... Nov 1 00:18:13.204527 (systemd)[1595]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:13.370103 systemd[1595]: Queued start job for default target default.target. Nov 1 00:18:13.370696 systemd[1595]: Reached target paths.target. Nov 1 00:18:13.370717 systemd[1595]: Reached target sockets.target. Nov 1 00:18:13.370729 systemd[1595]: Reached target timers.target. Nov 1 00:18:13.370739 systemd[1595]: Reached target basic.target. Nov 1 00:18:13.370789 systemd[1595]: Reached target default.target. Nov 1 00:18:13.370814 systemd[1595]: Startup finished in 159ms. Nov 1 00:18:13.370862 systemd[1]: Started user@500.service. Nov 1 00:18:13.371795 systemd[1]: Started session-1.scope. Nov 1 00:18:14.104140 login[1591]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Nov 1 00:18:14.108781 systemd[1]: Started session-2.scope. Nov 1 00:18:14.109132 systemd-logind[1480]: New session 2 of user core. Nov 1 00:18:22.966176 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:18:22.966358 systemd[1]: Stopped kubelet.service. Nov 1 00:18:22.967779 systemd[1]: Starting kubelet.service... Nov 1 00:18:23.105222 systemd[1]: Started kubelet.service. Nov 1 00:18:23.170731 kubelet[1621]: E1101 00:18:23.170689 1621 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:18:23.173891 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:18:23.174019 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:18:25.316903 waagent[1587]: 2025-11-01T00:18:25.316789Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Nov 1 00:18:25.359011 waagent[1587]: 2025-11-01T00:18:25.358913Z INFO Daemon Daemon OS: flatcar 3510.3.8 Nov 1 00:18:25.363634 waagent[1587]: 2025-11-01T00:18:25.363548Z INFO Daemon Daemon Python: 3.9.16 Nov 1 00:18:25.368153 waagent[1587]: 2025-11-01T00:18:25.368051Z INFO Daemon Daemon Run daemon Nov 1 00:18:25.372364 waagent[1587]: 2025-11-01T00:18:25.372294Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Nov 1 00:18:25.424590 waagent[1587]: 2025-11-01T00:18:25.424443Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Nov 1 00:18:25.439943 waagent[1587]: 2025-11-01T00:18:25.439803Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Nov 1 00:18:25.449895 waagent[1587]: 2025-11-01T00:18:25.449799Z INFO Daemon Daemon cloud-init is enabled: False Nov 1 00:18:25.454990 waagent[1587]: 2025-11-01T00:18:25.454900Z INFO Daemon Daemon Using waagent for provisioning Nov 1 00:18:25.461608 waagent[1587]: 2025-11-01T00:18:25.461525Z INFO Daemon Daemon Activate resource disk Nov 1 00:18:25.466703 waagent[1587]: 2025-11-01T00:18:25.466601Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Nov 1 00:18:25.481078 waagent[1587]: 2025-11-01T00:18:25.480986Z INFO Daemon Daemon Found device: None Nov 1 00:18:25.485814 waagent[1587]: 2025-11-01T00:18:25.485730Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Nov 1 00:18:25.494657 waagent[1587]: 2025-11-01T00:18:25.494533Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Nov 1 00:18:25.507057 waagent[1587]: 2025-11-01T00:18:25.506982Z INFO Daemon Daemon Clean protocol and wireserver endpoint Nov 1 00:18:25.513074 waagent[1587]: 2025-11-01T00:18:25.512988Z INFO Daemon Daemon Running default provisioning handler Nov 1 00:18:25.526678 waagent[1587]: 2025-11-01T00:18:25.526501Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Nov 1 00:18:25.542155 waagent[1587]: 2025-11-01T00:18:25.542005Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Nov 1 00:18:25.552031 waagent[1587]: 2025-11-01T00:18:25.551935Z INFO Daemon Daemon cloud-init is enabled: False Nov 1 00:18:25.557307 waagent[1587]: 2025-11-01T00:18:25.557209Z INFO Daemon Daemon Copying ovf-env.xml Nov 1 00:18:25.829140 waagent[1587]: 2025-11-01T00:18:25.828987Z INFO Daemon Daemon Successfully mounted dvd Nov 1 00:18:26.019801 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Nov 1 00:18:26.141649 waagent[1587]: 2025-11-01T00:18:26.141412Z INFO Daemon Daemon Detect protocol endpoint Nov 1 00:18:26.147063 waagent[1587]: 2025-11-01T00:18:26.146976Z INFO Daemon Daemon Clean protocol and wireserver endpoint Nov 1 00:18:26.153485 waagent[1587]: 2025-11-01T00:18:26.153406Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Nov 1 00:18:26.161124 waagent[1587]: 2025-11-01T00:18:26.161044Z INFO Daemon Daemon Test for route to 168.63.129.16 Nov 1 00:18:26.167606 waagent[1587]: 2025-11-01T00:18:26.167529Z INFO Daemon Daemon Route to 168.63.129.16 exists Nov 1 00:18:26.173550 waagent[1587]: 2025-11-01T00:18:26.173468Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Nov 1 00:18:26.539675 waagent[1587]: 2025-11-01T00:18:26.539581Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Nov 1 00:18:26.547273 waagent[1587]: 2025-11-01T00:18:26.547220Z INFO Daemon Daemon Wire protocol version:2012-11-30 Nov 1 00:18:26.552928 waagent[1587]: 2025-11-01T00:18:26.552838Z INFO Daemon Daemon Server preferred version:2015-04-05 Nov 1 00:18:27.376429 waagent[1587]: 2025-11-01T00:18:27.376269Z INFO Daemon Daemon Initializing goal state during protocol detection Nov 1 00:18:27.393889 waagent[1587]: 2025-11-01T00:18:27.393786Z INFO Daemon Daemon Forcing an update of the goal state.. Nov 1 00:18:27.401379 waagent[1587]: 2025-11-01T00:18:27.401284Z INFO Daemon Daemon Fetching goal state [incarnation 1] Nov 1 00:18:27.475547 waagent[1587]: 2025-11-01T00:18:27.475393Z INFO Daemon Daemon Found private key matching thumbprint 77B1F1B159A941C229FDD5FC4559C4780CB544B2 Nov 1 00:18:27.485807 waagent[1587]: 2025-11-01T00:18:27.485705Z INFO Daemon Daemon Fetch goal state completed Nov 1 00:18:27.514751 waagent[1587]: 2025-11-01T00:18:27.514688Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 5f5f5454-9416-41eb-961c-e37e59197a20 New eTag: 2112377560239760647] Nov 1 00:18:27.527835 waagent[1587]: 2025-11-01T00:18:27.527743Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Nov 1 00:18:27.545982 waagent[1587]: 2025-11-01T00:18:27.545915Z INFO Daemon Daemon Starting provisioning Nov 1 00:18:27.551873 waagent[1587]: 2025-11-01T00:18:27.551774Z INFO Daemon Daemon Handle ovf-env.xml. Nov 1 00:18:27.557747 waagent[1587]: 2025-11-01T00:18:27.557649Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-c6a118d14a] Nov 1 00:18:27.652608 waagent[1587]: 2025-11-01T00:18:27.652467Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-c6a118d14a] Nov 1 00:18:27.659956 waagent[1587]: 2025-11-01T00:18:27.659855Z INFO Daemon Daemon Examine /proc/net/route for primary interface Nov 1 00:18:27.667895 waagent[1587]: 2025-11-01T00:18:27.667805Z INFO Daemon Daemon Primary interface is [eth0] Nov 1 00:18:27.685963 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Nov 1 00:18:27.686134 systemd[1]: Stopped systemd-networkd-wait-online.service. Nov 1 00:18:27.686193 systemd[1]: Stopping systemd-networkd-wait-online.service... Nov 1 00:18:27.686437 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:18:27.691676 systemd-networkd[1245]: eth0: DHCPv6 lease lost Nov 1 00:18:27.693409 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:18:27.693606 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:18:27.695954 systemd[1]: Starting systemd-networkd.service... Nov 1 00:18:27.726373 systemd-networkd[1647]: enP53338s1: Link UP Nov 1 00:18:27.726386 systemd-networkd[1647]: enP53338s1: Gained carrier Nov 1 00:18:27.727465 systemd-networkd[1647]: eth0: Link UP Nov 1 00:18:27.727476 systemd-networkd[1647]: eth0: Gained carrier Nov 1 00:18:27.727913 systemd-networkd[1647]: lo: Link UP Nov 1 00:18:27.727922 systemd-networkd[1647]: lo: Gained carrier Nov 1 00:18:27.728178 systemd-networkd[1647]: eth0: Gained IPv6LL Nov 1 00:18:27.728403 systemd-networkd[1647]: Enumeration completed Nov 1 00:18:27.728523 systemd[1]: Started systemd-networkd.service. Nov 1 00:18:27.729043 systemd-networkd[1647]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:18:27.730409 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:18:27.731734 waagent[1587]: 2025-11-01T00:18:27.731319Z INFO Daemon Daemon Create user account if not exists Nov 1 00:18:27.739876 waagent[1587]: 2025-11-01T00:18:27.739453Z INFO Daemon Daemon User core already exists, skip useradd Nov 1 00:18:27.746728 waagent[1587]: 2025-11-01T00:18:27.746608Z INFO Daemon Daemon Configure sudoer Nov 1 00:18:27.753710 systemd-networkd[1647]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Nov 1 00:18:27.757554 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:18:27.772952 waagent[1587]: 2025-11-01T00:18:27.772846Z INFO Daemon Daemon Configure sshd Nov 1 00:18:27.777149 waagent[1587]: 2025-11-01T00:18:27.777065Z INFO Daemon Daemon Deploy ssh public key. Nov 1 00:18:29.098454 waagent[1587]: 2025-11-01T00:18:29.098375Z INFO Daemon Daemon Provisioning complete Nov 1 00:18:29.118833 waagent[1587]: 2025-11-01T00:18:29.118759Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Nov 1 00:18:29.126610 waagent[1587]: 2025-11-01T00:18:29.126522Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Nov 1 00:18:29.139349 waagent[1587]: 2025-11-01T00:18:29.139263Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Nov 1 00:18:29.454341 waagent[1653]: 2025-11-01T00:18:29.454182Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Nov 1 00:18:29.455501 waagent[1653]: 2025-11-01T00:18:29.455442Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:29.455779 waagent[1653]: 2025-11-01T00:18:29.455729Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:29.469969 waagent[1653]: 2025-11-01T00:18:29.469869Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Nov 1 00:18:29.470322 waagent[1653]: 2025-11-01T00:18:29.470271Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Nov 1 00:18:29.531316 waagent[1653]: 2025-11-01T00:18:29.531180Z INFO ExtHandler ExtHandler Found private key matching thumbprint 77B1F1B159A941C229FDD5FC4559C4780CB544B2 Nov 1 00:18:29.531835 waagent[1653]: 2025-11-01T00:18:29.531779Z INFO ExtHandler ExtHandler Fetch goal state completed Nov 1 00:18:29.547305 waagent[1653]: 2025-11-01T00:18:29.547245Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: b05aaa73-96bb-4cfd-aead-215daf333a0c New eTag: 2112377560239760647] Nov 1 00:18:29.548109 waagent[1653]: 2025-11-01T00:18:29.548047Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Nov 1 00:18:29.785593 waagent[1653]: 2025-11-01T00:18:29.785456Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Nov 1 00:18:29.833096 waagent[1653]: 2025-11-01T00:18:29.832994Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1653 Nov 1 00:18:29.837015 waagent[1653]: 2025-11-01T00:18:29.836935Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Nov 1 00:18:29.838324 waagent[1653]: 2025-11-01T00:18:29.838262Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Nov 1 00:18:30.217047 waagent[1653]: 2025-11-01T00:18:30.216979Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Nov 1 00:18:30.217516 waagent[1653]: 2025-11-01T00:18:30.217456Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Nov 1 00:18:30.225860 waagent[1653]: 2025-11-01T00:18:30.225790Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Nov 1 00:18:30.226475 waagent[1653]: 2025-11-01T00:18:30.226411Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Nov 1 00:18:30.227738 waagent[1653]: 2025-11-01T00:18:30.227667Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Nov 1 00:18:30.229214 waagent[1653]: 2025-11-01T00:18:30.229135Z INFO ExtHandler ExtHandler Starting env monitor service. Nov 1 00:18:30.229950 waagent[1653]: 2025-11-01T00:18:30.229887Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:30.230237 waagent[1653]: 2025-11-01T00:18:30.230184Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:30.230981 waagent[1653]: 2025-11-01T00:18:30.230911Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Nov 1 00:18:30.231677 waagent[1653]: 2025-11-01T00:18:30.231573Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Nov 1 00:18:30.231887 waagent[1653]: 2025-11-01T00:18:30.231831Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:30.232112 waagent[1653]: 2025-11-01T00:18:30.232048Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:30.232735 waagent[1653]: 2025-11-01T00:18:30.232663Z INFO EnvHandler ExtHandler Configure routes Nov 1 00:18:30.232994 waagent[1653]: 2025-11-01T00:18:30.232926Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Nov 1 00:18:30.232994 waagent[1653]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Nov 1 00:18:30.232994 waagent[1653]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Nov 1 00:18:30.232994 waagent[1653]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Nov 1 00:18:30.232994 waagent[1653]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:30.232994 waagent[1653]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:30.232994 waagent[1653]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:30.233168 waagent[1653]: 2025-11-01T00:18:30.233096Z INFO EnvHandler ExtHandler Gateway:None Nov 1 00:18:30.233284 waagent[1653]: 2025-11-01T00:18:30.233235Z INFO EnvHandler ExtHandler Routes:None Nov 1 00:18:30.237046 waagent[1653]: 2025-11-01T00:18:30.236935Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Nov 1 00:18:30.237154 waagent[1653]: 2025-11-01T00:18:30.237084Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Nov 1 00:18:30.238104 waagent[1653]: 2025-11-01T00:18:30.238011Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Nov 1 00:18:30.238195 waagent[1653]: 2025-11-01T00:18:30.238123Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Nov 1 00:18:30.238769 waagent[1653]: 2025-11-01T00:18:30.238692Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Nov 1 00:18:30.249951 waagent[1653]: 2025-11-01T00:18:30.249870Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Nov 1 00:18:30.251698 waagent[1653]: 2025-11-01T00:18:30.251600Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Nov 1 00:18:30.252949 waagent[1653]: 2025-11-01T00:18:30.252882Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Nov 1 00:18:30.319830 waagent[1653]: 2025-11-01T00:18:30.319761Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Nov 1 00:18:30.368796 waagent[1653]: 2025-11-01T00:18:30.368656Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1647' Nov 1 00:18:30.664229 waagent[1653]: 2025-11-01T00:18:30.664038Z INFO MonitorHandler ExtHandler Network interfaces: Nov 1 00:18:30.664229 waagent[1653]: Executing ['ip', '-a', '-o', 'link']: Nov 1 00:18:30.664229 waagent[1653]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Nov 1 00:18:30.664229 waagent[1653]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:11:b4 brd ff:ff:ff:ff:ff:ff Nov 1 00:18:30.664229 waagent[1653]: 3: enP53338s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:11:b4 brd ff:ff:ff:ff:ff:ff\ altname enP53338p0s2 Nov 1 00:18:30.664229 waagent[1653]: Executing ['ip', '-4', '-a', '-o', 'address']: Nov 1 00:18:30.664229 waagent[1653]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Nov 1 00:18:30.664229 waagent[1653]: 2: eth0 inet 10.200.20.19/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Nov 1 00:18:30.664229 waagent[1653]: Executing ['ip', '-6', '-a', '-o', 'address']: Nov 1 00:18:30.664229 waagent[1653]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Nov 1 00:18:30.664229 waagent[1653]: 2: eth0 inet6 fe80::20d:3aff:fe06:11b4/64 scope link \ valid_lft forever preferred_lft forever Nov 1 00:18:30.786260 waagent[1653]: 2025-11-01T00:18:30.786185Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.15.0.1 -- exiting Nov 1 00:18:31.144019 waagent[1587]: 2025-11-01T00:18:31.143885Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Nov 1 00:18:31.150471 waagent[1587]: 2025-11-01T00:18:31.150404Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.15.0.1 to be the latest agent Nov 1 00:18:32.620353 waagent[1682]: 2025-11-01T00:18:32.620251Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.15.0.1) Nov 1 00:18:32.621499 waagent[1682]: 2025-11-01T00:18:32.621434Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Nov 1 00:18:32.621813 waagent[1682]: 2025-11-01T00:18:32.621761Z INFO ExtHandler ExtHandler Python: 3.9.16 Nov 1 00:18:32.622056 waagent[1682]: 2025-11-01T00:18:32.622008Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Nov 1 00:18:32.637752 waagent[1682]: 2025-11-01T00:18:32.637602Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: aarch64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Nov 1 00:18:32.638430 waagent[1682]: 2025-11-01T00:18:32.638371Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:32.638737 waagent[1682]: 2025-11-01T00:18:32.638683Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:32.639112 waagent[1682]: 2025-11-01T00:18:32.639059Z INFO ExtHandler ExtHandler Initializing the goal state... Nov 1 00:18:32.653963 waagent[1682]: 2025-11-01T00:18:32.653863Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Nov 1 00:18:32.667171 waagent[1682]: 2025-11-01T00:18:32.667107Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.177 Nov 1 00:18:32.668539 waagent[1682]: 2025-11-01T00:18:32.668474Z INFO ExtHandler Nov 1 00:18:32.668866 waagent[1682]: 2025-11-01T00:18:32.668814Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 009022a6-8092-49ec-a946-3e49764da8ab eTag: 2112377560239760647 source: Fabric] Nov 1 00:18:32.669804 waagent[1682]: 2025-11-01T00:18:32.669746Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Nov 1 00:18:32.671249 waagent[1682]: 2025-11-01T00:18:32.671188Z INFO ExtHandler Nov 1 00:18:32.671518 waagent[1682]: 2025-11-01T00:18:32.671468Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Nov 1 00:18:32.682012 waagent[1682]: 2025-11-01T00:18:32.681946Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Nov 1 00:18:32.682815 waagent[1682]: 2025-11-01T00:18:32.682765Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Nov 1 00:18:32.703482 waagent[1682]: 2025-11-01T00:18:32.703413Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Nov 1 00:18:32.772204 waagent[1682]: 2025-11-01T00:18:32.772065Z INFO ExtHandler Downloaded certificate {'thumbprint': '77B1F1B159A941C229FDD5FC4559C4780CB544B2', 'hasPrivateKey': True} Nov 1 00:18:32.773953 waagent[1682]: 2025-11-01T00:18:32.773885Z INFO ExtHandler Fetch goal state from WireServer completed Nov 1 00:18:32.775057 waagent[1682]: 2025-11-01T00:18:32.774997Z INFO ExtHandler ExtHandler Goal state initialization completed. Nov 1 00:18:32.797610 waagent[1682]: 2025-11-01T00:18:32.797470Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Nov 1 00:18:32.807315 waagent[1682]: 2025-11-01T00:18:32.807187Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Nov 1 00:18:32.811740 waagent[1682]: 2025-11-01T00:18:32.811590Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Nov 1 00:18:32.812168 waagent[1682]: 2025-11-01T00:18:32.812112Z INFO ExtHandler ExtHandler Checking state of the firewall Nov 1 00:18:33.180662 waagent[1682]: 2025-11-01T00:18:33.180500Z INFO ExtHandler ExtHandler Created firewall rules for Azure Fabric: Nov 1 00:18:33.180662 waagent[1682]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:33.180662 waagent[1682]: pkts bytes target prot opt in out source destination Nov 1 00:18:33.180662 waagent[1682]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:33.180662 waagent[1682]: pkts bytes target prot opt in out source destination Nov 1 00:18:33.180662 waagent[1682]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:33.180662 waagent[1682]: pkts bytes target prot opt in out source destination Nov 1 00:18:33.180662 waagent[1682]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Nov 1 00:18:33.180662 waagent[1682]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:18:33.180662 waagent[1682]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:18:33.181906 waagent[1682]: 2025-11-01T00:18:33.181837Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Nov 1 00:18:33.185328 waagent[1682]: 2025-11-01T00:18:33.185186Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Nov 1 00:18:33.185864 waagent[1682]: 2025-11-01T00:18:33.185803Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up /lib/systemd/system/waagent-network-setup.service Nov 1 00:18:33.186299 waagent[1682]: 2025-11-01T00:18:33.186235Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Nov 1 00:18:33.193830 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:18:33.194048 systemd[1]: Stopped kubelet.service. Nov 1 00:18:33.195512 systemd[1]: Starting kubelet.service... Nov 1 00:18:33.199323 waagent[1682]: 2025-11-01T00:18:33.199262Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Nov 1 00:18:33.200126 waagent[1682]: 2025-11-01T00:18:33.200063Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Nov 1 00:18:33.209435 waagent[1682]: 2025-11-01T00:18:33.209340Z INFO ExtHandler ExtHandler WALinuxAgent-2.15.0.1 running as process 1682 Nov 1 00:18:33.213298 waagent[1682]: 2025-11-01T00:18:33.213200Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Nov 1 00:18:33.214493 waagent[1682]: 2025-11-01T00:18:33.214425Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Nov 1 00:18:33.215729 waagent[1682]: 2025-11-01T00:18:33.215666Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Nov 1 00:18:33.218882 waagent[1682]: 2025-11-01T00:18:33.218817Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Nov 1 00:18:33.219399 waagent[1682]: 2025-11-01T00:18:33.219338Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Nov 1 00:18:33.221463 waagent[1682]: 2025-11-01T00:18:33.221401Z INFO ExtHandler ExtHandler Starting env monitor service. Nov 1 00:18:33.222268 waagent[1682]: 2025-11-01T00:18:33.222211Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:33.222563 waagent[1682]: 2025-11-01T00:18:33.222508Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:33.223301 waagent[1682]: 2025-11-01T00:18:33.223244Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Nov 1 00:18:33.223830 waagent[1682]: 2025-11-01T00:18:33.223769Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Nov 1 00:18:33.223830 waagent[1682]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Nov 1 00:18:33.223830 waagent[1682]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Nov 1 00:18:33.223830 waagent[1682]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Nov 1 00:18:33.223830 waagent[1682]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:33.223830 waagent[1682]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:33.223830 waagent[1682]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:33.226895 waagent[1682]: 2025-11-01T00:18:33.226775Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Nov 1 00:18:33.230307 waagent[1682]: 2025-11-01T00:18:33.230123Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:33.230844 waagent[1682]: 2025-11-01T00:18:33.230780Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:33.231786 waagent[1682]: 2025-11-01T00:18:33.231721Z INFO EnvHandler ExtHandler Configure routes Nov 1 00:18:33.232075 waagent[1682]: 2025-11-01T00:18:33.232024Z INFO EnvHandler ExtHandler Gateway:None Nov 1 00:18:33.232309 waagent[1682]: 2025-11-01T00:18:33.232261Z INFO EnvHandler ExtHandler Routes:None Nov 1 00:18:33.240753 waagent[1682]: 2025-11-01T00:18:33.240683Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Nov 1 00:18:33.241808 waagent[1682]: 2025-11-01T00:18:33.241740Z INFO MonitorHandler ExtHandler Network interfaces: Nov 1 00:18:33.241808 waagent[1682]: Executing ['ip', '-a', '-o', 'link']: Nov 1 00:18:33.241808 waagent[1682]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Nov 1 00:18:33.241808 waagent[1682]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:11:b4 brd ff:ff:ff:ff:ff:ff Nov 1 00:18:33.241808 waagent[1682]: 3: enP53338s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:11:b4 brd ff:ff:ff:ff:ff:ff\ altname enP53338p0s2 Nov 1 00:18:33.241808 waagent[1682]: Executing ['ip', '-4', '-a', '-o', 'address']: Nov 1 00:18:33.241808 waagent[1682]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Nov 1 00:18:33.241808 waagent[1682]: 2: eth0 inet 10.200.20.19/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Nov 1 00:18:33.241808 waagent[1682]: Executing ['ip', '-6', '-a', '-o', 'address']: Nov 1 00:18:33.241808 waagent[1682]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Nov 1 00:18:33.241808 waagent[1682]: 2: eth0 inet6 fe80::20d:3aff:fe06:11b4/64 scope link \ valid_lft forever preferred_lft forever Nov 1 00:18:33.244277 waagent[1682]: 2025-11-01T00:18:33.240424Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Nov 1 00:18:33.246205 waagent[1682]: 2025-11-01T00:18:33.246135Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Nov 1 00:18:33.247880 waagent[1682]: 2025-11-01T00:18:33.245881Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Nov 1 00:18:33.248246 waagent[1682]: 2025-11-01T00:18:33.248191Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Nov 1 00:18:33.257438 waagent[1682]: 2025-11-01T00:18:33.257361Z INFO ExtHandler ExtHandler Downloading agent manifest Nov 1 00:18:33.274654 waagent[1682]: 2025-11-01T00:18:33.274550Z INFO ExtHandler ExtHandler Nov 1 00:18:33.275029 waagent[1682]: 2025-11-01T00:18:33.274970Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 54df01d3-a150-4491-8eb9-0d13273eacf8 correlation ed4b3b21-ee85-4b37-9c0a-b7f8e42a96e8 created: 2025-11-01T00:17:30.286453Z] Nov 1 00:18:33.276211 waagent[1682]: 2025-11-01T00:18:33.276148Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Nov 1 00:18:33.280331 waagent[1682]: 2025-11-01T00:18:33.280243Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 5 ms] Nov 1 00:18:33.313941 waagent[1682]: 2025-11-01T00:18:33.313868Z INFO ExtHandler ExtHandler Looking for existing remote access users. Nov 1 00:18:33.318202 waagent[1682]: 2025-11-01T00:18:33.318115Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.15.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 27978B11-818A-45FB-A9DA-B49279F528AD;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Nov 1 00:18:33.354700 systemd[1]: Started kubelet.service. Nov 1 00:18:33.431881 kubelet[1723]: E1101 00:18:33.431753 1723 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:18:33.434233 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:18:33.434362 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:18:33.714414 waagent[1682]: 2025-11-01T00:18:33.714228Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Nov 1 00:18:33.733928 waagent[1682]: 2025-11-01T00:18:33.733842Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Nov 1 00:18:43.466253 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Nov 1 00:18:43.466435 systemd[1]: Stopped kubelet.service. Nov 1 00:18:43.467861 systemd[1]: Starting kubelet.service... Nov 1 00:18:43.643048 systemd[1]: Started kubelet.service. Nov 1 00:18:43.674360 kubelet[1736]: E1101 00:18:43.674305 1736 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:18:43.676664 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:18:43.676795 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:18:46.888693 systemd[1]: Created slice system-sshd.slice. Nov 1 00:18:46.890331 systemd[1]: Started sshd@0-10.200.20.19:22-10.200.16.10:49764.service. Nov 1 00:18:47.577961 sshd[1742]: Accepted publickey for core from 10.200.16.10 port 49764 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:18:47.616672 sshd[1742]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:47.621125 systemd[1]: Started session-3.scope. Nov 1 00:18:47.621691 systemd-logind[1480]: New session 3 of user core. Nov 1 00:18:47.949636 systemd[1]: Started sshd@1-10.200.20.19:22-10.200.16.10:49768.service. Nov 1 00:18:48.366585 sshd[1747]: Accepted publickey for core from 10.200.16.10 port 49768 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:18:48.368253 sshd[1747]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:48.372449 systemd[1]: Started session-4.scope. Nov 1 00:18:48.372910 systemd-logind[1480]: New session 4 of user core. Nov 1 00:18:48.677158 sshd[1747]: pam_unix(sshd:session): session closed for user core Nov 1 00:18:48.679894 systemd[1]: sshd@1-10.200.20.19:22-10.200.16.10:49768.service: Deactivated successfully. Nov 1 00:18:48.680600 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:18:48.681158 systemd-logind[1480]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:18:48.682082 systemd-logind[1480]: Removed session 4. Nov 1 00:18:48.744836 systemd[1]: Started sshd@2-10.200.20.19:22-10.200.16.10:49780.service. Nov 1 00:18:49.157136 sshd[1753]: Accepted publickey for core from 10.200.16.10 port 49780 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:18:49.158880 sshd[1753]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:49.163214 systemd[1]: Started session-5.scope. Nov 1 00:18:49.164472 systemd-logind[1480]: New session 5 of user core. Nov 1 00:18:49.469777 sshd[1753]: pam_unix(sshd:session): session closed for user core Nov 1 00:18:49.472348 systemd[1]: sshd@2-10.200.20.19:22-10.200.16.10:49780.service: Deactivated successfully. Nov 1 00:18:49.473056 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:18:49.473542 systemd-logind[1480]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:18:49.474238 systemd-logind[1480]: Removed session 5. Nov 1 00:18:49.539552 systemd[1]: Started sshd@3-10.200.20.19:22-10.200.16.10:49794.service. Nov 1 00:18:49.958355 sshd[1759]: Accepted publickey for core from 10.200.16.10 port 49794 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:18:49.959316 sshd[1759]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:49.963298 systemd-logind[1480]: New session 6 of user core. Nov 1 00:18:49.963755 systemd[1]: Started session-6.scope. Nov 1 00:18:50.269379 sshd[1759]: pam_unix(sshd:session): session closed for user core Nov 1 00:18:50.271973 systemd[1]: sshd@3-10.200.20.19:22-10.200.16.10:49794.service: Deactivated successfully. Nov 1 00:18:50.272708 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:18:50.273251 systemd-logind[1480]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:18:50.274104 systemd-logind[1480]: Removed session 6. Nov 1 00:18:50.343971 systemd[1]: Started sshd@4-10.200.20.19:22-10.200.16.10:36190.service. Nov 1 00:18:50.795544 sshd[1765]: Accepted publickey for core from 10.200.16.10 port 36190 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:18:50.796886 sshd[1765]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:50.801358 systemd[1]: Started session-7.scope. Nov 1 00:18:50.802395 systemd-logind[1480]: New session 7 of user core. Nov 1 00:18:51.936189 sudo[1768]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:18:51.936419 sudo[1768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:18:52.066824 dbus-daemon[1451]: avc: received setenforce notice (enforcing=1) Nov 1 00:18:52.068657 sudo[1768]: pam_unix(sudo:session): session closed for user root Nov 1 00:18:52.180898 sshd[1765]: pam_unix(sshd:session): session closed for user core Nov 1 00:18:52.184383 systemd-logind[1480]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:18:52.184562 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:18:52.185202 systemd[1]: sshd@4-10.200.20.19:22-10.200.16.10:36190.service: Deactivated successfully. Nov 1 00:18:52.186230 systemd-logind[1480]: Removed session 7. Nov 1 00:18:52.255195 systemd[1]: Started sshd@5-10.200.20.19:22-10.200.16.10:36196.service. Nov 1 00:18:52.705016 sshd[1772]: Accepted publickey for core from 10.200.16.10 port 36196 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:18:52.706829 sshd[1772]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:52.710667 systemd-logind[1480]: New session 8 of user core. Nov 1 00:18:52.711125 systemd[1]: Started session-8.scope. Nov 1 00:18:52.960758 sudo[1776]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:18:52.960981 sudo[1776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:18:52.963834 sudo[1776]: pam_unix(sudo:session): session closed for user root Nov 1 00:18:52.968580 sudo[1775]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:18:52.969137 sudo[1775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:18:52.978375 systemd[1]: Stopping audit-rules.service... Nov 1 00:18:52.978000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:18:52.983682 kernel: kauditd_printk_skb: 130 callbacks suppressed Nov 1 00:18:52.983735 kernel: audit: type=1305 audit(1761956332.978:211): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:18:52.994259 auditctl[1779]: No rules Nov 1 00:18:52.994701 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:18:52.978000 audit[1779]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd2027820 a2=420 a3=0 items=0 ppid=1 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:52.994876 systemd[1]: Stopped audit-rules.service. Nov 1 00:18:53.018123 kernel: audit: type=1300 audit(1761956332.978:211): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd2027820 a2=420 a3=0 items=0 ppid=1 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:52.996583 systemd[1]: Starting audit-rules.service... Nov 1 00:18:52.978000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:18:53.025907 kernel: audit: type=1327 audit(1761956332.978:211): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:18:53.026007 kernel: audit: type=1131 audit(1761956332.993:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:52.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.042048 augenrules[1796]: No rules Nov 1 00:18:53.043153 systemd[1]: Finished audit-rules.service. Nov 1 00:18:53.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.062479 sudo[1775]: pam_unix(sudo:session): session closed for user root Nov 1 00:18:53.060000 audit[1775]: USER_END pid=1775 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.081979 kernel: audit: type=1130 audit(1761956333.041:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.082062 kernel: audit: type=1106 audit(1761956333.060:214): pid=1775 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.082088 kernel: audit: type=1104 audit(1761956333.060:215): pid=1775 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.060000 audit[1775]: CRED_DISP pid=1775 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.153363 sshd[1772]: pam_unix(sshd:session): session closed for user core Nov 1 00:18:53.152000 audit[1772]: USER_END pid=1772 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:18:53.177195 systemd[1]: sshd@5-10.200.20.19:22-10.200.16.10:36196.service: Deactivated successfully. Nov 1 00:18:53.152000 audit[1772]: CRED_DISP pid=1772 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:18:53.196126 kernel: audit: type=1106 audit(1761956333.152:216): pid=1772 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:18:53.196203 kernel: audit: type=1104 audit(1761956333.152:217): pid=1772 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:18:53.178032 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:18:53.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.19:22-10.200.16.10:36196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.214587 kernel: audit: type=1131 audit(1761956333.175:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.19:22-10.200.16.10:36196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.214897 systemd-logind[1480]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:18:53.216198 systemd-logind[1480]: Removed session 8. Nov 1 00:18:53.221449 systemd[1]: Started sshd@6-10.200.20.19:22-10.200.16.10:36204.service. Nov 1 00:18:53.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.16.10:36204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.632000 audit[1802]: USER_ACCT pid=1802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:18:53.634509 sshd[1802]: Accepted publickey for core from 10.200.16.10 port 36204 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:18:53.633000 audit[1802]: CRED_ACQ pid=1802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:18:53.634000 audit[1802]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcea24360 a2=3 a3=1 items=0 ppid=1 pid=1802 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:53.634000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:18:53.636198 sshd[1802]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:53.640609 systemd[1]: Started session-9.scope. Nov 1 00:18:53.640968 systemd-logind[1480]: New session 9 of user core. Nov 1 00:18:53.643000 audit[1802]: USER_START pid=1802 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:18:53.644000 audit[1804]: CRED_ACQ pid=1804 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:18:53.716191 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Nov 1 00:18:53.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.716363 systemd[1]: Stopped kubelet.service. Nov 1 00:18:53.717921 systemd[1]: Starting kubelet.service... Nov 1 00:18:53.870000 audit[1807]: USER_ACCT pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.870000 audit[1807]: CRED_REFR pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.872084 sudo[1807]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:18:53.872313 sudo[1807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:18:53.872000 audit[1807]: USER_START pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.929528 systemd[1]: Started kubelet.service. Nov 1 00:18:53.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:53.961727 kubelet[1814]: E1101 00:18:53.961683 1814 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:18:53.964056 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:18:53.964197 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:18:53.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:18:54.255417 systemd[1]: Starting docker.service... Nov 1 00:18:54.337898 env[1824]: time="2025-11-01T00:18:54.337850680Z" level=info msg="Starting up" Nov 1 00:18:54.339529 env[1824]: time="2025-11-01T00:18:54.339497040Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:18:54.339529 env[1824]: time="2025-11-01T00:18:54.339523480Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:18:54.339663 env[1824]: time="2025-11-01T00:18:54.339543920Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:18:54.339663 env[1824]: time="2025-11-01T00:18:54.339554800Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:18:54.341895 env[1824]: time="2025-11-01T00:18:54.341870079Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:18:54.342006 env[1824]: time="2025-11-01T00:18:54.341992879Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:18:54.342076 env[1824]: time="2025-11-01T00:18:54.342060359Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:18:54.342127 env[1824]: time="2025-11-01T00:18:54.342115679Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:18:54.348786 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3468384357-merged.mount: Deactivated successfully. Nov 1 00:18:54.547346 env[1824]: time="2025-11-01T00:18:54.546859867Z" level=info msg="Loading containers: start." Nov 1 00:18:54.743000 audit[1852]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1852 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.743000 audit[1852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffdd2a6620 a2=0 a3=1 items=0 ppid=1824 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.743000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:18:54.745000 audit[1854]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1854 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.745000 audit[1854]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe2af6e10 a2=0 a3=1 items=0 ppid=1824 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.745000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:18:54.747000 audit[1856]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1856 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.747000 audit[1856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffafb50e0 a2=0 a3=1 items=0 ppid=1824 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.747000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:18:54.748000 audit[1858]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1858 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.748000 audit[1858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd9c83ab0 a2=0 a3=1 items=0 ppid=1824 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.748000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:18:54.750000 audit[1860]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1860 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.750000 audit[1860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffc465420 a2=0 a3=1 items=0 ppid=1824 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.750000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:18:54.752000 audit[1862]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1862 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.752000 audit[1862]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc82d6f40 a2=0 a3=1 items=0 ppid=1824 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.752000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:18:54.771000 audit[1864]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1864 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.771000 audit[1864]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd26c3970 a2=0 a3=1 items=0 ppid=1824 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.771000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:18:54.773000 audit[1866]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1866 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.773000 audit[1866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffdd2e7510 a2=0 a3=1 items=0 ppid=1824 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.773000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:18:54.774000 audit[1868]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1868 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.774000 audit[1868]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff79e3230 a2=0 a3=1 items=0 ppid=1824 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.774000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:18:54.793000 audit[1872]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1872 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.793000 audit[1872]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdb2983a0 a2=0 a3=1 items=0 ppid=1824 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.793000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:18:54.803000 audit[1873]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1873 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:54.803000 audit[1873]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcc2d1780 a2=0 a3=1 items=0 ppid=1824 pid=1873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:54.803000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:18:54.997644 kernel: Initializing XFRM netlink socket Nov 1 00:18:55.096960 env[1824]: time="2025-11-01T00:18:55.096745410Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:18:55.403000 audit[1881]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.403000 audit[1881]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff4a36da0 a2=0 a3=1 items=0 ppid=1824 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.403000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:18:55.482000 audit[1884]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1884 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.482000 audit[1884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff7c67520 a2=0 a3=1 items=0 ppid=1824 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.482000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:18:55.485000 audit[1887]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1887 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.485000 audit[1887]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe86fa330 a2=0 a3=1 items=0 ppid=1824 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:18:55.487000 audit[1889]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.487000 audit[1889]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe5492c50 a2=0 a3=1 items=0 ppid=1824 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.487000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:18:55.494666 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Nov 1 00:18:55.494000 audit[1891]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1891 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.494000 audit[1891]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc7866f20 a2=0 a3=1 items=0 ppid=1824 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.494000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:18:55.496000 audit[1893]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.496000 audit[1893]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd0501cd0 a2=0 a3=1 items=0 ppid=1824 pid=1893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.496000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:18:55.498000 audit[1895]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1895 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.498000 audit[1895]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffe2b55440 a2=0 a3=1 items=0 ppid=1824 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.498000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:18:55.500000 audit[1897]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.500000 audit[1897]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc99c8400 a2=0 a3=1 items=0 ppid=1824 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.500000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:18:55.502000 audit[1899]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1899 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.502000 audit[1899]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffffcb23230 a2=0 a3=1 items=0 ppid=1824 pid=1899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.502000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:18:55.504000 audit[1901]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1901 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.504000 audit[1901]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc93ba480 a2=0 a3=1 items=0 ppid=1824 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.504000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:18:55.506000 audit[1903]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1903 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.506000 audit[1903]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff4809170 a2=0 a3=1 items=0 ppid=1824 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.506000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:18:55.508409 systemd-networkd[1647]: docker0: Link UP Nov 1 00:18:55.525000 audit[1907]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1907 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.525000 audit[1907]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcb7148f0 a2=0 a3=1 items=0 ppid=1824 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.525000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:18:55.532000 audit[1908]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1908 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:18:55.532000 audit[1908]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe24c3f60 a2=0 a3=1 items=0 ppid=1824 pid=1908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:55.532000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:18:55.534165 env[1824]: time="2025-11-01T00:18:55.534130586Z" level=info msg="Loading containers: done." Nov 1 00:18:55.575978 env[1824]: time="2025-11-01T00:18:55.575924096Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:18:55.576164 env[1824]: time="2025-11-01T00:18:55.576131296Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:18:55.576259 env[1824]: time="2025-11-01T00:18:55.576235536Z" level=info msg="Daemon has completed initialization" Nov 1 00:18:55.613371 systemd[1]: Started docker.service. Nov 1 00:18:55.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:55.620030 env[1824]: time="2025-11-01T00:18:55.619833606Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:18:57.120231 update_engine[1483]: I1101 00:18:57.120177 1483 update_attempter.cc:509] Updating boot flags... Nov 1 00:19:03.966191 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Nov 1 00:19:03.966367 systemd[1]: Stopped kubelet.service. Nov 1 00:19:03.988022 kernel: kauditd_printk_skb: 88 callbacks suppressed Nov 1 00:19:03.988134 kernel: audit: type=1130 audit(1761956343.964:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:03.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:03.967856 systemd[1]: Starting kubelet.service... Nov 1 00:19:03.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:04.004658 kernel: audit: type=1131 audit(1761956343.964:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:04.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:04.191333 systemd[1]: Started kubelet.service. Nov 1 00:19:04.210715 kernel: audit: type=1130 audit(1761956344.189:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:04.238304 kubelet[1980]: E1101 00:19:04.238183 1980 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:19:04.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:04.240188 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:19:04.240312 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:04.260662 kernel: audit: type=1131 audit(1761956344.238:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:04.312248 env[1493]: time="2025-11-01T00:19:04.312204121Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Nov 1 00:19:05.322867 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1891928441.mount: Deactivated successfully. Nov 1 00:19:07.080692 env[1493]: time="2025-11-01T00:19:07.080644300Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:07.086737 env[1493]: time="2025-11-01T00:19:07.086683620Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a7fd297b49102b08dc3d8d4fd7f1538bcf21d3131eae8bf62ba26ce3283237f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:07.090821 env[1493]: time="2025-11-01T00:19:07.090776899Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:07.095169 env[1493]: time="2025-11-01T00:19:07.095119459Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:07.095821 env[1493]: time="2025-11-01T00:19:07.095786019Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:6a7fd297b49102b08dc3d8d4fd7f1538bcf21d3131eae8bf62ba26ce3283237f\"" Nov 1 00:19:07.097257 env[1493]: time="2025-11-01T00:19:07.097226538Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Nov 1 00:19:08.615127 env[1493]: time="2025-11-01T00:19:08.615077897Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:08.623682 env[1493]: time="2025-11-01T00:19:08.623639576Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2dd4c25a937008b7b8a6cdca70d816403b5078b51550926721b7a7762139cd23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:08.628415 env[1493]: time="2025-11-01T00:19:08.628366576Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:08.632120 env[1493]: time="2025-11-01T00:19:08.632072895Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:08.632970 env[1493]: time="2025-11-01T00:19:08.632939855Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:2dd4c25a937008b7b8a6cdca70d816403b5078b51550926721b7a7762139cd23\"" Nov 1 00:19:08.633558 env[1493]: time="2025-11-01T00:19:08.633520735Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Nov 1 00:19:10.326828 env[1493]: time="2025-11-01T00:19:10.326767892Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:10.342107 env[1493]: time="2025-11-01T00:19:10.342048931Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e600beaed8620718e0650dd2721266869ce1d737488c004a869333273e6ec15,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:10.349793 env[1493]: time="2025-11-01T00:19:10.349753370Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:10.362043 env[1493]: time="2025-11-01T00:19:10.361989569Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:10.363101 env[1493]: time="2025-11-01T00:19:10.363073369Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:5e600beaed8620718e0650dd2721266869ce1d737488c004a869333273e6ec15\"" Nov 1 00:19:10.364233 env[1493]: time="2025-11-01T00:19:10.364207129Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Nov 1 00:19:11.555763 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3980020047.mount: Deactivated successfully. Nov 1 00:19:12.086558 env[1493]: time="2025-11-01T00:19:12.086504380Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:12.094705 env[1493]: time="2025-11-01T00:19:12.094640900Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:021a8d45ab0c346664e47d95595ff5180ce90a22a681ea27904c65ae90788e70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:12.099301 env[1493]: time="2025-11-01T00:19:12.099263939Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:12.102865 env[1493]: time="2025-11-01T00:19:12.102830179Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:12.103218 env[1493]: time="2025-11-01T00:19:12.103186259Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:021a8d45ab0c346664e47d95595ff5180ce90a22a681ea27904c65ae90788e70\"" Nov 1 00:19:12.103711 env[1493]: time="2025-11-01T00:19:12.103677379Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Nov 1 00:19:12.775994 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3670760868.mount: Deactivated successfully. Nov 1 00:19:14.228596 env[1493]: time="2025-11-01T00:19:14.228519378Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:14.235734 env[1493]: time="2025-11-01T00:19:14.235690498Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:14.239942 env[1493]: time="2025-11-01T00:19:14.239904137Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:14.244032 env[1493]: time="2025-11-01T00:19:14.243983057Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:14.244940 env[1493]: time="2025-11-01T00:19:14.244908937Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Nov 1 00:19:14.245475 env[1493]: time="2025-11-01T00:19:14.245443457Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:19:14.466211 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Nov 1 00:19:14.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:14.466392 systemd[1]: Stopped kubelet.service. Nov 1 00:19:14.467843 systemd[1]: Starting kubelet.service... Nov 1 00:19:14.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:14.486681 kernel: audit: type=1130 audit(1761956354.464:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:14.506649 kernel: audit: type=1131 audit(1761956354.464:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:14.569125 systemd[1]: Started kubelet.service. Nov 1 00:19:14.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:14.589673 kernel: audit: type=1130 audit(1761956354.567:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:14.617472 kubelet[1994]: E1101 00:19:14.617415 1994 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:19:14.942056 kernel: audit: type=1131 audit(1761956354.618:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:14.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:14.619739 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:19:14.619863 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:15.380310 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4288780363.mount: Deactivated successfully. Nov 1 00:19:15.411467 env[1493]: time="2025-11-01T00:19:15.411417876Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:15.419677 env[1493]: time="2025-11-01T00:19:15.419610321Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:15.423672 env[1493]: time="2025-11-01T00:19:15.423638443Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:15.428122 env[1493]: time="2025-11-01T00:19:15.428084606Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:15.428521 env[1493]: time="2025-11-01T00:19:15.428493166Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Nov 1 00:19:15.429069 env[1493]: time="2025-11-01T00:19:15.429036446Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Nov 1 00:19:16.102227 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount846338955.mount: Deactivated successfully. Nov 1 00:19:20.033975 env[1493]: time="2025-11-01T00:19:20.033913882Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:20.041379 env[1493]: time="2025-11-01T00:19:20.041331246Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:20.048415 env[1493]: time="2025-11-01T00:19:20.048368289Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:20.052783 env[1493]: time="2025-11-01T00:19:20.052739531Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:20.053799 env[1493]: time="2025-11-01T00:19:20.053763332Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Nov 1 00:19:24.716224 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 7. Nov 1 00:19:24.716410 systemd[1]: Stopped kubelet.service. Nov 1 00:19:24.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:24.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:24.752957 kernel: audit: type=1130 audit(1761956364.714:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:24.753055 kernel: audit: type=1131 audit(1761956364.714:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:24.752200 systemd[1]: Starting kubelet.service... Nov 1 00:19:25.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:25.222255 systemd[1]: Started kubelet.service. Nov 1 00:19:25.243653 kernel: audit: type=1130 audit(1761956365.220:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:25.280823 kubelet[2023]: E1101 00:19:25.280765 2023 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:19:25.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:25.283313 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:19:25.283442 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:25.305664 kernel: audit: type=1131 audit(1761956365.282:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:26.649277 systemd[1]: Stopped kubelet.service. Nov 1 00:19:26.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:26.652811 systemd[1]: Starting kubelet.service... Nov 1 00:19:26.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:26.688725 kernel: audit: type=1130 audit(1761956366.648:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:26.688822 kernel: audit: type=1131 audit(1761956366.648:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:26.705754 systemd[1]: Reloading. Nov 1 00:19:26.798374 /usr/lib/systemd/system-generators/torcx-generator[2058]: time="2025-11-01T00:19:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:19:26.799541 /usr/lib/systemd/system-generators/torcx-generator[2058]: time="2025-11-01T00:19:26Z" level=info msg="torcx already run" Nov 1 00:19:26.872939 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:19:26.872960 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:19:26.888367 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.993704 kernel: audit: type=1400 audit(1761956366.957:271): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.993805 kernel: audit: type=1400 audit(1761956366.957:272): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.993825 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016650 kernel: audit: type=1400 audit(1761956366.957:273): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit: BPF prog-id=41 op=LOAD Nov 1 00:19:26.974000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit: BPF prog-id=42 op=LOAD Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit: BPF prog-id=43 op=LOAD Nov 1 00:19:26.974000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:19:26.974000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit: BPF prog-id=44 op=LOAD Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.974000 audit: BPF prog-id=45 op=LOAD Nov 1 00:19:26.974000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:19:26.974000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:26.992000 audit: BPF prog-id=46 op=LOAD Nov 1 00:19:26.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit: BPF prog-id=50 op=LOAD Nov 1 00:19:27.016000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:19:27.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.016000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit: BPF prog-id=53 op=LOAD Nov 1 00:19:27.017000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit: BPF prog-id=54 op=LOAD Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:27.017000 audit: BPF prog-id=55 op=LOAD Nov 1 00:19:27.017000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:19:27.041469 systemd[1]: Started kubelet.service. Nov 1 00:19:27.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:27.044634 systemd[1]: Stopping kubelet.service... Nov 1 00:19:27.045084 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:19:27.045272 systemd[1]: Stopped kubelet.service. Nov 1 00:19:27.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:27.047160 systemd[1]: Starting kubelet.service... Nov 1 00:19:27.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:27.181665 systemd[1]: Started kubelet.service. Nov 1 00:19:27.217315 kubelet[2122]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:19:27.217315 kubelet[2122]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:19:27.217315 kubelet[2122]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:19:27.217721 kubelet[2122]: I1101 00:19:27.217398 2122 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:19:29.516759 kubelet[2122]: I1101 00:19:29.516714 2122 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:19:29.516759 kubelet[2122]: I1101 00:19:29.516749 2122 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:19:29.517125 kubelet[2122]: I1101 00:19:29.516972 2122 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:19:29.543873 kubelet[2122]: E1101 00:19:29.543813 2122 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.200.20.19:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:19:29.545160 kubelet[2122]: I1101 00:19:29.545130 2122 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:19:29.553607 kubelet[2122]: E1101 00:19:29.553560 2122 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:19:29.553607 kubelet[2122]: I1101 00:19:29.553608 2122 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:19:29.556525 kubelet[2122]: I1101 00:19:29.556501 2122 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:19:29.556911 kubelet[2122]: I1101 00:19:29.556880 2122 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:19:29.557136 kubelet[2122]: I1101 00:19:29.556983 2122 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-c6a118d14a","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:19:29.557284 kubelet[2122]: I1101 00:19:29.557272 2122 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:19:29.557343 kubelet[2122]: I1101 00:19:29.557335 2122 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:19:29.557522 kubelet[2122]: I1101 00:19:29.557510 2122 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:19:29.561401 kubelet[2122]: I1101 00:19:29.561379 2122 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:19:29.561559 kubelet[2122]: I1101 00:19:29.561546 2122 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:19:29.561652 kubelet[2122]: I1101 00:19:29.561642 2122 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:19:29.565675 kubelet[2122]: I1101 00:19:29.565648 2122 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:19:29.574334 kubelet[2122]: I1101 00:19:29.574303 2122 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:19:29.574944 kubelet[2122]: I1101 00:19:29.574913 2122 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:19:29.575010 kubelet[2122]: W1101 00:19:29.574980 2122 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:19:29.576523 kubelet[2122]: E1101 00:19:29.576488 2122 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.20.19:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:19:29.577018 kubelet[2122]: E1101 00:19:29.576993 2122 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-c6a118d14a&limit=500&resourceVersion=0\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:19:29.578013 kubelet[2122]: I1101 00:19:29.577985 2122 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:19:29.578092 kubelet[2122]: I1101 00:19:29.578031 2122 server.go:1289] "Started kubelet" Nov 1 00:19:29.578952 kubelet[2122]: I1101 00:19:29.578918 2122 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:19:29.579156 kubelet[2122]: I1101 00:19:29.579093 2122 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:19:29.579461 kubelet[2122]: I1101 00:19:29.579426 2122 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:19:29.580874 kubelet[2122]: I1101 00:19:29.580850 2122 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:19:29.583000 audit[2122]: AVC avc: denied { mac_admin } for pid=2122 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:29.583000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:29.583000 audit[2122]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b075c0 a1=4000c0c570 a2=4000b07590 a3=25 items=0 ppid=1 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.583000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:29.585150 kubelet[2122]: I1101 00:19:29.585120 2122 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:19:29.583000 audit[2122]: AVC avc: denied { mac_admin } for pid=2122 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:29.583000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:29.583000 audit[2122]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bec500 a1=4000c0c588 a2=4000b07650 a3=25 items=0 ppid=1 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.583000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:29.585437 kubelet[2122]: I1101 00:19:29.585421 2122 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:19:29.585575 kubelet[2122]: I1101 00:19:29.585563 2122 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:19:29.587263 kubelet[2122]: I1101 00:19:29.585819 2122 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:19:29.588453 kubelet[2122]: E1101 00:19:29.587411 2122 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.19:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.19:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-c6a118d14a.1873b9fb9e6f132e default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-c6a118d14a,UID:ci-3510.3.8-n-c6a118d14a,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-c6a118d14a,},FirstTimestamp:2025-11-01 00:19:29.578005294 +0000 UTC m=+2.392992210,LastTimestamp:2025-11-01 00:19:29.578005294 +0000 UTC m=+2.392992210,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-c6a118d14a,}" Nov 1 00:19:29.590058 kubelet[2122]: E1101 00:19:29.590039 2122 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:29.590192 kubelet[2122]: I1101 00:19:29.590181 2122 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:19:29.590457 kubelet[2122]: I1101 00:19:29.590442 2122 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:19:29.590583 kubelet[2122]: I1101 00:19:29.590573 2122 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:19:29.591097 kubelet[2122]: E1101 00:19:29.591074 2122 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:19:29.591410 kubelet[2122]: I1101 00:19:29.591391 2122 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:19:29.591575 kubelet[2122]: I1101 00:19:29.591556 2122 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:19:29.593108 kubelet[2122]: E1101 00:19:29.593075 2122 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-c6a118d14a?timeout=10s\": dial tcp 10.200.20.19:6443: connect: connection refused" interval="200ms" Nov 1 00:19:29.593329 kubelet[2122]: I1101 00:19:29.593313 2122 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:19:29.592000 audit[2138]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2138 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:29.592000 audit[2138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff404b710 a2=0 a3=1 items=0 ppid=2122 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.592000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:19:29.593000 audit[2139]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:29.593000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeb3a6960 a2=0 a3=1 items=0 ppid=2122 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.593000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:19:29.595000 audit[2141]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:29.595000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc8bf8980 a2=0 a3=1 items=0 ppid=2122 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.595000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:19:29.596000 audit[2143]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:29.596000 audit[2143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffca31d230 a2=0 a3=1 items=0 ppid=2122 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.596000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:19:29.617949 kubelet[2122]: E1101 00:19:29.617913 2122 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:19:29.624000 audit[2149]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:29.624000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc2153440 a2=0 a3=1 items=0 ppid=2122 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.624000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:19:29.626720 kubelet[2122]: I1101 00:19:29.626679 2122 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:19:29.626000 audit[2150]: NETFILTER_CFG table=mangle:34 family=2 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:29.626000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc19ca50 a2=0 a3=1 items=0 ppid=2122 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.626000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:19:29.626000 audit[2151]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:29.626000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe7e96ce0 a2=0 a3=1 items=0 ppid=2122 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.626000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:19:29.628755 kubelet[2122]: I1101 00:19:29.628724 2122 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:19:29.628755 kubelet[2122]: I1101 00:19:29.628753 2122 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:19:29.628870 kubelet[2122]: I1101 00:19:29.628777 2122 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:19:29.628870 kubelet[2122]: I1101 00:19:29.628784 2122 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:19:29.628870 kubelet[2122]: E1101 00:19:29.628827 2122 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:19:29.628000 audit[2153]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:29.628000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5da91d0 a2=0 a3=1 items=0 ppid=2122 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.628000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:19:29.630893 kubelet[2122]: E1101 00:19:29.630862 2122 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:19:29.629000 audit[2154]: NETFILTER_CFG table=mangle:37 family=10 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:29.629000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffec0ea460 a2=0 a3=1 items=0 ppid=2122 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.629000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:19:29.630000 audit[2156]: NETFILTER_CFG table=nat:38 family=10 entries=2 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:29.630000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc88a8530 a2=0 a3=1 items=0 ppid=2122 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.630000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:19:29.631000 audit[2155]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:29.631000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe7f272a0 a2=0 a3=1 items=0 ppid=2122 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.631000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:19:29.632000 audit[2157]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:29.632000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd9dd1cf0 a2=0 a3=1 items=0 ppid=2122 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.632000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:19:29.691175 kubelet[2122]: E1101 00:19:29.691140 2122 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:29.704904 kubelet[2122]: I1101 00:19:29.704877 2122 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:19:29.705053 kubelet[2122]: I1101 00:19:29.705041 2122 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:19:29.705132 kubelet[2122]: I1101 00:19:29.705123 2122 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:19:29.711890 kubelet[2122]: I1101 00:19:29.711866 2122 policy_none.go:49] "None policy: Start" Nov 1 00:19:29.712051 kubelet[2122]: I1101 00:19:29.712039 2122 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:19:29.712127 kubelet[2122]: I1101 00:19:29.712119 2122 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:19:29.720585 systemd[1]: Created slice kubepods.slice. Nov 1 00:19:29.725373 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:19:29.728559 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:19:29.730026 kubelet[2122]: E1101 00:19:29.730003 2122 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:19:29.737494 kubelet[2122]: E1101 00:19:29.737468 2122 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:19:29.744501 kernel: kauditd_printk_skb: 325 callbacks suppressed Nov 1 00:19:29.744611 kernel: audit: type=1400 audit(1761956369.736:405): avc: denied { mac_admin } for pid=2122 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:29.736000 audit[2122]: AVC avc: denied { mac_admin } for pid=2122 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:29.744724 kubelet[2122]: E1101 00:19:29.738686 2122 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:19:29.744724 kubelet[2122]: I1101 00:19:29.738847 2122 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:19:29.744724 kubelet[2122]: I1101 00:19:29.738864 2122 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:19:29.744724 kubelet[2122]: I1101 00:19:29.739197 2122 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:19:29.744724 kubelet[2122]: E1101 00:19:29.740440 2122 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:19:29.744724 kubelet[2122]: E1101 00:19:29.740476 2122 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:29.736000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:29.769206 kernel: audit: type=1401 audit(1761956369.736:405): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:29.769282 kernel: audit: type=1300 audit(1761956369.736:405): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d31dd0 a1=4000d47f68 a2=4000d31da0 a3=25 items=0 ppid=1 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.736000 audit[2122]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d31dd0 a1=4000d47f68 a2=4000d31da0 a3=25 items=0 ppid=1 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:29.794257 kubelet[2122]: E1101 00:19:29.794216 2122 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-c6a118d14a?timeout=10s\": dial tcp 10.200.20.19:6443: connect: connection refused" interval="400ms" Nov 1 00:19:29.736000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:29.821242 kernel: audit: type=1327 audit(1761956369.736:405): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:29.841374 kubelet[2122]: I1101 00:19:29.841334 2122 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.842012 kubelet[2122]: E1101 00:19:29.841976 2122 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.941937 systemd[1]: Created slice kubepods-burstable-pod9be2d0a99f2cbf94a466dd52f959f43e.slice. Nov 1 00:19:29.948515 kubelet[2122]: E1101 00:19:29.948491 2122 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.954128 systemd[1]: Created slice kubepods-burstable-pod07c3ed34781a653102cecf477aea91fb.slice. Nov 1 00:19:29.956613 kubelet[2122]: E1101 00:19:29.956590 2122 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.965740 systemd[1]: Created slice kubepods-burstable-pod1b40cfe5060608015e9843d0e33f4cd8.slice. Nov 1 00:19:29.967800 kubelet[2122]: E1101 00:19:29.967777 2122 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.992510 kubelet[2122]: I1101 00:19:29.992472 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.992736 kubelet[2122]: I1101 00:19:29.992709 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.992870 kubelet[2122]: I1101 00:19:29.992844 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/07c3ed34781a653102cecf477aea91fb-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-c6a118d14a\" (UID: \"07c3ed34781a653102cecf477aea91fb\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.992977 kubelet[2122]: I1101 00:19:29.992964 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1b40cfe5060608015e9843d0e33f4cd8-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-c6a118d14a\" (UID: \"1b40cfe5060608015e9843d0e33f4cd8\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.993074 kubelet[2122]: I1101 00:19:29.993062 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1b40cfe5060608015e9843d0e33f4cd8-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-c6a118d14a\" (UID: \"1b40cfe5060608015e9843d0e33f4cd8\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.993165 kubelet[2122]: I1101 00:19:29.993153 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.993256 kubelet[2122]: I1101 00:19:29.993243 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.993351 kubelet[2122]: I1101 00:19:29.993337 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:29.993461 kubelet[2122]: I1101 00:19:29.993436 2122 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1b40cfe5060608015e9843d0e33f4cd8-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-c6a118d14a\" (UID: \"1b40cfe5060608015e9843d0e33f4cd8\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:30.044510 kubelet[2122]: I1101 00:19:30.044408 2122 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:30.045429 kubelet[2122]: E1101 00:19:30.045398 2122 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:30.195729 kubelet[2122]: E1101 00:19:30.195694 2122 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-c6a118d14a?timeout=10s\": dial tcp 10.200.20.19:6443: connect: connection refused" interval="800ms" Nov 1 00:19:30.252046 env[1493]: time="2025-11-01T00:19:30.251724865Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-c6a118d14a,Uid:9be2d0a99f2cbf94a466dd52f959f43e,Namespace:kube-system,Attempt:0,}" Nov 1 00:19:30.258182 env[1493]: time="2025-11-01T00:19:30.258137587Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-c6a118d14a,Uid:07c3ed34781a653102cecf477aea91fb,Namespace:kube-system,Attempt:0,}" Nov 1 00:19:30.269278 env[1493]: time="2025-11-01T00:19:30.269232351Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-c6a118d14a,Uid:1b40cfe5060608015e9843d0e33f4cd8,Namespace:kube-system,Attempt:0,}" Nov 1 00:19:30.447803 kubelet[2122]: I1101 00:19:30.447701 2122 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:30.448437 kubelet[2122]: E1101 00:19:30.448411 2122 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:30.687259 kubelet[2122]: E1101 00:19:30.687213 2122 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.20.19:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:19:30.875073 kubelet[2122]: E1101 00:19:30.875024 2122 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:19:30.952227 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2098267796.mount: Deactivated successfully. Nov 1 00:19:30.970289 kubelet[2122]: E1101 00:19:30.970239 2122 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:19:30.984619 env[1493]: time="2025-11-01T00:19:30.984556614Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:30.997141 kubelet[2122]: E1101 00:19:30.997093 2122 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-c6a118d14a?timeout=10s\": dial tcp 10.200.20.19:6443: connect: connection refused" interval="1.6s" Nov 1 00:19:30.997256 env[1493]: time="2025-11-01T00:19:30.997089459Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.006876 env[1493]: time="2025-11-01T00:19:31.006821782Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.009425 env[1493]: time="2025-11-01T00:19:31.009392143Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.017963 env[1493]: time="2025-11-01T00:19:31.017921146Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.020920 env[1493]: time="2025-11-01T00:19:31.020872667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.026186 env[1493]: time="2025-11-01T00:19:31.026139549Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.030327 env[1493]: time="2025-11-01T00:19:31.030288350Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.034394 env[1493]: time="2025-11-01T00:19:31.034345752Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.041959 env[1493]: time="2025-11-01T00:19:31.041913715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.055379 env[1493]: time="2025-11-01T00:19:31.055325119Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.069266 env[1493]: time="2025-11-01T00:19:31.069221644Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:31.103828 env[1493]: time="2025-11-01T00:19:31.103759297Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:19:31.104055 env[1493]: time="2025-11-01T00:19:31.104028377Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:19:31.104165 env[1493]: time="2025-11-01T00:19:31.104142697Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:19:31.104423 env[1493]: time="2025-11-01T00:19:31.104392257Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7160c75e30a2e29efb1015c12fc662e870875640125cff4913a1600b7f23f936 pid=2166 runtime=io.containerd.runc.v2 Nov 1 00:19:31.115011 kubelet[2122]: E1101 00:19:31.114952 2122 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-c6a118d14a&limit=500&resourceVersion=0\": dial tcp 10.200.20.19:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:19:31.122860 systemd[1]: Started cri-containerd-7160c75e30a2e29efb1015c12fc662e870875640125cff4913a1600b7f23f936.scope. Nov 1 00:19:31.129662 env[1493]: time="2025-11-01T00:19:31.129453866Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:19:31.129872 env[1493]: time="2025-11-01T00:19:31.129832506Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:19:31.130069 env[1493]: time="2025-11-01T00:19:31.130039746Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:19:31.130441 env[1493]: time="2025-11-01T00:19:31.130405706Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f8e5b307883a3b8009dd1168909ebe49e7a38c27b2663bb2f80bb267c747057e pid=2188 runtime=io.containerd.runc.v2 Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.160714 kernel: audit: type=1400 audit(1761956371.139:406): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.182961 env[1493]: time="2025-11-01T00:19:31.182855885Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:19:31.182961 env[1493]: time="2025-11-01T00:19:31.182908405Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:19:31.182961 env[1493]: time="2025-11-01T00:19:31.182919565Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:19:31.183239 env[1493]: time="2025-11-01T00:19:31.183042885Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9f50830a53743f05b0768c29058f4560ef0d6fbf6a45bd34d5a254bf7d480187 pid=2222 runtime=io.containerd.runc.v2 Nov 1 00:19:31.185653 systemd[1]: Started cri-containerd-f8e5b307883a3b8009dd1168909ebe49e7a38c27b2663bb2f80bb267c747057e.scope. Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.209256 kernel: audit: type=1400 audit(1761956371.139:407): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.209360 kernel: audit: type=1400 audit(1761956371.139:408): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.213327 systemd[1]: Started cri-containerd-9f50830a53743f05b0768c29058f4560ef0d6fbf6a45bd34d5a254bf7d480187.scope. Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.239260 kernel: audit: type=1400 audit(1761956371.139:409): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.241244 env[1493]: time="2025-11-01T00:19:31.241204506Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-c6a118d14a,Uid:9be2d0a99f2cbf94a466dd52f959f43e,Namespace:kube-system,Attempt:0,} returns sandbox id \"7160c75e30a2e29efb1015c12fc662e870875640125cff4913a1600b7f23f936\"" Nov 1 00:19:31.258179 kernel: audit: type=1400 audit(1761956371.139:410): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.278903 kernel: audit: type=1400 audit(1761956371.139:411): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.279018 kubelet[2122]: I1101 00:19:31.278594 2122 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:31.279223 kubelet[2122]: E1101 00:19:31.279185 2122 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit: BPF prog-id=56 op=LOAD Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019db38 a2=10 a3=0 items=0 ppid=2166 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363063373565333061326532396566623130313563313266633636 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=2166 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363063373565333061326532396566623130313563313266633636 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.139000 audit: BPF prog-id=57 op=LOAD Nov 1 00:19:31.139000 audit[2175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=2166 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363063373565333061326532396566623130313563313266633636 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit: BPF prog-id=58 op=LOAD Nov 1 00:19:31.158000 audit[2175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=2166 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363063373565333061326532396566623130313563313266633636 Nov 1 00:19:31.158000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:19:31.158000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.158000 audit: BPF prog-id=59 op=LOAD Nov 1 00:19:31.158000 audit[2175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=2166 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731363063373565333061326532396566623130313563313266633636 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2188 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638653562333037383833613362383030396464313136383930396562 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2188 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638653562333037383833613362383030396464313136383930396562 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit: BPF prog-id=61 op=LOAD Nov 1 00:19:31.280000 audit[2210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2188 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638653562333037383833613362383030396464313136383930396562 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit: BPF prog-id=62 op=LOAD Nov 1 00:19:31.280000 audit[2210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2188 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638653562333037383833613362383030396464313136383930396562 Nov 1 00:19:31.280000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:19:31.280000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { perfmon } for pid=2210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit[2210]: AVC avc: denied { bpf } for pid=2210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.280000 audit: BPF prog-id=63 op=LOAD Nov 1 00:19:31.280000 audit[2210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2188 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638653562333037383833613362383030396464313136383930396562 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.285000 audit: BPF prog-id=64 op=LOAD Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2222 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353038333061353337343366303562303736386332393035386634 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2222 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353038333061353337343366303562303736386332393035386634 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit: BPF prog-id=65 op=LOAD Nov 1 00:19:31.287000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2222 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353038333061353337343366303562303736386332393035386634 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit: BPF prog-id=66 op=LOAD Nov 1 00:19:31.287000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2222 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353038333061353337343366303562303736386332393035386634 Nov 1 00:19:31.287000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:19:31.287000 audit: BPF prog-id=65 op=UNLOAD Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.287000 audit: BPF prog-id=67 op=LOAD Nov 1 00:19:31.287000 audit[2237]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2222 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966353038333061353337343366303562303736386332393035386634 Nov 1 00:19:31.292511 env[1493]: time="2025-11-01T00:19:31.292471124Z" level=info msg="CreateContainer within sandbox \"7160c75e30a2e29efb1015c12fc662e870875640125cff4913a1600b7f23f936\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:19:31.314147 env[1493]: time="2025-11-01T00:19:31.314095732Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-c6a118d14a,Uid:07c3ed34781a653102cecf477aea91fb,Namespace:kube-system,Attempt:0,} returns sandbox id \"f8e5b307883a3b8009dd1168909ebe49e7a38c27b2663bb2f80bb267c747057e\"" Nov 1 00:19:31.316356 env[1493]: time="2025-11-01T00:19:31.315986613Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-c6a118d14a,Uid:1b40cfe5060608015e9843d0e33f4cd8,Namespace:kube-system,Attempt:0,} returns sandbox id \"9f50830a53743f05b0768c29058f4560ef0d6fbf6a45bd34d5a254bf7d480187\"" Nov 1 00:19:31.324158 env[1493]: time="2025-11-01T00:19:31.324112575Z" level=info msg="CreateContainer within sandbox \"f8e5b307883a3b8009dd1168909ebe49e7a38c27b2663bb2f80bb267c747057e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:19:31.331072 env[1493]: time="2025-11-01T00:19:31.331032418Z" level=info msg="CreateContainer within sandbox \"9f50830a53743f05b0768c29058f4560ef0d6fbf6a45bd34d5a254bf7d480187\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:19:31.340576 env[1493]: time="2025-11-01T00:19:31.340527901Z" level=info msg="CreateContainer within sandbox \"7160c75e30a2e29efb1015c12fc662e870875640125cff4913a1600b7f23f936\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"01841e815e12fe38de05623e55652b1285281eeeee39b4e3def13331b4f8f3ca\"" Nov 1 00:19:31.341400 env[1493]: time="2025-11-01T00:19:31.341372342Z" level=info msg="StartContainer for \"01841e815e12fe38de05623e55652b1285281eeeee39b4e3def13331b4f8f3ca\"" Nov 1 00:19:31.362254 systemd[1]: Started cri-containerd-01841e815e12fe38de05623e55652b1285281eeeee39b4e3def13331b4f8f3ca.scope. Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.382000 audit: BPF prog-id=68 op=LOAD Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2166 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383431653831356531326665333864653035363233653535363532 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2166 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383431653831356531326665333864653035363233653535363532 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit: BPF prog-id=69 op=LOAD Nov 1 00:19:31.387000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2166 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383431653831356531326665333864653035363233653535363532 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit: BPF prog-id=70 op=LOAD Nov 1 00:19:31.387000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2166 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383431653831356531326665333864653035363233653535363532 Nov 1 00:19:31.387000 audit: BPF prog-id=70 op=UNLOAD Nov 1 00:19:31.387000 audit: BPF prog-id=69 op=UNLOAD Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { perfmon } for pid=2295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit[2295]: AVC avc: denied { bpf } for pid=2295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.387000 audit: BPF prog-id=71 op=LOAD Nov 1 00:19:31.387000 audit[2295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2166 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031383431653831356531326665333864653035363233653535363532 Nov 1 00:19:31.397763 env[1493]: time="2025-11-01T00:19:31.397702442Z" level=info msg="CreateContainer within sandbox \"f8e5b307883a3b8009dd1168909ebe49e7a38c27b2663bb2f80bb267c747057e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"89475f58c84a888a2407f1f41394e016d4f6b54d848d1914071591fcec9de65f\"" Nov 1 00:19:31.398605 env[1493]: time="2025-11-01T00:19:31.398256402Z" level=info msg="StartContainer for \"89475f58c84a888a2407f1f41394e016d4f6b54d848d1914071591fcec9de65f\"" Nov 1 00:19:31.408631 env[1493]: time="2025-11-01T00:19:31.408551286Z" level=info msg="CreateContainer within sandbox \"9f50830a53743f05b0768c29058f4560ef0d6fbf6a45bd34d5a254bf7d480187\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d24d536c2f83a5b06d9c0dd2a0f214c21b3a024331476a3b971c7c29647d04e9\"" Nov 1 00:19:31.409224 env[1493]: time="2025-11-01T00:19:31.409181406Z" level=info msg="StartContainer for \"d24d536c2f83a5b06d9c0dd2a0f214c21b3a024331476a3b971c7c29647d04e9\"" Nov 1 00:19:31.423323 env[1493]: time="2025-11-01T00:19:31.423271011Z" level=info msg="StartContainer for \"01841e815e12fe38de05623e55652b1285281eeeee39b4e3def13331b4f8f3ca\" returns successfully" Nov 1 00:19:31.428550 systemd[1]: Started cri-containerd-89475f58c84a888a2407f1f41394e016d4f6b54d848d1914071591fcec9de65f.scope. Nov 1 00:19:31.450179 systemd[1]: Started cri-containerd-d24d536c2f83a5b06d9c0dd2a0f214c21b3a024331476a3b971c7c29647d04e9.scope. Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.458000 audit: BPF prog-id=72 op=LOAD Nov 1 00:19:31.458000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.458000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2188 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839343735663538633834613838386132343037663166343133393465 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2188 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839343735663538633834613838386132343037663166343133393465 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.459000 audit: BPF prog-id=73 op=LOAD Nov 1 00:19:31.459000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2188 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839343735663538633834613838386132343037663166343133393465 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.462000 audit: BPF prog-id=74 op=LOAD Nov 1 00:19:31.462000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2188 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839343735663538633834613838386132343037663166343133393465 Nov 1 00:19:31.462000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:19:31.462000 audit: BPF prog-id=73 op=UNLOAD Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { perfmon } for pid=2328 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit[2328]: AVC avc: denied { bpf } for pid=2328 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.463000 audit: BPF prog-id=75 op=LOAD Nov 1 00:19:31.463000 audit[2328]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2188 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839343735663538633834613838386132343037663166343133393465 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.470000 audit: BPF prog-id=76 op=LOAD Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2222 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432346435333663326638336135623036643963306464326130663231 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2222 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432346435333663326638336135623036643963306464326130663231 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit: BPF prog-id=77 op=LOAD Nov 1 00:19:31.471000 audit[2342]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2222 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432346435333663326638336135623036643963306464326130663231 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit: BPF prog-id=78 op=LOAD Nov 1 00:19:31.471000 audit[2342]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2222 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432346435333663326638336135623036643963306464326130663231 Nov 1 00:19:31.471000 audit: BPF prog-id=78 op=UNLOAD Nov 1 00:19:31.471000 audit: BPF prog-id=77 op=UNLOAD Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { perfmon } for pid=2342 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit[2342]: AVC avc: denied { bpf } for pid=2342 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:31.471000 audit: BPF prog-id=79 op=LOAD Nov 1 00:19:31.471000 audit[2342]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2222 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:31.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432346435333663326638336135623036643963306464326130663231 Nov 1 00:19:31.506032 env[1493]: time="2025-11-01T00:19:31.505973680Z" level=info msg="StartContainer for \"89475f58c84a888a2407f1f41394e016d4f6b54d848d1914071591fcec9de65f\" returns successfully" Nov 1 00:19:31.513696 env[1493]: time="2025-11-01T00:19:31.509664562Z" level=info msg="StartContainer for \"d24d536c2f83a5b06d9c0dd2a0f214c21b3a024331476a3b971c7c29647d04e9\" returns successfully" Nov 1 00:19:31.637257 kubelet[2122]: E1101 00:19:31.636859 2122 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:31.643477 kubelet[2122]: E1101 00:19:31.643449 2122 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:31.646322 kubelet[2122]: E1101 00:19:31.646294 2122 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:32.648032 kubelet[2122]: E1101 00:19:32.648002 2122 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:32.648515 kubelet[2122]: E1101 00:19:32.648098 2122 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:32.882381 kubelet[2122]: I1101 00:19:32.882349 2122 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:33.101000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:33.101000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40000754a0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:19:33.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:33.102000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:33.102000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40003f0060 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:19:33.102000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:33.540000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:33.540000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4008364c00 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:19:33.540000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:33.540000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:33.540000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4008364c60 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:19:33.540000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:33.541000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:33.541000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=4003b17540 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:19:33.541000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:33.555000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:33.555000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400488f3e0 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:19:33.555000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:33.619000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:33.619000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8f a1=40043be780 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:19:33.619000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:33.619000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:33.619000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8f a1=4004512120 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:19:33.619000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:33.793220 kubelet[2122]: E1101 00:19:33.793109 2122 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-c6a118d14a\" not found" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:33.869194 kubelet[2122]: I1101 00:19:33.869152 2122 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:33.869391 kubelet[2122]: E1101 00:19:33.869376 2122 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ci-3510.3.8-n-c6a118d14a\": node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:33.884940 kubelet[2122]: E1101 00:19:33.884894 2122 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:33.985426 kubelet[2122]: E1101 00:19:33.985384 2122 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:34.086432 kubelet[2122]: E1101 00:19:34.086323 2122 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:34.186960 kubelet[2122]: E1101 00:19:34.186919 2122 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:34.293598 kubelet[2122]: I1101 00:19:34.293568 2122 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:34.298700 kubelet[2122]: E1101 00:19:34.298657 2122 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-c6a118d14a\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:34.298913 kubelet[2122]: I1101 00:19:34.298896 2122 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:34.301326 kubelet[2122]: E1101 00:19:34.301286 2122 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-c6a118d14a\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:34.301326 kubelet[2122]: I1101 00:19:34.301320 2122 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:34.303788 kubelet[2122]: E1101 00:19:34.303751 2122 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:34.577688 kubelet[2122]: I1101 00:19:34.577654 2122 apiserver.go:52] "Watching apiserver" Nov 1 00:19:34.591609 kubelet[2122]: I1101 00:19:34.591562 2122 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:19:35.752031 systemd[1]: Reloading. Nov 1 00:19:35.802871 /usr/lib/systemd/system-generators/torcx-generator[2419]: time="2025-11-01T00:19:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:19:35.803296 /usr/lib/systemd/system-generators/torcx-generator[2419]: time="2025-11-01T00:19:35Z" level=info msg="torcx already run" Nov 1 00:19:35.905586 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:19:35.905791 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:19:35.920779 kubelet[2122]: I1101 00:19:35.920744 2122 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:35.923268 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:19:35.931769 kubelet[2122]: I1101 00:19:35.931724 2122 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:19:36.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.014099 kernel: kauditd_printk_skb: 364 callbacks suppressed Nov 1 00:19:36.014227 kernel: audit: type=1400 audit(1761956376.006:520): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.042483 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:19:36.042612 kernel: audit: type=1400 audit(1761956376.007:521): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.067663 kernel: audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:19:36.067775 kernel: audit: type=1400 audit(1761956376.007:522): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.068241 kubelet[2122]: I1101 00:19:36.068217 2122 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.090290 kernel: audit: backlog limit exceeded Nov 1 00:19:36.090441 kernel: audit: type=1400 audit(1761956376.007:523): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.116655 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:19:36.116801 kernel: audit: type=1400 audit(1761956376.007:524): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.118051 kubelet[2122]: I1101 00:19:36.118026 2122 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:19:36.134428 kernel: audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:19:36.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit: BPF prog-id=80 op=LOAD Nov 1 00:19:36.012000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit: BPF prog-id=81 op=LOAD Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.030000 audit: BPF prog-id=82 op=LOAD Nov 1 00:19:36.030000 audit: BPF prog-id=42 op=UNLOAD Nov 1 00:19:36.031000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit: BPF prog-id=83 op=LOAD Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.031000 audit: BPF prog-id=84 op=LOAD Nov 1 00:19:36.031000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:19:36.031000 audit: BPF prog-id=45 op=UNLOAD Nov 1 00:19:36.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.091000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:19:36.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit: BPF prog-id=86 op=LOAD Nov 1 00:19:36.143000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit: BPF prog-id=87 op=LOAD Nov 1 00:19:36.143000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit: BPF prog-id=88 op=LOAD Nov 1 00:19:36.144000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.144000 audit: BPF prog-id=89 op=LOAD Nov 1 00:19:36.144000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit: BPF prog-id=90 op=LOAD Nov 1 00:19:36.145000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.145000 audit: BPF prog-id=91 op=LOAD Nov 1 00:19:36.145000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit: BPF prog-id=92 op=LOAD Nov 1 00:19:36.146000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit: BPF prog-id=93 op=LOAD Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.146000 audit: BPF prog-id=94 op=LOAD Nov 1 00:19:36.146000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:19:36.146000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit: BPF prog-id=95 op=LOAD Nov 1 00:19:36.147000 audit: BPF prog-id=68 op=UNLOAD Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit: BPF prog-id=96 op=LOAD Nov 1 00:19:36.147000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit: BPF prog-id=97 op=LOAD Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.147000 audit: BPF prog-id=98 op=LOAD Nov 1 00:19:36.148000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:19:36.148000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit: BPF prog-id=99 op=LOAD Nov 1 00:19:36.150000 audit: BPF prog-id=64 op=UNLOAD Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.151000 audit: BPF prog-id=100 op=LOAD Nov 1 00:19:36.151000 audit: BPF prog-id=72 op=UNLOAD Nov 1 00:19:36.165284 systemd[1]: Stopping kubelet.service... Nov 1 00:19:36.194944 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:19:36.195149 systemd[1]: Stopped kubelet.service. Nov 1 00:19:36.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:36.195210 systemd[1]: kubelet.service: Consumed 2.656s CPU time. Nov 1 00:19:36.197642 systemd[1]: Starting kubelet.service... Nov 1 00:19:36.305177 systemd[1]: Started kubelet.service. Nov 1 00:19:36.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:36.350253 kubelet[2483]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:19:36.350253 kubelet[2483]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:19:36.350253 kubelet[2483]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:19:36.350680 kubelet[2483]: I1101 00:19:36.350291 2483 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:19:36.358134 kubelet[2483]: I1101 00:19:36.358088 2483 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:19:36.358323 kubelet[2483]: I1101 00:19:36.358312 2483 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:19:36.358839 kubelet[2483]: I1101 00:19:36.358819 2483 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:19:36.360534 kubelet[2483]: I1101 00:19:36.360512 2483 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Nov 1 00:19:36.362881 kubelet[2483]: I1101 00:19:36.362855 2483 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:19:36.366708 kubelet[2483]: E1101 00:19:36.366539 2483 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:19:36.366708 kubelet[2483]: I1101 00:19:36.366613 2483 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:19:36.369830 kubelet[2483]: I1101 00:19:36.369801 2483 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:19:36.370039 kubelet[2483]: I1101 00:19:36.370004 2483 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:19:36.370195 kubelet[2483]: I1101 00:19:36.370036 2483 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-c6a118d14a","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:19:36.370274 kubelet[2483]: I1101 00:19:36.370200 2483 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:19:36.370274 kubelet[2483]: I1101 00:19:36.370209 2483 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:19:36.370274 kubelet[2483]: I1101 00:19:36.370252 2483 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:19:36.370410 kubelet[2483]: I1101 00:19:36.370391 2483 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:19:36.370410 kubelet[2483]: I1101 00:19:36.370410 2483 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:19:36.370476 kubelet[2483]: I1101 00:19:36.370449 2483 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:19:36.370476 kubelet[2483]: I1101 00:19:36.370461 2483 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:19:36.375449 kubelet[2483]: I1101 00:19:36.375423 2483 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:19:36.381000 audit[2483]: AVC avc: denied { mac_admin } for pid=2483 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.381000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:36.381000 audit[2483]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c30480 a1=4000bc9500 a2=4000c30450 a3=25 items=0 ppid=1 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:36.381000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:36.381000 audit[2483]: AVC avc: denied { mac_admin } for pid=2483 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.381000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:36.381000 audit[2483]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bd3300 a1=4000bc9518 a2=4000c30510 a3=25 items=0 ppid=1 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:36.381000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:36.385678 kubelet[2483]: I1101 00:19:36.378260 2483 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:19:36.385678 kubelet[2483]: I1101 00:19:36.380287 2483 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:19:36.385678 kubelet[2483]: I1101 00:19:36.380330 2483 server.go:1289] "Started kubelet" Nov 1 00:19:36.385678 kubelet[2483]: I1101 00:19:36.382841 2483 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:19:36.385678 kubelet[2483]: I1101 00:19:36.382892 2483 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:19:36.385678 kubelet[2483]: I1101 00:19:36.382924 2483 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:19:36.398243 kubelet[2483]: I1101 00:19:36.398193 2483 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:19:36.399605 kubelet[2483]: I1101 00:19:36.399419 2483 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:19:36.405671 kubelet[2483]: E1101 00:19:36.404427 2483 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:19:36.405671 kubelet[2483]: E1101 00:19:36.405507 2483 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-c6a118d14a\" not found" Nov 1 00:19:36.405671 kubelet[2483]: I1101 00:19:36.405564 2483 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:19:36.405911 kubelet[2483]: I1101 00:19:36.405887 2483 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:19:36.406206 kubelet[2483]: I1101 00:19:36.406173 2483 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:19:36.416171 kubelet[2483]: I1101 00:19:36.416126 2483 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:19:36.430141 kubelet[2483]: I1101 00:19:36.430096 2483 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:19:36.430276 kubelet[2483]: I1101 00:19:36.430243 2483 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:19:36.432698 kubelet[2483]: I1101 00:19:36.431903 2483 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:19:36.434395 kubelet[2483]: I1101 00:19:36.434348 2483 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:19:36.434395 kubelet[2483]: I1101 00:19:36.434374 2483 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:19:36.442986 kubelet[2483]: I1101 00:19:36.442943 2483 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:19:36.444305 kubelet[2483]: I1101 00:19:36.444278 2483 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:19:36.444452 kubelet[2483]: I1101 00:19:36.444442 2483 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:19:36.444526 kubelet[2483]: I1101 00:19:36.444514 2483 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:19:36.444575 kubelet[2483]: I1101 00:19:36.444567 2483 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:19:36.444740 kubelet[2483]: E1101 00:19:36.444718 2483 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:19:36.484004 kubelet[2483]: I1101 00:19:36.483978 2483 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:19:36.484190 kubelet[2483]: I1101 00:19:36.484175 2483 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:19:36.484300 kubelet[2483]: I1101 00:19:36.484289 2483 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:19:36.484954 kubelet[2483]: I1101 00:19:36.484922 2483 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:19:36.484954 kubelet[2483]: I1101 00:19:36.484948 2483 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:19:36.485064 kubelet[2483]: I1101 00:19:36.484968 2483 policy_none.go:49] "None policy: Start" Nov 1 00:19:36.485064 kubelet[2483]: I1101 00:19:36.484980 2483 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:19:36.485064 kubelet[2483]: I1101 00:19:36.484997 2483 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:19:36.485154 kubelet[2483]: I1101 00:19:36.485129 2483 state_mem.go:75] "Updated machine memory state" Nov 1 00:19:36.490016 kubelet[2483]: E1101 00:19:36.489990 2483 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:19:36.488000 audit[2483]: AVC avc: denied { mac_admin } for pid=2483 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:36.488000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:36.488000 audit[2483]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e98210 a1=4000f8e150 a2=4000e981e0 a3=25 items=0 ppid=1 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:36.488000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:36.490394 kubelet[2483]: E1101 00:19:36.490368 2483 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:19:36.490922 kubelet[2483]: I1101 00:19:36.490903 2483 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:19:36.491272 kubelet[2483]: I1101 00:19:36.491220 2483 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:19:36.491828 kubelet[2483]: I1101 00:19:36.491813 2483 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:19:36.493439 kubelet[2483]: E1101 00:19:36.493420 2483 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:19:36.546249 kubelet[2483]: I1101 00:19:36.546219 2483 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.546827 kubelet[2483]: I1101 00:19:36.546806 2483 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.691873 kubelet[2483]: I1101 00:19:36.547190 2483 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.691873 kubelet[2483]: I1101 00:19:36.556656 2483 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:19:36.691873 kubelet[2483]: I1101 00:19:36.560366 2483 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:19:36.691873 kubelet[2483]: E1101 00:19:36.560436 2483 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.691873 kubelet[2483]: I1101 00:19:36.560812 2483 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:19:36.691873 kubelet[2483]: E1101 00:19:36.560867 2483 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-c6a118d14a\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.691873 kubelet[2483]: I1101 00:19:36.596153 2483 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.691873 kubelet[2483]: I1101 00:19:36.610451 2483 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.691873 kubelet[2483]: I1101 00:19:36.691814 2483 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.731549 kubelet[2483]: I1101 00:19:36.731508 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.731776 kubelet[2483]: I1101 00:19:36.731759 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.731880 kubelet[2483]: I1101 00:19:36.731866 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1b40cfe5060608015e9843d0e33f4cd8-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-c6a118d14a\" (UID: \"1b40cfe5060608015e9843d0e33f4cd8\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.731970 kubelet[2483]: I1101 00:19:36.731956 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1b40cfe5060608015e9843d0e33f4cd8-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-c6a118d14a\" (UID: \"1b40cfe5060608015e9843d0e33f4cd8\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.732073 kubelet[2483]: I1101 00:19:36.732061 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.732164 kubelet[2483]: I1101 00:19:36.732152 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/07c3ed34781a653102cecf477aea91fb-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-c6a118d14a\" (UID: \"07c3ed34781a653102cecf477aea91fb\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.732247 kubelet[2483]: I1101 00:19:36.732235 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1b40cfe5060608015e9843d0e33f4cd8-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-c6a118d14a\" (UID: \"1b40cfe5060608015e9843d0e33f4cd8\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.732321 kubelet[2483]: I1101 00:19:36.732308 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:36.732404 kubelet[2483]: I1101 00:19:36.732391 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/9be2d0a99f2cbf94a466dd52f959f43e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-c6a118d14a\" (UID: \"9be2d0a99f2cbf94a466dd52f959f43e\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:37.371882 kubelet[2483]: I1101 00:19:37.371846 2483 apiserver.go:52] "Watching apiserver" Nov 1 00:19:37.430712 kubelet[2483]: I1101 00:19:37.430676 2483 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:19:37.467676 kubelet[2483]: I1101 00:19:37.467643 2483 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:37.478667 kubelet[2483]: I1101 00:19:37.478638 2483 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Nov 1 00:19:37.478898 kubelet[2483]: E1101 00:19:37.478881 2483 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-c6a118d14a\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-c6a118d14a" Nov 1 00:19:37.504927 kubelet[2483]: I1101 00:19:37.504695 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-c6a118d14a" podStartSLOduration=2.504675345 podStartE2EDuration="2.504675345s" podCreationTimestamp="2025-11-01 00:19:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:19:37.492877741 +0000 UTC m=+1.176924846" watchObservedRunningTime="2025-11-01 00:19:37.504675345 +0000 UTC m=+1.188722450" Nov 1 00:19:37.517991 kubelet[2483]: I1101 00:19:37.517939 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-c6a118d14a" podStartSLOduration=1.517921549 podStartE2EDuration="1.517921549s" podCreationTimestamp="2025-11-01 00:19:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:19:37.505068985 +0000 UTC m=+1.189116050" watchObservedRunningTime="2025-11-01 00:19:37.517921549 +0000 UTC m=+1.201968654" Nov 1 00:19:37.543334 kubelet[2483]: I1101 00:19:37.543279 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-c6a118d14a" podStartSLOduration=1.543261757 podStartE2EDuration="1.543261757s" podCreationTimestamp="2025-11-01 00:19:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:19:37.518693389 +0000 UTC m=+1.202740494" watchObservedRunningTime="2025-11-01 00:19:37.543261757 +0000 UTC m=+1.227308822" Nov 1 00:19:37.617000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:19:37.617000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400049ef80 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:19:37.617000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:40.740000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:40.740000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40004f30e0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:19:40.740000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:40.742000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:40.742000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000818200 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:19:40.742000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:40.742000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:40.742000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40004f3620 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:19:40.742000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:40.742000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:40.742000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000818520 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:19:40.742000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:42.245318 kubelet[2483]: I1101 00:19:42.245288 2483 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:19:42.246220 env[1493]: time="2025-11-01T00:19:42.246094873Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:19:42.246570 kubelet[2483]: I1101 00:19:42.246331 2483 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:19:43.242739 systemd[1]: Created slice kubepods-besteffort-poda6c6ce71_f646_435d_9d5b_98a57fb0fae2.slice. Nov 1 00:19:43.267790 kubelet[2483]: I1101 00:19:43.267752 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a6c6ce71-f646-435d-9d5b-98a57fb0fae2-lib-modules\") pod \"kube-proxy-qsv79\" (UID: \"a6c6ce71-f646-435d-9d5b-98a57fb0fae2\") " pod="kube-system/kube-proxy-qsv79" Nov 1 00:19:43.268175 kubelet[2483]: I1101 00:19:43.268156 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pb72s\" (UniqueName: \"kubernetes.io/projected/a6c6ce71-f646-435d-9d5b-98a57fb0fae2-kube-api-access-pb72s\") pod \"kube-proxy-qsv79\" (UID: \"a6c6ce71-f646-435d-9d5b-98a57fb0fae2\") " pod="kube-system/kube-proxy-qsv79" Nov 1 00:19:43.268295 kubelet[2483]: I1101 00:19:43.268279 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/a6c6ce71-f646-435d-9d5b-98a57fb0fae2-kube-proxy\") pod \"kube-proxy-qsv79\" (UID: \"a6c6ce71-f646-435d-9d5b-98a57fb0fae2\") " pod="kube-system/kube-proxy-qsv79" Nov 1 00:19:43.268392 kubelet[2483]: I1101 00:19:43.268377 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a6c6ce71-f646-435d-9d5b-98a57fb0fae2-xtables-lock\") pod \"kube-proxy-qsv79\" (UID: \"a6c6ce71-f646-435d-9d5b-98a57fb0fae2\") " pod="kube-system/kube-proxy-qsv79" Nov 1 00:19:43.377898 kubelet[2483]: I1101 00:19:43.377866 2483 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:19:43.553049 env[1493]: time="2025-11-01T00:19:43.552930983Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-qsv79,Uid:a6c6ce71-f646-435d-9d5b-98a57fb0fae2,Namespace:kube-system,Attempt:0,}" Nov 1 00:19:43.585754 systemd[1]: Created slice kubepods-besteffort-podd8b92bc3_a976_40e4_abe7_83544c92445f.slice. Nov 1 00:19:43.605966 env[1493]: time="2025-11-01T00:19:43.605878237Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:19:43.605966 env[1493]: time="2025-11-01T00:19:43.605923317Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:19:43.606174 env[1493]: time="2025-11-01T00:19:43.605934077Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:19:43.606231 env[1493]: time="2025-11-01T00:19:43.606196397Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ddcaa6096b20c4abcca00bedd5c2406b60804a938d4e7b8494bf5c1617d20b15 pid=2536 runtime=io.containerd.runc.v2 Nov 1 00:19:43.619130 systemd[1]: Started cri-containerd-ddcaa6096b20c4abcca00bedd5c2406b60804a938d4e7b8494bf5c1617d20b15.scope. Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.645257 kernel: kauditd_printk_skb: 267 callbacks suppressed Nov 1 00:19:43.645309 kernel: audit: type=1400 audit(1761956383.638:772): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.679160 kernel: audit: type=1400 audit(1761956383.638:773): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.696438 kernel: audit: type=1400 audit(1761956383.638:774): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.715386 kernel: audit: type=1400 audit(1761956383.638:775): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.736396 kernel: audit: type=1400 audit(1761956383.638:776): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.755172 kernel: audit: type=1400 audit(1761956383.638:777): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.774040 kernel: audit: type=1400 audit(1761956383.638:778): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.793817 kernel: audit: type=1400 audit(1761956383.638:779): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.794219 kubelet[2483]: I1101 00:19:43.794105 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d8b92bc3-a976-40e4-abe7-83544c92445f-var-lib-calico\") pod \"tigera-operator-7dcd859c48-lsmrf\" (UID: \"d8b92bc3-a976-40e4-abe7-83544c92445f\") " pod="tigera-operator/tigera-operator-7dcd859c48-lsmrf" Nov 1 00:19:43.794219 kubelet[2483]: I1101 00:19:43.794146 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9jtmq\" (UniqueName: \"kubernetes.io/projected/d8b92bc3-a976-40e4-abe7-83544c92445f-kube-api-access-9jtmq\") pod \"tigera-operator-7dcd859c48-lsmrf\" (UID: \"d8b92bc3-a976-40e4-abe7-83544c92445f\") " pod="tigera-operator/tigera-operator-7dcd859c48-lsmrf" Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.813259 kernel: audit: type=1400 audit(1761956383.638:780): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.832446 kernel: audit: type=1400 audit(1761956383.638:781): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.638000 audit: BPF prog-id=101 op=LOAD Nov 1 00:19:43.832871 env[1493]: time="2025-11-01T00:19:43.832784856Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-qsv79,Uid:a6c6ce71-f646-435d-9d5b-98a57fb0fae2,Namespace:kube-system,Attempt:0,} returns sandbox id \"ddcaa6096b20c4abcca00bedd5c2406b60804a938d4e7b8494bf5c1617d20b15\"" Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2536 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464636161363039366232306334616263636130306265646435633234 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2536 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464636161363039366232306334616263636130306265646435633234 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.647000 audit: BPF prog-id=102 op=LOAD Nov 1 00:19:43.647000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2536 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464636161363039366232306334616263636130306265646435633234 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.660000 audit: BPF prog-id=103 op=LOAD Nov 1 00:19:43.660000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2536 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464636161363039366232306334616263636130306265646435633234 Nov 1 00:19:43.677000 audit: BPF prog-id=103 op=UNLOAD Nov 1 00:19:43.677000 audit: BPF prog-id=102 op=UNLOAD Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.677000 audit: BPF prog-id=104 op=LOAD Nov 1 00:19:43.677000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2536 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464636161363039366232306334616263636130306265646435633234 Nov 1 00:19:43.847406 env[1493]: time="2025-11-01T00:19:43.847356140Z" level=info msg="CreateContainer within sandbox \"ddcaa6096b20c4abcca00bedd5c2406b60804a938d4e7b8494bf5c1617d20b15\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:19:43.915465 env[1493]: time="2025-11-01T00:19:43.915400438Z" level=info msg="CreateContainer within sandbox \"ddcaa6096b20c4abcca00bedd5c2406b60804a938d4e7b8494bf5c1617d20b15\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"4ceed32bdf6c1308744243f4ada967b3a046a2b157ec3d11e15093bcf81cd573\"" Nov 1 00:19:43.916112 env[1493]: time="2025-11-01T00:19:43.916073558Z" level=info msg="StartContainer for \"4ceed32bdf6c1308744243f4ada967b3a046a2b157ec3d11e15093bcf81cd573\"" Nov 1 00:19:43.933146 systemd[1]: Started cri-containerd-4ceed32bdf6c1308744243f4ada967b3a046a2b157ec3d11e15093bcf81cd573.scope. Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2536 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463656564333262646636633133303837343432343366346164613936 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.954000 audit: BPF prog-id=105 op=LOAD Nov 1 00:19:43.954000 audit[2577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2536 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463656564333262646636633133303837343432343366346164613936 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit: BPF prog-id=106 op=LOAD Nov 1 00:19:43.955000 audit[2577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2536 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463656564333262646636633133303837343432343366346164613936 Nov 1 00:19:43.955000 audit: BPF prog-id=106 op=UNLOAD Nov 1 00:19:43.955000 audit: BPF prog-id=105 op=UNLOAD Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { perfmon } for pid=2577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit[2577]: AVC avc: denied { bpf } for pid=2577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:43.955000 audit: BPF prog-id=107 op=LOAD Nov 1 00:19:43.955000 audit[2577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2536 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:43.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463656564333262646636633133303837343432343366346164613936 Nov 1 00:19:43.991294 env[1493]: time="2025-11-01T00:19:43.991241298Z" level=info msg="StartContainer for \"4ceed32bdf6c1308744243f4ada967b3a046a2b157ec3d11e15093bcf81cd573\" returns successfully" Nov 1 00:19:44.096000 audit[2639]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.096000 audit[2639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffed8d1910 a2=0 a3=1 items=0 ppid=2587 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:19:44.096000 audit[2638]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.096000 audit[2638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9c19e30 a2=0 a3=1 items=0 ppid=2587 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:19:44.097000 audit[2640]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.097000 audit[2640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdcdc8040 a2=0 a3=1 items=0 ppid=2587 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:19:44.098000 audit[2641]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.098000 audit[2641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeeddaee0 a2=0 a3=1 items=0 ppid=2587 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.098000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:19:44.100000 audit[2643]: NETFILTER_CFG table=nat:45 family=10 entries=1 op=nft_register_chain pid=2643 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.100000 audit[2643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe764dc30 a2=0 a3=1 items=0 ppid=2587 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.100000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:19:44.102000 audit[2645]: NETFILTER_CFG table=filter:46 family=10 entries=1 op=nft_register_chain pid=2645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.102000 audit[2645]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef58cfc0 a2=0 a3=1 items=0 ppid=2587 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.102000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:19:44.189911 env[1493]: time="2025-11-01T00:19:44.189857229Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-lsmrf,Uid:d8b92bc3-a976-40e4-abe7-83544c92445f,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:19:44.204000 audit[2646]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.204000 audit[2646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe8dd3920 a2=0 a3=1 items=0 ppid=2587 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.204000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:19:44.206000 audit[2648]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.206000 audit[2648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffddcfe420 a2=0 a3=1 items=0 ppid=2587 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.206000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:19:44.213000 audit[2651]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2651 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.213000 audit[2651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe04bd740 a2=0 a3=1 items=0 ppid=2587 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.213000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:19:44.214000 audit[2652]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.214000 audit[2652]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0cb7aa0 a2=0 a3=1 items=0 ppid=2587 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.214000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:19:44.217000 audit[2654]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2654 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.217000 audit[2654]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff97be180 a2=0 a3=1 items=0 ppid=2587 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.217000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:19:44.220000 audit[2656]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2656 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.220000 audit[2656]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc76b2e80 a2=0 a3=1 items=0 ppid=2587 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.220000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:19:44.223000 audit[2666]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2666 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.223000 audit[2666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffb292aa0 a2=0 a3=1 items=0 ppid=2587 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.223000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:19:44.227679 env[1493]: time="2025-11-01T00:19:44.227577279Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:19:44.227679 env[1493]: time="2025-11-01T00:19:44.227646439Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:19:44.227679 env[1493]: time="2025-11-01T00:19:44.227658399Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:19:44.228060 env[1493]: time="2025-11-01T00:19:44.227986799Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/73d191d5e6abed4a3f7ee08558180469612db5564d77c420b82146529016eb15 pid=2665 runtime=io.containerd.runc.v2 Nov 1 00:19:44.230000 audit[2679]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.230000 audit[2679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe5e13530 a2=0 a3=1 items=0 ppid=2587 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.230000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:19:44.231000 audit[2683]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.231000 audit[2683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb6b9d60 a2=0 a3=1 items=0 ppid=2587 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.231000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:19:44.237000 audit[2688]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.237000 audit[2688]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc3681000 a2=0 a3=1 items=0 ppid=2587 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.237000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:19:44.238000 audit[2694]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.238000 audit[2694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffde612860 a2=0 a3=1 items=0 ppid=2587 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.238000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:19:44.240698 systemd[1]: Started cri-containerd-73d191d5e6abed4a3f7ee08558180469612db5564d77c420b82146529016eb15.scope. Nov 1 00:19:44.243000 audit[2696]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.243000 audit[2696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffc953df0 a2=0 a3=1 items=0 ppid=2587 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.243000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:19:44.247000 audit[2699]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.247000 audit[2699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdbecc3a0 a2=0 a3=1 items=0 ppid=2587 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.247000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:19:44.254000 audit[2709]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.254000 audit[2709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd7488cb0 a2=0 a3=1 items=0 ppid=2587 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.254000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:19:44.258000 audit[2710]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.258000 audit[2710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc4364a60 a2=0 a3=1 items=0 ppid=2587 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.258000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:19:44.261000 audit[2712]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.261000 audit[2712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd5af1b00 a2=0 a3=1 items=0 ppid=2587 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.261000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.261000 audit: BPF prog-id=108 op=LOAD Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2665 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733643139316435653661626564346133663765653038353538313830 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2665 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733643139316435653661626564346133663765653038353538313830 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.262000 audit: BPF prog-id=109 op=LOAD Nov 1 00:19:44.262000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2665 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733643139316435653661626564346133663765653038353538313830 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.263000 audit: BPF prog-id=110 op=LOAD Nov 1 00:19:44.263000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2665 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733643139316435653661626564346133663765653038353538313830 Nov 1 00:19:44.264000 audit: BPF prog-id=110 op=UNLOAD Nov 1 00:19:44.264000 audit: BPF prog-id=109 op=UNLOAD Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.264000 audit: BPF prog-id=111 op=LOAD Nov 1 00:19:44.264000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2665 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733643139316435653661626564346133663765653038353538313830 Nov 1 00:19:44.265000 audit[2715]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.265000 audit[2715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff96cea50 a2=0 a3=1 items=0 ppid=2587 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.265000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:19:44.266000 audit[2716]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.266000 audit[2716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0b1d270 a2=0 a3=1 items=0 ppid=2587 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.266000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:19:44.270000 audit[2718]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:44.270000 audit[2718]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd80610a0 a2=0 a3=1 items=0 ppid=2587 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.270000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:19:44.287214 env[1493]: time="2025-11-01T00:19:44.287161574Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-lsmrf,Uid:d8b92bc3-a976-40e4-abe7-83544c92445f,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"73d191d5e6abed4a3f7ee08558180469612db5564d77c420b82146529016eb15\"" Nov 1 00:19:44.290783 env[1493]: time="2025-11-01T00:19:44.290746935Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:19:44.385478 systemd[1]: run-containerd-runc-k8s.io-ddcaa6096b20c4abcca00bedd5c2406b60804a938d4e7b8494bf5c1617d20b15-runc.8G416r.mount: Deactivated successfully. Nov 1 00:19:44.443000 audit[2730]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2730 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:19:44.443000 audit[2730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff2d1aae0 a2=0 a3=1 items=0 ppid=2587 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.443000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:19:44.464000 audit[2730]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2730 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:19:44.464000 audit[2730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffff2d1aae0 a2=0 a3=1 items=0 ppid=2587 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.464000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:19:44.465000 audit[2735]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.465000 audit[2735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe35d1ca0 a2=0 a3=1 items=0 ppid=2587 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.465000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:19:44.468000 audit[2737]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.468000 audit[2737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffee9054b0 a2=0 a3=1 items=0 ppid=2587 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.468000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:19:44.473000 audit[2740]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.473000 audit[2740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffdb95530 a2=0 a3=1 items=0 ppid=2587 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.473000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:19:44.475000 audit[2741]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2741 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.475000 audit[2741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd214ee0 a2=0 a3=1 items=0 ppid=2587 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.475000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:19:44.480000 audit[2743]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2743 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.480000 audit[2743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffef5d220 a2=0 a3=1 items=0 ppid=2587 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.480000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:19:44.487000 audit[2744]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.487000 audit[2744]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd903fe0 a2=0 a3=1 items=0 ppid=2587 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.487000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:19:44.490000 audit[2746]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.490000 audit[2746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffe485810 a2=0 a3=1 items=0 ppid=2587 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.490000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:19:44.498000 audit[2749]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2749 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.498000 audit[2749]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffff39aff0 a2=0 a3=1 items=0 ppid=2587 pid=2749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.498000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:19:44.500000 audit[2750]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2750 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.500000 audit[2750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd15575b0 a2=0 a3=1 items=0 ppid=2587 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.500000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:19:44.504000 audit[2752]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.504000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc497f620 a2=0 a3=1 items=0 ppid=2587 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.504000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:19:44.505000 audit[2753]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.505000 audit[2753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff9d20e40 a2=0 a3=1 items=0 ppid=2587 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.505000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:19:44.508000 audit[2755]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2755 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.508000 audit[2755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd4891050 a2=0 a3=1 items=0 ppid=2587 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.508000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:19:44.511000 audit[2758]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.511000 audit[2758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd977a090 a2=0 a3=1 items=0 ppid=2587 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.511000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:19:44.515000 audit[2761]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.515000 audit[2761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffec97f3c0 a2=0 a3=1 items=0 ppid=2587 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.515000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:19:44.516000 audit[2762]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.516000 audit[2762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffde7530f0 a2=0 a3=1 items=0 ppid=2587 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.516000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:19:44.518000 audit[2764]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2764 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.518000 audit[2764]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff91d1650 a2=0 a3=1 items=0 ppid=2587 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:19:44.521000 audit[2767]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2767 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.521000 audit[2767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff448a990 a2=0 a3=1 items=0 ppid=2587 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:19:44.523000 audit[2768]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2768 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.523000 audit[2768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed70a440 a2=0 a3=1 items=0 ppid=2587 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.523000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:19:44.525000 audit[2770]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.525000 audit[2770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe371c290 a2=0 a3=1 items=0 ppid=2587 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.525000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:19:44.527000 audit[2771]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2771 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.527000 audit[2771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffaf5e980 a2=0 a3=1 items=0 ppid=2587 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.527000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:19:44.529000 audit[2773]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2773 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.529000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffec25b7c0 a2=0 a3=1 items=0 ppid=2587 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.529000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:19:44.532000 audit[2776]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:44.532000 audit[2776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc545b910 a2=0 a3=1 items=0 ppid=2587 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.532000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:19:44.536000 audit[2778]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:19:44.536000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffffb7aca60 a2=0 a3=1 items=0 ppid=2587 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.536000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:19:44.536000 audit[2778]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:19:44.536000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffffb7aca60 a2=0 a3=1 items=0 ppid=2587 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:44.536000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:19:46.128853 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount119413156.mount: Deactivated successfully. Nov 1 00:19:46.951848 env[1493]: time="2025-11-01T00:19:46.951800522Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:46.957905 env[1493]: time="2025-11-01T00:19:46.957864524Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:46.961901 env[1493]: time="2025-11-01T00:19:46.961864165Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:46.965409 env[1493]: time="2025-11-01T00:19:46.965370726Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:46.965890 env[1493]: time="2025-11-01T00:19:46.965859646Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Nov 1 00:19:46.974890 env[1493]: time="2025-11-01T00:19:46.974845408Z" level=info msg="CreateContainer within sandbox \"73d191d5e6abed4a3f7ee08558180469612db5564d77c420b82146529016eb15\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:19:46.995895 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4018252296.mount: Deactivated successfully. Nov 1 00:19:47.010790 env[1493]: time="2025-11-01T00:19:47.010738937Z" level=info msg="CreateContainer within sandbox \"73d191d5e6abed4a3f7ee08558180469612db5564d77c420b82146529016eb15\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"ce855b05eacdea82217c7a752ad39b2d921ded0ce9d8b91665ed85b4adde4bf2\"" Nov 1 00:19:47.013520 env[1493]: time="2025-11-01T00:19:47.013475578Z" level=info msg="StartContainer for \"ce855b05eacdea82217c7a752ad39b2d921ded0ce9d8b91665ed85b4adde4bf2\"" Nov 1 00:19:47.031587 systemd[1]: Started cri-containerd-ce855b05eacdea82217c7a752ad39b2d921ded0ce9d8b91665ed85b4adde4bf2.scope. Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.047000 audit: BPF prog-id=112 op=LOAD Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2665 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365383535623035656163646561383232313763376137353261643339 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2665 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365383535623035656163646561383232313763376137353261643339 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.048000 audit: BPF prog-id=113 op=LOAD Nov 1 00:19:47.048000 audit[2787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2665 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365383535623035656163646561383232313763376137353261643339 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.049000 audit: BPF prog-id=114 op=LOAD Nov 1 00:19:47.049000 audit[2787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2665 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365383535623035656163646561383232313763376137353261643339 Nov 1 00:19:47.050000 audit: BPF prog-id=114 op=UNLOAD Nov 1 00:19:47.050000 audit: BPF prog-id=113 op=UNLOAD Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { perfmon } for pid=2787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit[2787]: AVC avc: denied { bpf } for pid=2787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.050000 audit: BPF prog-id=115 op=LOAD Nov 1 00:19:47.050000 audit[2787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2665 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365383535623035656163646561383232313763376137353261643339 Nov 1 00:19:47.071695 env[1493]: time="2025-11-01T00:19:47.071603471Z" level=info msg="StartContainer for \"ce855b05eacdea82217c7a752ad39b2d921ded0ce9d8b91665ed85b4adde4bf2\" returns successfully" Nov 1 00:19:47.085040 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount874207825.mount: Deactivated successfully. Nov 1 00:19:47.496638 kubelet[2483]: I1101 00:19:47.496557 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-qsv79" podStartSLOduration=4.496538733 podStartE2EDuration="4.496538733s" podCreationTimestamp="2025-11-01 00:19:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:19:44.493984708 +0000 UTC m=+8.178031813" watchObservedRunningTime="2025-11-01 00:19:47.496538733 +0000 UTC m=+11.180585838" Nov 1 00:19:47.497214 kubelet[2483]: I1101 00:19:47.497180 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-lsmrf" podStartSLOduration=1.818913342 podStartE2EDuration="4.497169373s" podCreationTimestamp="2025-11-01 00:19:43 +0000 UTC" firstStartedPulling="2025-11-01 00:19:44.288702415 +0000 UTC m=+7.972749520" lastFinishedPulling="2025-11-01 00:19:46.966958446 +0000 UTC m=+10.651005551" observedRunningTime="2025-11-01 00:19:47.497130333 +0000 UTC m=+11.181177398" watchObservedRunningTime="2025-11-01 00:19:47.497169373 +0000 UTC m=+11.181216438" Nov 1 00:19:53.084100 sudo[1807]: pam_unix(sudo:session): session closed for user root Nov 1 00:19:53.089672 kernel: kauditd_printk_skb: 357 callbacks suppressed Nov 1 00:19:53.089866 kernel: audit: type=1106 audit(1761956393.082:883): pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:53.082000 audit[1807]: USER_END pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:53.082000 audit[1807]: CRED_DISP pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:53.133572 kernel: audit: type=1104 audit(1761956393.082:884): pid=1807 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:53.163795 sshd[1802]: pam_unix(sshd:session): session closed for user core Nov 1 00:19:53.163000 audit[1802]: USER_END pid=1802 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:53.194284 systemd-logind[1480]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:19:53.194683 systemd[1]: sshd@6-10.200.20.19:22-10.200.16.10:36204.service: Deactivated successfully. Nov 1 00:19:53.195416 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:19:53.195573 systemd[1]: session-9.scope: Consumed 7.563s CPU time. Nov 1 00:19:53.196890 systemd-logind[1480]: Removed session 9. Nov 1 00:19:53.163000 audit[1802]: CRED_DISP pid=1802 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:53.224510 kernel: audit: type=1106 audit(1761956393.163:885): pid=1802 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:53.224710 kernel: audit: type=1104 audit(1761956393.163:886): pid=1802 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:53.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.16.10:36204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:53.251366 kernel: audit: type=1131 audit(1761956393.193:887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.16.10:36204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:55.150000 audit[2858]: NETFILTER_CFG table=filter:92 family=2 entries=15 op=nft_register_rule pid=2858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:19:55.150000 audit[2858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd5a0ba60 a2=0 a3=1 items=0 ppid=2587 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:55.197806 kernel: audit: type=1325 audit(1761956395.150:888): table=filter:92 family=2 entries=15 op=nft_register_rule pid=2858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:19:55.197950 kernel: audit: type=1300 audit(1761956395.150:888): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd5a0ba60 a2=0 a3=1 items=0 ppid=2587 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:55.150000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:19:55.214471 kernel: audit: type=1327 audit(1761956395.150:888): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:19:55.169000 audit[2858]: NETFILTER_CFG table=nat:93 family=2 entries=12 op=nft_register_rule pid=2858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:19:55.233371 kernel: audit: type=1325 audit(1761956395.169:889): table=nat:93 family=2 entries=12 op=nft_register_rule pid=2858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:19:55.169000 audit[2858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5a0ba60 a2=0 a3=1 items=0 ppid=2587 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:55.263324 kernel: audit: type=1300 audit(1761956395.169:889): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5a0ba60 a2=0 a3=1 items=0 ppid=2587 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:55.169000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:19:55.346000 audit[2860]: NETFILTER_CFG table=filter:94 family=2 entries=16 op=nft_register_rule pid=2860 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:19:55.346000 audit[2860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffeec11a50 a2=0 a3=1 items=0 ppid=2587 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:55.346000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:19:55.351000 audit[2860]: NETFILTER_CFG table=nat:95 family=2 entries=12 op=nft_register_rule pid=2860 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:19:55.351000 audit[2860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeec11a50 a2=0 a3=1 items=0 ppid=2587 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:55.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:00.212000 audit[2863]: NETFILTER_CFG table=filter:96 family=2 entries=17 op=nft_register_rule pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:00.219208 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:20:00.219339 kernel: audit: type=1325 audit(1761956400.212:892): table=filter:96 family=2 entries=17 op=nft_register_rule pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:00.212000 audit[2863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc60189f0 a2=0 a3=1 items=0 ppid=2587 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.267070 kernel: audit: type=1300 audit(1761956400.212:892): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc60189f0 a2=0 a3=1 items=0 ppid=2587 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.212000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:00.280860 kernel: audit: type=1327 audit(1761956400.212:892): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:00.238000 audit[2863]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:00.297388 kernel: audit: type=1325 audit(1761956400.238:893): table=nat:97 family=2 entries=12 op=nft_register_rule pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:00.238000 audit[2863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc60189f0 a2=0 a3=1 items=0 ppid=2587 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.325226 kernel: audit: type=1300 audit(1761956400.238:893): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc60189f0 a2=0 a3=1 items=0 ppid=2587 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:00.340768 kernel: audit: type=1327 audit(1761956400.238:893): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:00.354000 audit[2866]: NETFILTER_CFG table=filter:98 family=2 entries=18 op=nft_register_rule pid=2866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:00.354000 audit[2866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc10beb80 a2=0 a3=1 items=0 ppid=2587 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.398692 kernel: audit: type=1325 audit(1761956400.354:894): table=filter:98 family=2 entries=18 op=nft_register_rule pid=2866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:00.398821 kernel: audit: type=1300 audit(1761956400.354:894): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc10beb80 a2=0 a3=1 items=0 ppid=2587 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:00.413988 kernel: audit: type=1327 audit(1761956400.354:894): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:00.369000 audit[2866]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:00.431808 kernel: audit: type=1325 audit(1761956400.369:895): table=nat:99 family=2 entries=12 op=nft_register_rule pid=2866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:00.369000 audit[2866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc10beb80 a2=0 a3=1 items=0 ppid=2587 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.369000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:01.449000 audit[2870]: NETFILTER_CFG table=filter:100 family=2 entries=19 op=nft_register_rule pid=2870 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:01.449000 audit[2870]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff8a5b430 a2=0 a3=1 items=0 ppid=2587 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.449000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:01.453000 audit[2870]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2870 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:01.453000 audit[2870]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff8a5b430 a2=0 a3=1 items=0 ppid=2587 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.453000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:04.162000 audit[2872]: NETFILTER_CFG table=filter:102 family=2 entries=21 op=nft_register_rule pid=2872 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:04.162000 audit[2872]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffdd71aa10 a2=0 a3=1 items=0 ppid=2587 pid=2872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.162000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:04.166000 audit[2872]: NETFILTER_CFG table=nat:103 family=2 entries=12 op=nft_register_rule pid=2872 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:04.166000 audit[2872]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdd71aa10 a2=0 a3=1 items=0 ppid=2587 pid=2872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.166000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:04.183000 audit[2874]: NETFILTER_CFG table=filter:104 family=2 entries=22 op=nft_register_rule pid=2874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:04.183000 audit[2874]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe6b43cd0 a2=0 a3=1 items=0 ppid=2587 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.183000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:04.189000 audit[2874]: NETFILTER_CFG table=nat:105 family=2 entries=12 op=nft_register_rule pid=2874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:04.189000 audit[2874]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe6b43cd0 a2=0 a3=1 items=0 ppid=2587 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.189000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:04.225154 systemd[1]: Created slice kubepods-besteffort-podb5ebfaf2_e880_4bf1_a4b8_a1f1792a6d66.slice. Nov 1 00:20:04.320614 kubelet[2483]: I1101 00:20:04.320568 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/b5ebfaf2-e880-4bf1-a4b8-a1f1792a6d66-typha-certs\") pod \"calico-typha-6f7c74f8cd-kt9vq\" (UID: \"b5ebfaf2-e880-4bf1-a4b8-a1f1792a6d66\") " pod="calico-system/calico-typha-6f7c74f8cd-kt9vq" Nov 1 00:20:04.320966 kubelet[2483]: I1101 00:20:04.320619 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b5ebfaf2-e880-4bf1-a4b8-a1f1792a6d66-tigera-ca-bundle\") pod \"calico-typha-6f7c74f8cd-kt9vq\" (UID: \"b5ebfaf2-e880-4bf1-a4b8-a1f1792a6d66\") " pod="calico-system/calico-typha-6f7c74f8cd-kt9vq" Nov 1 00:20:04.320966 kubelet[2483]: I1101 00:20:04.320667 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-44c57\" (UniqueName: \"kubernetes.io/projected/b5ebfaf2-e880-4bf1-a4b8-a1f1792a6d66-kube-api-access-44c57\") pod \"calico-typha-6f7c74f8cd-kt9vq\" (UID: \"b5ebfaf2-e880-4bf1-a4b8-a1f1792a6d66\") " pod="calico-system/calico-typha-6f7c74f8cd-kt9vq" Nov 1 00:20:04.345609 systemd[1]: Created slice kubepods-besteffort-pod3f3c3d73_4834_47da_aefe_8853ed640fd6.slice. Nov 1 00:20:04.421965 kubelet[2483]: I1101 00:20:04.421846 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-cni-net-dir\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422263 kubelet[2483]: I1101 00:20:04.422224 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-lib-modules\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422263 kubelet[2483]: I1101 00:20:04.422270 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-cni-log-dir\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422362 kubelet[2483]: I1101 00:20:04.422287 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-policysync\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422362 kubelet[2483]: I1101 00:20:04.422310 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-flexvol-driver-host\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422362 kubelet[2483]: I1101 00:20:04.422327 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-var-lib-calico\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422362 kubelet[2483]: I1101 00:20:04.422343 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/3f3c3d73-4834-47da-aefe-8853ed640fd6-node-certs\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422362 kubelet[2483]: I1101 00:20:04.422357 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-xtables-lock\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422482 kubelet[2483]: I1101 00:20:04.422384 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-cni-bin-dir\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422482 kubelet[2483]: I1101 00:20:04.422411 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3f3c3d73-4834-47da-aefe-8853ed640fd6-tigera-ca-bundle\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422482 kubelet[2483]: I1101 00:20:04.422427 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/3f3c3d73-4834-47da-aefe-8853ed640fd6-var-run-calico\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.422482 kubelet[2483]: I1101 00:20:04.422446 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qbcbs\" (UniqueName: \"kubernetes.io/projected/3f3c3d73-4834-47da-aefe-8853ed640fd6-kube-api-access-qbcbs\") pod \"calico-node-qqbcz\" (UID: \"3f3c3d73-4834-47da-aefe-8853ed640fd6\") " pod="calico-system/calico-node-qqbcz" Nov 1 00:20:04.519834 kubelet[2483]: E1101 00:20:04.519780 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:04.532848 env[1493]: time="2025-11-01T00:20:04.532789724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6f7c74f8cd-kt9vq,Uid:b5ebfaf2-e880-4bf1-a4b8-a1f1792a6d66,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:04.536869 kubelet[2483]: E1101 00:20:04.536836 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.537033 kubelet[2483]: W1101 00:20:04.537018 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.537111 kubelet[2483]: E1101 00:20:04.537099 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.552666 kubelet[2483]: E1101 00:20:04.552640 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.552845 kubelet[2483]: W1101 00:20:04.552828 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.552948 kubelet[2483]: E1101 00:20:04.552935 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.571478 env[1493]: time="2025-11-01T00:20:04.571392250Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:04.571478 env[1493]: time="2025-11-01T00:20:04.571437730Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:04.571478 env[1493]: time="2025-11-01T00:20:04.571448090Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:04.571911 env[1493]: time="2025-11-01T00:20:04.571859890Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/70cfceea127c84809f2f4615b777957c99188d980df8a2842024ef839f235f63 pid=2889 runtime=io.containerd.runc.v2 Nov 1 00:20:04.586171 systemd[1]: Started cri-containerd-70cfceea127c84809f2f4615b777957c99188d980df8a2842024ef839f235f63.scope. Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.607000 audit: BPF prog-id=116 op=LOAD Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2889 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730636663656561313237633834383039663266343631356237373739 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2889 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730636663656561313237633834383039663266343631356237373739 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit: BPF prog-id=117 op=LOAD Nov 1 00:20:04.608000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2889 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730636663656561313237633834383039663266343631356237373739 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit: BPF prog-id=118 op=LOAD Nov 1 00:20:04.608000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2889 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730636663656561313237633834383039663266343631356237373739 Nov 1 00:20:04.608000 audit: BPF prog-id=118 op=UNLOAD Nov 1 00:20:04.608000 audit: BPF prog-id=117 op=UNLOAD Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.608000 audit: BPF prog-id=119 op=LOAD Nov 1 00:20:04.608000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2889 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730636663656561313237633834383039663266343631356237373739 Nov 1 00:20:04.612236 kubelet[2483]: E1101 00:20:04.612075 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.612236 kubelet[2483]: W1101 00:20:04.612095 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.612236 kubelet[2483]: E1101 00:20:04.612117 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.612563 kubelet[2483]: E1101 00:20:04.612423 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.612563 kubelet[2483]: W1101 00:20:04.612434 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.612563 kubelet[2483]: E1101 00:20:04.612477 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.613119 kubelet[2483]: E1101 00:20:04.612724 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.613119 kubelet[2483]: W1101 00:20:04.612734 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.613119 kubelet[2483]: E1101 00:20:04.612745 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.613119 kubelet[2483]: E1101 00:20:04.612902 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.613119 kubelet[2483]: W1101 00:20:04.612909 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.613119 kubelet[2483]: E1101 00:20:04.612918 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.613394 kubelet[2483]: E1101 00:20:04.613295 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.613394 kubelet[2483]: W1101 00:20:04.613305 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.613394 kubelet[2483]: E1101 00:20:04.613316 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.613674 kubelet[2483]: E1101 00:20:04.613539 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.613674 kubelet[2483]: W1101 00:20:04.613549 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.613674 kubelet[2483]: E1101 00:20:04.613558 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.613950 kubelet[2483]: E1101 00:20:04.613842 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.613950 kubelet[2483]: W1101 00:20:04.613853 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.613950 kubelet[2483]: E1101 00:20:04.613866 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.614209 kubelet[2483]: E1101 00:20:04.614097 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.614209 kubelet[2483]: W1101 00:20:04.614107 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.614209 kubelet[2483]: E1101 00:20:04.614117 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.614453 kubelet[2483]: E1101 00:20:04.614356 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.614453 kubelet[2483]: W1101 00:20:04.614366 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.614453 kubelet[2483]: E1101 00:20:04.614376 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.614711 kubelet[2483]: E1101 00:20:04.614598 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.614711 kubelet[2483]: W1101 00:20:04.614608 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.614711 kubelet[2483]: E1101 00:20:04.614618 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.614969 kubelet[2483]: E1101 00:20:04.614866 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.614969 kubelet[2483]: W1101 00:20:04.614877 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.614969 kubelet[2483]: E1101 00:20:04.614888 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.615222 kubelet[2483]: E1101 00:20:04.615115 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.615222 kubelet[2483]: W1101 00:20:04.615126 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.615222 kubelet[2483]: E1101 00:20:04.615135 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.615468 kubelet[2483]: E1101 00:20:04.615370 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.615468 kubelet[2483]: W1101 00:20:04.615380 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.615468 kubelet[2483]: E1101 00:20:04.615392 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.615980 kubelet[2483]: E1101 00:20:04.615606 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.615980 kubelet[2483]: W1101 00:20:04.615615 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.615980 kubelet[2483]: E1101 00:20:04.615666 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.615980 kubelet[2483]: E1101 00:20:04.615879 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.615980 kubelet[2483]: W1101 00:20:04.615886 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.615980 kubelet[2483]: E1101 00:20:04.615895 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.616334 kubelet[2483]: E1101 00:20:04.616204 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.616334 kubelet[2483]: W1101 00:20:04.616214 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.616334 kubelet[2483]: E1101 00:20:04.616226 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.616739 kubelet[2483]: E1101 00:20:04.616484 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.616739 kubelet[2483]: W1101 00:20:04.616496 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.616739 kubelet[2483]: E1101 00:20:04.616506 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.617023 kubelet[2483]: E1101 00:20:04.616901 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.617023 kubelet[2483]: W1101 00:20:04.616915 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.617023 kubelet[2483]: E1101 00:20:04.616926 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.620786 kubelet[2483]: E1101 00:20:04.617182 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.620786 kubelet[2483]: W1101 00:20:04.617192 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.620786 kubelet[2483]: E1101 00:20:04.617202 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.621151 kubelet[2483]: E1101 00:20:04.621021 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.621151 kubelet[2483]: W1101 00:20:04.621038 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.621151 kubelet[2483]: E1101 00:20:04.621057 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.625342 kubelet[2483]: E1101 00:20:04.625110 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.625342 kubelet[2483]: W1101 00:20:04.625130 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.625342 kubelet[2483]: E1101 00:20:04.625174 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.625342 kubelet[2483]: I1101 00:20:04.625203 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/d1bae2b3-184b-4fab-8bf3-245332cdbb4f-socket-dir\") pod \"csi-node-driver-9mw49\" (UID: \"d1bae2b3-184b-4fab-8bf3-245332cdbb4f\") " pod="calico-system/csi-node-driver-9mw49" Nov 1 00:20:04.625709 kubelet[2483]: E1101 00:20:04.625592 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.625709 kubelet[2483]: W1101 00:20:04.625606 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.625709 kubelet[2483]: E1101 00:20:04.625617 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.625709 kubelet[2483]: I1101 00:20:04.625676 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g5gsb\" (UniqueName: \"kubernetes.io/projected/d1bae2b3-184b-4fab-8bf3-245332cdbb4f-kube-api-access-g5gsb\") pod \"csi-node-driver-9mw49\" (UID: \"d1bae2b3-184b-4fab-8bf3-245332cdbb4f\") " pod="calico-system/csi-node-driver-9mw49" Nov 1 00:20:04.625927 kubelet[2483]: E1101 00:20:04.625871 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.625927 kubelet[2483]: W1101 00:20:04.625888 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.625927 kubelet[2483]: E1101 00:20:04.625900 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.626308 kubelet[2483]: E1101 00:20:04.626283 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.626308 kubelet[2483]: W1101 00:20:04.626303 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.626397 kubelet[2483]: E1101 00:20:04.626319 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.626526 kubelet[2483]: E1101 00:20:04.626510 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.626526 kubelet[2483]: W1101 00:20:04.626524 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.626612 kubelet[2483]: E1101 00:20:04.626536 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.626612 kubelet[2483]: I1101 00:20:04.626562 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/d1bae2b3-184b-4fab-8bf3-245332cdbb4f-registration-dir\") pod \"csi-node-driver-9mw49\" (UID: \"d1bae2b3-184b-4fab-8bf3-245332cdbb4f\") " pod="calico-system/csi-node-driver-9mw49" Nov 1 00:20:04.627029 kubelet[2483]: E1101 00:20:04.626755 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.627029 kubelet[2483]: W1101 00:20:04.626771 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.627029 kubelet[2483]: E1101 00:20:04.626782 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.627029 kubelet[2483]: I1101 00:20:04.626797 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/d1bae2b3-184b-4fab-8bf3-245332cdbb4f-varrun\") pod \"csi-node-driver-9mw49\" (UID: \"d1bae2b3-184b-4fab-8bf3-245332cdbb4f\") " pod="calico-system/csi-node-driver-9mw49" Nov 1 00:20:04.627029 kubelet[2483]: E1101 00:20:04.627006 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.627029 kubelet[2483]: W1101 00:20:04.627017 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.627029 kubelet[2483]: E1101 00:20:04.627026 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.627407 kubelet[2483]: I1101 00:20:04.627285 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/d1bae2b3-184b-4fab-8bf3-245332cdbb4f-kubelet-dir\") pod \"csi-node-driver-9mw49\" (UID: \"d1bae2b3-184b-4fab-8bf3-245332cdbb4f\") " pod="calico-system/csi-node-driver-9mw49" Nov 1 00:20:04.629385 kubelet[2483]: E1101 00:20:04.628210 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.629385 kubelet[2483]: W1101 00:20:04.628231 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.629385 kubelet[2483]: E1101 00:20:04.628249 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.629385 kubelet[2483]: E1101 00:20:04.628453 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.629385 kubelet[2483]: W1101 00:20:04.628461 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.629385 kubelet[2483]: E1101 00:20:04.628470 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.629385 kubelet[2483]: E1101 00:20:04.628604 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.629385 kubelet[2483]: W1101 00:20:04.628610 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.629385 kubelet[2483]: E1101 00:20:04.628618 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.629385 kubelet[2483]: E1101 00:20:04.628776 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.629785 kubelet[2483]: W1101 00:20:04.628783 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.629785 kubelet[2483]: E1101 00:20:04.628791 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.629785 kubelet[2483]: E1101 00:20:04.628901 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.629785 kubelet[2483]: W1101 00:20:04.628908 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.629785 kubelet[2483]: E1101 00:20:04.628916 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.629785 kubelet[2483]: E1101 00:20:04.629046 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.629785 kubelet[2483]: W1101 00:20:04.629053 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.629785 kubelet[2483]: E1101 00:20:04.629061 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.629785 kubelet[2483]: E1101 00:20:04.629179 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.629785 kubelet[2483]: W1101 00:20:04.629186 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.629995 kubelet[2483]: E1101 00:20:04.629193 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.629995 kubelet[2483]: E1101 00:20:04.629308 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.629995 kubelet[2483]: W1101 00:20:04.629316 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.629995 kubelet[2483]: E1101 00:20:04.629323 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.649104 env[1493]: time="2025-11-01T00:20:04.649047823Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qqbcz,Uid:3f3c3d73-4834-47da-aefe-8853ed640fd6,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:04.663869 env[1493]: time="2025-11-01T00:20:04.663808505Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6f7c74f8cd-kt9vq,Uid:b5ebfaf2-e880-4bf1-a4b8-a1f1792a6d66,Namespace:calico-system,Attempt:0,} returns sandbox id \"70cfceea127c84809f2f4615b777957c99188d980df8a2842024ef839f235f63\"" Nov 1 00:20:04.666039 env[1493]: time="2025-11-01T00:20:04.665998266Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:20:04.728061 kubelet[2483]: E1101 00:20:04.727925 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.728061 kubelet[2483]: W1101 00:20:04.727943 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.728061 kubelet[2483]: E1101 00:20:04.727962 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.728743 kubelet[2483]: E1101 00:20:04.728714 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.728743 kubelet[2483]: W1101 00:20:04.728739 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.728863 kubelet[2483]: E1101 00:20:04.728753 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.729079 kubelet[2483]: E1101 00:20:04.729057 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.729079 kubelet[2483]: W1101 00:20:04.729077 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.729163 kubelet[2483]: E1101 00:20:04.729090 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.729363 kubelet[2483]: E1101 00:20:04.729341 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.729363 kubelet[2483]: W1101 00:20:04.729357 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.729442 kubelet[2483]: E1101 00:20:04.729369 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.729614 kubelet[2483]: E1101 00:20:04.729596 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.729614 kubelet[2483]: W1101 00:20:04.729612 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.729718 kubelet[2483]: E1101 00:20:04.729643 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.729976 kubelet[2483]: E1101 00:20:04.729956 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.729976 kubelet[2483]: W1101 00:20:04.729974 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.730054 kubelet[2483]: E1101 00:20:04.729986 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.730229 kubelet[2483]: E1101 00:20:04.730211 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.730229 kubelet[2483]: W1101 00:20:04.730226 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.730312 kubelet[2483]: E1101 00:20:04.730244 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.730452 kubelet[2483]: E1101 00:20:04.730424 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.730452 kubelet[2483]: W1101 00:20:04.730437 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.730452 kubelet[2483]: E1101 00:20:04.730447 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.730698 kubelet[2483]: E1101 00:20:04.730675 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.730698 kubelet[2483]: W1101 00:20:04.730692 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.730799 kubelet[2483]: E1101 00:20:04.730703 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.730903 kubelet[2483]: E1101 00:20:04.730887 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.730903 kubelet[2483]: W1101 00:20:04.730899 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.730971 kubelet[2483]: E1101 00:20:04.730909 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.731105 kubelet[2483]: E1101 00:20:04.731091 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.731105 kubelet[2483]: W1101 00:20:04.731103 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.731172 kubelet[2483]: E1101 00:20:04.731112 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.731309 kubelet[2483]: E1101 00:20:04.731293 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.731309 kubelet[2483]: W1101 00:20:04.731305 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.731366 kubelet[2483]: E1101 00:20:04.731315 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.731470 kubelet[2483]: E1101 00:20:04.731456 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.731470 kubelet[2483]: W1101 00:20:04.731467 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.731531 kubelet[2483]: E1101 00:20:04.731476 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.731724 kubelet[2483]: E1101 00:20:04.731609 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.731724 kubelet[2483]: W1101 00:20:04.731716 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.731809 kubelet[2483]: E1101 00:20:04.731729 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.731959 kubelet[2483]: E1101 00:20:04.731941 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.731959 kubelet[2483]: W1101 00:20:04.731955 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.732043 kubelet[2483]: E1101 00:20:04.731964 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.732171 kubelet[2483]: E1101 00:20:04.732155 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.732171 kubelet[2483]: W1101 00:20:04.732167 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.732246 kubelet[2483]: E1101 00:20:04.732176 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.732370 kubelet[2483]: E1101 00:20:04.732355 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.732370 kubelet[2483]: W1101 00:20:04.732367 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.732448 kubelet[2483]: E1101 00:20:04.732375 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.732539 kubelet[2483]: E1101 00:20:04.732522 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.732539 kubelet[2483]: W1101 00:20:04.732533 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.732619 kubelet[2483]: E1101 00:20:04.732541 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.732753 kubelet[2483]: E1101 00:20:04.732733 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.732753 kubelet[2483]: W1101 00:20:04.732750 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.732833 kubelet[2483]: E1101 00:20:04.732760 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.732978 kubelet[2483]: E1101 00:20:04.732963 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.732978 kubelet[2483]: W1101 00:20:04.732975 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.733050 kubelet[2483]: E1101 00:20:04.732984 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.733171 kubelet[2483]: E1101 00:20:04.733152 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.733171 kubelet[2483]: W1101 00:20:04.733163 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.733228 kubelet[2483]: E1101 00:20:04.733172 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.733893 kubelet[2483]: E1101 00:20:04.733865 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.733893 kubelet[2483]: W1101 00:20:04.733883 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.733991 kubelet[2483]: E1101 00:20:04.733905 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.734136 kubelet[2483]: E1101 00:20:04.734120 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.734136 kubelet[2483]: W1101 00:20:04.734133 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.734203 kubelet[2483]: E1101 00:20:04.734143 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.734358 kubelet[2483]: E1101 00:20:04.734338 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.734358 kubelet[2483]: W1101 00:20:04.734351 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.734428 kubelet[2483]: E1101 00:20:04.734360 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.734647 kubelet[2483]: E1101 00:20:04.734526 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.734647 kubelet[2483]: W1101 00:20:04.734537 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.734647 kubelet[2483]: E1101 00:20:04.734546 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.741692 env[1493]: time="2025-11-01T00:20:04.740835998Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:04.741692 env[1493]: time="2025-11-01T00:20:04.740896838Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:04.741692 env[1493]: time="2025-11-01T00:20:04.740907198Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:04.741692 env[1493]: time="2025-11-01T00:20:04.741104718Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099 pid=2964 runtime=io.containerd.runc.v2 Nov 1 00:20:04.749488 kubelet[2483]: E1101 00:20:04.749459 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:04.749488 kubelet[2483]: W1101 00:20:04.749487 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:04.749678 kubelet[2483]: E1101 00:20:04.749507 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:04.752911 systemd[1]: Started cri-containerd-f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099.scope. Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.765000 audit: BPF prog-id=120 op=LOAD Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2964 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634366461386363666263636566656362633934333439366263636632 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2964 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634366461386363666263636566656362633934333439366263636632 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit: BPF prog-id=121 op=LOAD Nov 1 00:20:04.766000 audit[2998]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2964 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634366461386363666263636566656362633934333439366263636632 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit: BPF prog-id=122 op=LOAD Nov 1 00:20:04.766000 audit[2998]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2964 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634366461386363666263636566656362633934333439366263636632 Nov 1 00:20:04.766000 audit: BPF prog-id=122 op=UNLOAD Nov 1 00:20:04.766000 audit: BPF prog-id=121 op=UNLOAD Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:04.766000 audit: BPF prog-id=123 op=LOAD Nov 1 00:20:04.766000 audit[2998]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2964 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:04.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634366461386363666263636566656362633934333439366263636632 Nov 1 00:20:04.781191 env[1493]: time="2025-11-01T00:20:04.781136645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qqbcz,Uid:3f3c3d73-4834-47da-aefe-8853ed640fd6,Namespace:calico-system,Attempt:0,} returns sandbox id \"f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099\"" Nov 1 00:20:05.198000 audit[3025]: NETFILTER_CFG table=filter:106 family=2 entries=22 op=nft_register_rule pid=3025 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:05.198000 audit[3025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffde356b80 a2=0 a3=1 items=0 ppid=2587 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:05.198000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:05.202000 audit[3025]: NETFILTER_CFG table=nat:107 family=2 entries=12 op=nft_register_rule pid=3025 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:05.202000 audit[3025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffde356b80 a2=0 a3=1 items=0 ppid=2587 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:05.202000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:05.978616 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3609757970.mount: Deactivated successfully. Nov 1 00:20:06.445557 kubelet[2483]: E1101 00:20:06.445188 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:06.986886 env[1493]: time="2025-11-01T00:20:06.986841199Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:06.993080 env[1493]: time="2025-11-01T00:20:06.993033600Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:06.998438 env[1493]: time="2025-11-01T00:20:06.998405721Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:07.002700 env[1493]: time="2025-11-01T00:20:07.002660882Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:07.002961 env[1493]: time="2025-11-01T00:20:07.002930842Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Nov 1 00:20:07.005461 env[1493]: time="2025-11-01T00:20:07.005406602Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:20:07.026331 env[1493]: time="2025-11-01T00:20:07.026286926Z" level=info msg="CreateContainer within sandbox \"70cfceea127c84809f2f4615b777957c99188d980df8a2842024ef839f235f63\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:20:07.050144 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3621794303.mount: Deactivated successfully. Nov 1 00:20:07.066171 env[1493]: time="2025-11-01T00:20:07.066098772Z" level=info msg="CreateContainer within sandbox \"70cfceea127c84809f2f4615b777957c99188d980df8a2842024ef839f235f63\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"72666ddb16563ecf1c15d2283311d0efc55eb5263fd99fe0eece6ceb05e55df1\"" Nov 1 00:20:07.068470 env[1493]: time="2025-11-01T00:20:07.066859012Z" level=info msg="StartContainer for \"72666ddb16563ecf1c15d2283311d0efc55eb5263fd99fe0eece6ceb05e55df1\"" Nov 1 00:20:07.098853 systemd[1]: Started cri-containerd-72666ddb16563ecf1c15d2283311d0efc55eb5263fd99fe0eece6ceb05e55df1.scope. Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.124328 kernel: kauditd_printk_skb: 140 callbacks suppressed Nov 1 00:20:07.124415 kernel: audit: type=1400 audit(1761956407.116:940): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.159208 kernel: audit: type=1400 audit(1761956407.116:941): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.176588 kernel: audit: type=1400 audit(1761956407.116:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.194545 kernel: audit: type=1400 audit(1761956407.116:943): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.194690 kernel: audit: type=1400 audit(1761956407.116:944): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.229497 kernel: audit: type=1400 audit(1761956407.116:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.247560 kernel: audit: type=1400 audit(1761956407.116:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.265719 kernel: audit: type=1400 audit(1761956407.116:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.266010 kernel: audit: type=1400 audit(1761956407.116:948): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.301172 kernel: audit: type=1400 audit(1761956407.117:949): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.117000 audit: BPF prog-id=124 op=LOAD Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=2889 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:07.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363636646462313635363365636631633135643232383333313164 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=2889 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:07.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363636646462313635363365636631633135643232383333313164 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.128000 audit: BPF prog-id=125 op=LOAD Nov 1 00:20:07.128000 audit[3038]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=2889 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:07.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363636646462313635363365636631633135643232383333313164 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit: BPF prog-id=126 op=LOAD Nov 1 00:20:07.140000 audit[3038]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=2889 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:07.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363636646462313635363365636631633135643232383333313164 Nov 1 00:20:07.140000 audit: BPF prog-id=126 op=UNLOAD Nov 1 00:20:07.140000 audit: BPF prog-id=125 op=UNLOAD Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { perfmon } for pid=3038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit[3038]: AVC avc: denied { bpf } for pid=3038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:07.140000 audit: BPF prog-id=127 op=LOAD Nov 1 00:20:07.140000 audit[3038]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=2889 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:07.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363636646462313635363365636631633135643232383333313164 Nov 1 00:20:07.307369 env[1493]: time="2025-11-01T00:20:07.307323729Z" level=info msg="StartContainer for \"72666ddb16563ecf1c15d2283311d0efc55eb5263fd99fe0eece6ceb05e55df1\" returns successfully" Nov 1 00:20:07.563783 kubelet[2483]: E1101 00:20:07.563678 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.564245 kubelet[2483]: W1101 00:20:07.564221 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.564346 kubelet[2483]: E1101 00:20:07.564329 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.566046 kubelet[2483]: E1101 00:20:07.566015 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.566219 kubelet[2483]: W1101 00:20:07.566163 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.566314 kubelet[2483]: E1101 00:20:07.566301 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.566648 kubelet[2483]: E1101 00:20:07.566617 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.566747 kubelet[2483]: W1101 00:20:07.566733 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.566824 kubelet[2483]: E1101 00:20:07.566812 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.567108 kubelet[2483]: E1101 00:20:07.567096 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.567218 kubelet[2483]: W1101 00:20:07.567205 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.567293 kubelet[2483]: E1101 00:20:07.567282 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.567582 kubelet[2483]: E1101 00:20:07.567568 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.567726 kubelet[2483]: W1101 00:20:07.567712 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.567819 kubelet[2483]: E1101 00:20:07.567797 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.568069 kubelet[2483]: E1101 00:20:07.568057 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.568166 kubelet[2483]: W1101 00:20:07.568154 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.568241 kubelet[2483]: E1101 00:20:07.568229 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.568512 kubelet[2483]: E1101 00:20:07.568499 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.568598 kubelet[2483]: W1101 00:20:07.568586 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.568693 kubelet[2483]: E1101 00:20:07.568681 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.571777 kubelet[2483]: E1101 00:20:07.571754 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.571912 kubelet[2483]: W1101 00:20:07.571897 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.571991 kubelet[2483]: E1101 00:20:07.571979 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.572307 kubelet[2483]: E1101 00:20:07.572294 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.572410 kubelet[2483]: W1101 00:20:07.572398 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.572475 kubelet[2483]: E1101 00:20:07.572464 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.572757 kubelet[2483]: E1101 00:20:07.572744 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.572850 kubelet[2483]: W1101 00:20:07.572838 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.572914 kubelet[2483]: E1101 00:20:07.572902 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.573142 kubelet[2483]: E1101 00:20:07.573130 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.573224 kubelet[2483]: W1101 00:20:07.573212 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.573286 kubelet[2483]: E1101 00:20:07.573275 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.573494 kubelet[2483]: E1101 00:20:07.573484 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.573582 kubelet[2483]: W1101 00:20:07.573570 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.573673 kubelet[2483]: E1101 00:20:07.573661 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.574008 kubelet[2483]: E1101 00:20:07.573995 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.574101 kubelet[2483]: W1101 00:20:07.574089 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.574168 kubelet[2483]: E1101 00:20:07.574157 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.574371 kubelet[2483]: E1101 00:20:07.574360 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.574453 kubelet[2483]: W1101 00:20:07.574441 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.574520 kubelet[2483]: E1101 00:20:07.574509 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.574754 kubelet[2483]: E1101 00:20:07.574742 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.574842 kubelet[2483]: W1101 00:20:07.574830 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.574906 kubelet[2483]: E1101 00:20:07.574895 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.576811 kubelet[2483]: E1101 00:20:07.576792 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.576926 kubelet[2483]: W1101 00:20:07.576913 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.576990 kubelet[2483]: E1101 00:20:07.576979 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.577282 kubelet[2483]: E1101 00:20:07.577270 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.577373 kubelet[2483]: W1101 00:20:07.577361 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.577441 kubelet[2483]: E1101 00:20:07.577427 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.577811 kubelet[2483]: E1101 00:20:07.577797 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.577903 kubelet[2483]: W1101 00:20:07.577891 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.577966 kubelet[2483]: E1101 00:20:07.577955 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.578233 kubelet[2483]: E1101 00:20:07.578221 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.578323 kubelet[2483]: W1101 00:20:07.578311 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.578389 kubelet[2483]: E1101 00:20:07.578378 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.578687 kubelet[2483]: E1101 00:20:07.578674 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.578780 kubelet[2483]: W1101 00:20:07.578767 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.578843 kubelet[2483]: E1101 00:20:07.578832 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.581252 kubelet[2483]: E1101 00:20:07.581233 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.581366 kubelet[2483]: W1101 00:20:07.581352 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.581443 kubelet[2483]: E1101 00:20:07.581431 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.581758 kubelet[2483]: E1101 00:20:07.581744 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.581854 kubelet[2483]: W1101 00:20:07.581842 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.581916 kubelet[2483]: E1101 00:20:07.581905 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.582148 kubelet[2483]: E1101 00:20:07.582137 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.582221 kubelet[2483]: W1101 00:20:07.582210 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.582292 kubelet[2483]: E1101 00:20:07.582281 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.582517 kubelet[2483]: E1101 00:20:07.582505 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.582596 kubelet[2483]: W1101 00:20:07.582585 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.582692 kubelet[2483]: E1101 00:20:07.582680 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.582941 kubelet[2483]: E1101 00:20:07.582921 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.583032 kubelet[2483]: W1101 00:20:07.583020 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.583147 kubelet[2483]: E1101 00:20:07.583134 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.583411 kubelet[2483]: E1101 00:20:07.583399 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.583571 kubelet[2483]: W1101 00:20:07.583557 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.583714 kubelet[2483]: E1101 00:20:07.583702 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.587815 kubelet[2483]: E1101 00:20:07.587794 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.587947 kubelet[2483]: W1101 00:20:07.587933 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.588021 kubelet[2483]: E1101 00:20:07.588007 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.588311 kubelet[2483]: E1101 00:20:07.588299 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.588402 kubelet[2483]: W1101 00:20:07.588389 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.588466 kubelet[2483]: E1101 00:20:07.588455 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.589018 kubelet[2483]: E1101 00:20:07.589003 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.589106 kubelet[2483]: W1101 00:20:07.589094 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.589184 kubelet[2483]: E1101 00:20:07.589172 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.589454 kubelet[2483]: E1101 00:20:07.589441 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.589532 kubelet[2483]: W1101 00:20:07.589520 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.589596 kubelet[2483]: E1101 00:20:07.589585 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.589900 kubelet[2483]: E1101 00:20:07.589887 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.589992 kubelet[2483]: W1101 00:20:07.589980 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.590061 kubelet[2483]: E1101 00:20:07.590049 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.590310 kubelet[2483]: E1101 00:20:07.590297 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.590394 kubelet[2483]: W1101 00:20:07.590383 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.590452 kubelet[2483]: E1101 00:20:07.590441 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:07.590844 kubelet[2483]: E1101 00:20:07.590830 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:07.590947 kubelet[2483]: W1101 00:20:07.590934 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:07.591014 kubelet[2483]: E1101 00:20:07.591003 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.447810 kubelet[2483]: E1101 00:20:08.447769 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:08.522464 kubelet[2483]: I1101 00:20:08.522418 2483 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:20:08.582483 kubelet[2483]: E1101 00:20:08.582453 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.582853 kubelet[2483]: W1101 00:20:08.582833 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.582930 kubelet[2483]: E1101 00:20:08.582917 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.583156 kubelet[2483]: E1101 00:20:08.583144 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.583238 kubelet[2483]: W1101 00:20:08.583227 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.583303 kubelet[2483]: E1101 00:20:08.583292 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.583545 kubelet[2483]: E1101 00:20:08.583532 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.583645 kubelet[2483]: W1101 00:20:08.583614 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.583719 kubelet[2483]: E1101 00:20:08.583707 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.583927 kubelet[2483]: E1101 00:20:08.583916 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.584010 kubelet[2483]: W1101 00:20:08.583999 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.584068 kubelet[2483]: E1101 00:20:08.584057 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.584284 kubelet[2483]: E1101 00:20:08.584273 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.584364 kubelet[2483]: W1101 00:20:08.584353 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.584427 kubelet[2483]: E1101 00:20:08.584416 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.584617 kubelet[2483]: E1101 00:20:08.584606 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.584719 kubelet[2483]: W1101 00:20:08.584707 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.584784 kubelet[2483]: E1101 00:20:08.584771 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.585012 kubelet[2483]: E1101 00:20:08.585000 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.585094 kubelet[2483]: W1101 00:20:08.585082 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.585155 kubelet[2483]: E1101 00:20:08.585144 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.585403 kubelet[2483]: E1101 00:20:08.585392 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.585486 kubelet[2483]: W1101 00:20:08.585474 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.585547 kubelet[2483]: E1101 00:20:08.585535 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.585814 kubelet[2483]: E1101 00:20:08.585802 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.585905 kubelet[2483]: W1101 00:20:08.585893 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.585962 kubelet[2483]: E1101 00:20:08.585952 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.586185 kubelet[2483]: E1101 00:20:08.586170 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.586267 kubelet[2483]: W1101 00:20:08.586255 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.586326 kubelet[2483]: E1101 00:20:08.586315 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.586548 kubelet[2483]: E1101 00:20:08.586537 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.586678 kubelet[2483]: W1101 00:20:08.586618 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.586751 kubelet[2483]: E1101 00:20:08.586738 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.586983 kubelet[2483]: E1101 00:20:08.586972 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.587065 kubelet[2483]: W1101 00:20:08.587054 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.587125 kubelet[2483]: E1101 00:20:08.587115 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.587380 kubelet[2483]: E1101 00:20:08.587367 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.587460 kubelet[2483]: W1101 00:20:08.587448 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.587523 kubelet[2483]: E1101 00:20:08.587512 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.587774 kubelet[2483]: E1101 00:20:08.587761 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.587860 kubelet[2483]: W1101 00:20:08.587849 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.587948 kubelet[2483]: E1101 00:20:08.587910 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.588257 kubelet[2483]: E1101 00:20:08.588244 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.588335 kubelet[2483]: W1101 00:20:08.588323 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.588391 kubelet[2483]: E1101 00:20:08.588381 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.588751 kubelet[2483]: E1101 00:20:08.588738 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.588847 kubelet[2483]: W1101 00:20:08.588835 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.588909 kubelet[2483]: E1101 00:20:08.588899 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.589139 kubelet[2483]: E1101 00:20:08.589128 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.589220 kubelet[2483]: W1101 00:20:08.589209 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.589277 kubelet[2483]: E1101 00:20:08.589266 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.589571 kubelet[2483]: E1101 00:20:08.589552 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.589571 kubelet[2483]: W1101 00:20:08.589568 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.589677 kubelet[2483]: E1101 00:20:08.589580 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.589778 kubelet[2483]: E1101 00:20:08.589762 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.589778 kubelet[2483]: W1101 00:20:08.589776 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.589857 kubelet[2483]: E1101 00:20:08.589787 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.589957 kubelet[2483]: E1101 00:20:08.589933 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.589957 kubelet[2483]: W1101 00:20:08.589947 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.589957 kubelet[2483]: E1101 00:20:08.589956 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.590127 kubelet[2483]: E1101 00:20:08.590114 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.590127 kubelet[2483]: W1101 00:20:08.590126 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.590192 kubelet[2483]: E1101 00:20:08.590134 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.590491 kubelet[2483]: E1101 00:20:08.590478 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.590565 kubelet[2483]: W1101 00:20:08.590554 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.590690 kubelet[2483]: E1101 00:20:08.590617 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.590979 kubelet[2483]: E1101 00:20:08.590955 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.590979 kubelet[2483]: W1101 00:20:08.590976 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.591089 kubelet[2483]: E1101 00:20:08.590987 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.591160 kubelet[2483]: E1101 00:20:08.591141 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.591160 kubelet[2483]: W1101 00:20:08.591155 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.591234 kubelet[2483]: E1101 00:20:08.591165 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.591364 kubelet[2483]: E1101 00:20:08.591347 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.591364 kubelet[2483]: W1101 00:20:08.591362 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.591437 kubelet[2483]: E1101 00:20:08.591375 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.591533 kubelet[2483]: E1101 00:20:08.591519 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.591533 kubelet[2483]: W1101 00:20:08.591531 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.591610 kubelet[2483]: E1101 00:20:08.591540 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.591713 kubelet[2483]: E1101 00:20:08.591696 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.591713 kubelet[2483]: W1101 00:20:08.591708 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.591792 kubelet[2483]: E1101 00:20:08.591717 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.591868 kubelet[2483]: E1101 00:20:08.591852 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.591868 kubelet[2483]: W1101 00:20:08.591865 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.591938 kubelet[2483]: E1101 00:20:08.591873 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.592010 kubelet[2483]: E1101 00:20:08.591999 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.592010 kubelet[2483]: W1101 00:20:08.592009 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.592068 kubelet[2483]: E1101 00:20:08.592018 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.592183 kubelet[2483]: E1101 00:20:08.592162 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.592183 kubelet[2483]: W1101 00:20:08.592173 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.592183 kubelet[2483]: E1101 00:20:08.592182 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.592590 kubelet[2483]: E1101 00:20:08.592574 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.592742 kubelet[2483]: W1101 00:20:08.592728 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.592814 kubelet[2483]: E1101 00:20:08.592802 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.593192 kubelet[2483]: E1101 00:20:08.593178 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.593288 kubelet[2483]: W1101 00:20:08.593275 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.593349 kubelet[2483]: E1101 00:20:08.593338 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:08.593576 kubelet[2483]: E1101 00:20:08.593565 2483 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:08.593685 kubelet[2483]: W1101 00:20:08.593671 2483 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:08.593760 kubelet[2483]: E1101 00:20:08.593748 2483 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:09.413577 env[1493]: time="2025-11-01T00:20:09.413528332Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:09.428760 env[1493]: time="2025-11-01T00:20:09.428714215Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:09.441605 env[1493]: time="2025-11-01T00:20:09.441550737Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:09.445741 env[1493]: time="2025-11-01T00:20:09.445701457Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:09.446312 env[1493]: time="2025-11-01T00:20:09.446281457Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Nov 1 00:20:09.453957 env[1493]: time="2025-11-01T00:20:09.453915618Z" level=info msg="CreateContainer within sandbox \"f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:20:09.483519 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4201721192.mount: Deactivated successfully. Nov 1 00:20:09.496384 env[1493]: time="2025-11-01T00:20:09.496325145Z" level=info msg="CreateContainer within sandbox \"f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0\"" Nov 1 00:20:09.497036 env[1493]: time="2025-11-01T00:20:09.497007505Z" level=info msg="StartContainer for \"8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0\"" Nov 1 00:20:09.523056 systemd[1]: run-containerd-runc-k8s.io-8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0-runc.prgHIV.mount: Deactivated successfully. Nov 1 00:20:09.526759 systemd[1]: Started cri-containerd-8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0.scope. Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2964 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:09.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834343532303861636138623066333837356363623536613836383836 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit: BPF prog-id=128 op=LOAD Nov 1 00:20:09.540000 audit[3144]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2964 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:09.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834343532303861636138623066333837356363623536613836383836 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit: BPF prog-id=129 op=LOAD Nov 1 00:20:09.540000 audit[3144]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2964 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:09.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834343532303861636138623066333837356363623536613836383836 Nov 1 00:20:09.540000 audit: BPF prog-id=129 op=UNLOAD Nov 1 00:20:09.540000 audit: BPF prog-id=128 op=UNLOAD Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:09.540000 audit: BPF prog-id=130 op=LOAD Nov 1 00:20:09.540000 audit[3144]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2964 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:09.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834343532303861636138623066333837356363623536613836383836 Nov 1 00:20:09.569438 systemd[1]: cri-containerd-8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0.scope: Deactivated successfully. Nov 1 00:20:09.570486 env[1493]: time="2025-11-01T00:20:09.570425236Z" level=info msg="StartContainer for \"8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0\" returns successfully" Nov 1 00:20:09.571000 audit: BPF prog-id=130 op=UNLOAD Nov 1 00:20:10.445656 kubelet[2483]: E1101 00:20:10.445592 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:10.479670 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0-rootfs.mount: Deactivated successfully. Nov 1 00:20:10.561231 kubelet[2483]: I1101 00:20:10.561157 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6f7c74f8cd-kt9vq" podStartSLOduration=4.222860526 podStartE2EDuration="6.561139263s" podCreationTimestamp="2025-11-01 00:20:04 +0000 UTC" firstStartedPulling="2025-11-01 00:20:04.665388865 +0000 UTC m=+28.349435970" lastFinishedPulling="2025-11-01 00:20:07.003667602 +0000 UTC m=+30.687714707" observedRunningTime="2025-11-01 00:20:07.547107567 +0000 UTC m=+31.231154672" watchObservedRunningTime="2025-11-01 00:20:10.561139263 +0000 UTC m=+34.245186328" Nov 1 00:20:10.640218 env[1493]: time="2025-11-01T00:20:10.640130435Z" level=info msg="shim disconnected" id=8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0 Nov 1 00:20:10.640218 env[1493]: time="2025-11-01T00:20:10.640214515Z" level=warning msg="cleaning up after shim disconnected" id=8445208aca8b0f3875ccb56a8688610e15404dd6c3f28d04bde407bdffce61d0 namespace=k8s.io Nov 1 00:20:10.640218 env[1493]: time="2025-11-01T00:20:10.640225275Z" level=info msg="cleaning up dead shim" Nov 1 00:20:10.647534 env[1493]: time="2025-11-01T00:20:10.647481556Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:20:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3190 runtime=io.containerd.runc.v2\n" Nov 1 00:20:11.538371 env[1493]: time="2025-11-01T00:20:11.538318405Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:20:12.445926 kubelet[2483]: E1101 00:20:12.445879 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:14.447224 kubelet[2483]: E1101 00:20:14.445736 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:15.506459 env[1493]: time="2025-11-01T00:20:15.506406399Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:15.512297 env[1493]: time="2025-11-01T00:20:15.512258640Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:15.516411 env[1493]: time="2025-11-01T00:20:15.516377240Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:15.520529 env[1493]: time="2025-11-01T00:20:15.520494201Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:15.521173 env[1493]: time="2025-11-01T00:20:15.521140761Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Nov 1 00:20:15.529895 env[1493]: time="2025-11-01T00:20:15.529852362Z" level=info msg="CreateContainer within sandbox \"f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:20:15.554737 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3302222208.mount: Deactivated successfully. Nov 1 00:20:15.570935 env[1493]: time="2025-11-01T00:20:15.570874607Z" level=info msg="CreateContainer within sandbox \"f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc\"" Nov 1 00:20:15.573283 env[1493]: time="2025-11-01T00:20:15.573243808Z" level=info msg="StartContainer for \"bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc\"" Nov 1 00:20:15.592817 systemd[1]: Started cri-containerd-bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc.scope. Nov 1 00:20:15.603472 systemd[1]: run-containerd-runc-k8s.io-bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc-runc.s9QUXX.mount: Deactivated successfully. Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.625278 kernel: kauditd_printk_skb: 91 callbacks suppressed Nov 1 00:20:15.625386 kernel: audit: type=1400 audit(1761956415.618:965): avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2964 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:15.670802 kernel: audit: type=1300 audit(1761956415.618:965): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2964 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:15.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264623262323139653531613639366631643365393432313565363935 Nov 1 00:20:15.700646 kernel: audit: type=1327 audit(1761956415.618:965): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264623262323139653531613639366631643365393432313565363935 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.722909 kernel: audit: type=1400 audit(1761956415.618:966): avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.743500 kernel: audit: type=1400 audit(1761956415.618:966): avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.761876 kernel: audit: type=1400 audit(1761956415.618:966): avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.779563 kernel: audit: type=1400 audit(1761956415.618:966): avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.798818 kernel: audit: type=1400 audit(1761956415.618:966): avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.799968 env[1493]: time="2025-11-01T00:20:15.799930158Z" level=info msg="StartContainer for \"bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc\" returns successfully" Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.820646 kernel: audit: type=1400 audit(1761956415.618:966): avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.820748 kernel: audit: type=1400 audit(1761956415.618:966): avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.618000 audit: BPF prog-id=131 op=LOAD Nov 1 00:20:15.618000 audit[3213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2964 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:15.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264623262323139653531613639366631643365393432313565363935 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.623000 audit: BPF prog-id=132 op=LOAD Nov 1 00:20:15.623000 audit[3213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2964 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:15.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264623262323139653531613639366631643365393432313565363935 Nov 1 00:20:15.645000 audit: BPF prog-id=132 op=UNLOAD Nov 1 00:20:15.645000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { perfmon } for pid=3213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit[3213]: AVC avc: denied { bpf } for pid=3213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:15.645000 audit: BPF prog-id=133 op=LOAD Nov 1 00:20:15.645000 audit[3213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2964 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:15.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264623262323139653531613639366631643365393432313565363935 Nov 1 00:20:16.447246 kubelet[2483]: E1101 00:20:16.447185 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:17.165163 env[1493]: time="2025-11-01T00:20:17.165073059Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:20:17.167516 systemd[1]: cri-containerd-bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc.scope: Deactivated successfully. Nov 1 00:20:17.171000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:20:17.188791 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc-rootfs.mount: Deactivated successfully. Nov 1 00:20:17.236654 kubelet[2483]: I1101 00:20:17.235837 2483 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:20:18.082027 systemd[1]: Created slice kubepods-burstable-pod68b0f8e7_293b_45a6_ad9c_88db70c5f5c2.slice. Nov 1 00:20:18.088921 systemd[1]: Created slice kubepods-besteffort-pod8fc92f66_851e_47b9_a145_ba988de2a931.slice. Nov 1 00:20:18.096043 env[1493]: time="2025-11-01T00:20:18.095990260Z" level=info msg="shim disconnected" id=bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc Nov 1 00:20:18.096043 env[1493]: time="2025-11-01T00:20:18.096038900Z" level=warning msg="cleaning up after shim disconnected" id=bdb2b219e51a696f1d3e94215e69526a1cd3747252bf7dee38b2c157cf8038dc namespace=k8s.io Nov 1 00:20:18.096254 env[1493]: time="2025-11-01T00:20:18.096051540Z" level=info msg="cleaning up dead shim" Nov 1 00:20:18.100154 systemd[1]: Created slice kubepods-besteffort-podd1bae2b3_184b_4fab_8bf3_245332cdbb4f.slice. Nov 1 00:20:18.107293 systemd[1]: Created slice kubepods-burstable-pod9082d4e0_79be_4894_8d55_8fd3da886cb9.slice. Nov 1 00:20:18.111460 env[1493]: time="2025-11-01T00:20:18.111420302Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9mw49,Uid:d1bae2b3-184b-4fab-8bf3-245332cdbb4f,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:18.112150 env[1493]: time="2025-11-01T00:20:18.111575062Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:20:18Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3254 runtime=io.containerd.runc.v2\n" Nov 1 00:20:18.119476 systemd[1]: Created slice kubepods-besteffort-pod8833c03b_ed51_420b_92b4_d19a3af74382.slice. Nov 1 00:20:18.126196 systemd[1]: Created slice kubepods-besteffort-pod61cf4df3_9495_4ec5_bf84_8b16f6220291.slice. Nov 1 00:20:18.138734 systemd[1]: Created slice kubepods-besteffort-podcd0e393b_2cb9_479a_a6d3_1d4da4894369.slice. Nov 1 00:20:18.147421 systemd[1]: Created slice kubepods-besteffort-pod142cddeb_2de3_4f33_b2e2_51c515867ae1.slice. Nov 1 00:20:18.178084 kubelet[2483]: I1101 00:20:18.177322 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/68b0f8e7-293b-45a6-ad9c-88db70c5f5c2-config-volume\") pod \"coredns-674b8bbfcf-dgmjc\" (UID: \"68b0f8e7-293b-45a6-ad9c-88db70c5f5c2\") " pod="kube-system/coredns-674b8bbfcf-dgmjc" Nov 1 00:20:18.178084 kubelet[2483]: I1101 00:20:18.177409 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9tgrk\" (UniqueName: \"kubernetes.io/projected/68b0f8e7-293b-45a6-ad9c-88db70c5f5c2-kube-api-access-9tgrk\") pod \"coredns-674b8bbfcf-dgmjc\" (UID: \"68b0f8e7-293b-45a6-ad9c-88db70c5f5c2\") " pod="kube-system/coredns-674b8bbfcf-dgmjc" Nov 1 00:20:18.227094 env[1493]: time="2025-11-01T00:20:18.226921717Z" level=error msg="Failed to destroy network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.231312 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656-shm.mount: Deactivated successfully. Nov 1 00:20:18.233120 env[1493]: time="2025-11-01T00:20:18.233065718Z" level=error msg="encountered an error cleaning up failed sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.233277 env[1493]: time="2025-11-01T00:20:18.233248678Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9mw49,Uid:d1bae2b3-184b-4fab-8bf3-245332cdbb4f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.233974 kubelet[2483]: E1101 00:20:18.233548 2483 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.233974 kubelet[2483]: E1101 00:20:18.233616 2483 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-9mw49" Nov 1 00:20:18.233974 kubelet[2483]: E1101 00:20:18.233649 2483 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-9mw49" Nov 1 00:20:18.234145 kubelet[2483]: E1101 00:20:18.233700 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:18.278000 kubelet[2483]: I1101 00:20:18.277929 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/cd0e393b-2cb9-479a-a6d3-1d4da4894369-goldmane-ca-bundle\") pod \"goldmane-666569f655-hc9wn\" (UID: \"cd0e393b-2cb9-479a-a6d3-1d4da4894369\") " pod="calico-system/goldmane-666569f655-hc9wn" Nov 1 00:20:18.278232 kubelet[2483]: I1101 00:20:18.278216 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/61cf4df3-9495-4ec5-bf84-8b16f6220291-tigera-ca-bundle\") pod \"calico-kube-controllers-6546b95b7c-fzns4\" (UID: \"61cf4df3-9495-4ec5-bf84-8b16f6220291\") " pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" Nov 1 00:20:18.278454 kubelet[2483]: I1101 00:20:18.278438 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8833c03b-ed51-420b-92b4-d19a3af74382-whisker-backend-key-pair\") pod \"whisker-589774b76c-s8hpc\" (UID: \"8833c03b-ed51-420b-92b4-d19a3af74382\") " pod="calico-system/whisker-589774b76c-s8hpc" Nov 1 00:20:18.278579 kubelet[2483]: I1101 00:20:18.278565 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8833c03b-ed51-420b-92b4-d19a3af74382-whisker-ca-bundle\") pod \"whisker-589774b76c-s8hpc\" (UID: \"8833c03b-ed51-420b-92b4-d19a3af74382\") " pod="calico-system/whisker-589774b76c-s8hpc" Nov 1 00:20:18.278690 kubelet[2483]: I1101 00:20:18.278676 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wbqd9\" (UniqueName: \"kubernetes.io/projected/61cf4df3-9495-4ec5-bf84-8b16f6220291-kube-api-access-wbqd9\") pod \"calico-kube-controllers-6546b95b7c-fzns4\" (UID: \"61cf4df3-9495-4ec5-bf84-8b16f6220291\") " pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" Nov 1 00:20:18.278798 kubelet[2483]: I1101 00:20:18.278784 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/142cddeb-2de3-4f33-b2e2-51c515867ae1-calico-apiserver-certs\") pod \"calico-apiserver-5cddcf5574-gh77j\" (UID: \"142cddeb-2de3-4f33-b2e2-51c515867ae1\") " pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" Nov 1 00:20:18.278894 kubelet[2483]: I1101 00:20:18.278882 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j52db\" (UniqueName: \"kubernetes.io/projected/142cddeb-2de3-4f33-b2e2-51c515867ae1-kube-api-access-j52db\") pod \"calico-apiserver-5cddcf5574-gh77j\" (UID: \"142cddeb-2de3-4f33-b2e2-51c515867ae1\") " pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" Nov 1 00:20:18.279045 kubelet[2483]: I1101 00:20:18.279019 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/8fc92f66-851e-47b9-a145-ba988de2a931-calico-apiserver-certs\") pod \"calico-apiserver-5cddcf5574-mwskz\" (UID: \"8fc92f66-851e-47b9-a145-ba988de2a931\") " pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" Nov 1 00:20:18.279179 kubelet[2483]: I1101 00:20:18.279054 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ncpzr\" (UniqueName: \"kubernetes.io/projected/8fc92f66-851e-47b9-a145-ba988de2a931-kube-api-access-ncpzr\") pod \"calico-apiserver-5cddcf5574-mwskz\" (UID: \"8fc92f66-851e-47b9-a145-ba988de2a931\") " pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" Nov 1 00:20:18.279179 kubelet[2483]: I1101 00:20:18.279071 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/9082d4e0-79be-4894-8d55-8fd3da886cb9-config-volume\") pod \"coredns-674b8bbfcf-xfbtb\" (UID: \"9082d4e0-79be-4894-8d55-8fd3da886cb9\") " pod="kube-system/coredns-674b8bbfcf-xfbtb" Nov 1 00:20:18.279179 kubelet[2483]: I1101 00:20:18.279107 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/cd0e393b-2cb9-479a-a6d3-1d4da4894369-config\") pod \"goldmane-666569f655-hc9wn\" (UID: \"cd0e393b-2cb9-479a-a6d3-1d4da4894369\") " pod="calico-system/goldmane-666569f655-hc9wn" Nov 1 00:20:18.279179 kubelet[2483]: I1101 00:20:18.279124 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/cd0e393b-2cb9-479a-a6d3-1d4da4894369-goldmane-key-pair\") pod \"goldmane-666569f655-hc9wn\" (UID: \"cd0e393b-2cb9-479a-a6d3-1d4da4894369\") " pod="calico-system/goldmane-666569f655-hc9wn" Nov 1 00:20:18.279179 kubelet[2483]: I1101 00:20:18.279140 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k7frb\" (UniqueName: \"kubernetes.io/projected/cd0e393b-2cb9-479a-a6d3-1d4da4894369-kube-api-access-k7frb\") pod \"goldmane-666569f655-hc9wn\" (UID: \"cd0e393b-2cb9-479a-a6d3-1d4da4894369\") " pod="calico-system/goldmane-666569f655-hc9wn" Nov 1 00:20:18.279315 kubelet[2483]: I1101 00:20:18.279156 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w4c67\" (UniqueName: \"kubernetes.io/projected/8833c03b-ed51-420b-92b4-d19a3af74382-kube-api-access-w4c67\") pod \"whisker-589774b76c-s8hpc\" (UID: \"8833c03b-ed51-420b-92b4-d19a3af74382\") " pod="calico-system/whisker-589774b76c-s8hpc" Nov 1 00:20:18.279315 kubelet[2483]: I1101 00:20:18.279187 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xcclf\" (UniqueName: \"kubernetes.io/projected/9082d4e0-79be-4894-8d55-8fd3da886cb9-kube-api-access-xcclf\") pod \"coredns-674b8bbfcf-xfbtb\" (UID: \"9082d4e0-79be-4894-8d55-8fd3da886cb9\") " pod="kube-system/coredns-674b8bbfcf-xfbtb" Nov 1 00:20:18.390674 env[1493]: time="2025-11-01T00:20:18.386814417Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dgmjc,Uid:68b0f8e7-293b-45a6-ad9c-88db70c5f5c2,Namespace:kube-system,Attempt:0,}" Nov 1 00:20:18.431785 env[1493]: time="2025-11-01T00:20:18.431492943Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6546b95b7c-fzns4,Uid:61cf4df3-9495-4ec5-bf84-8b16f6220291,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:18.442503 env[1493]: time="2025-11-01T00:20:18.442296064Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-hc9wn,Uid:cd0e393b-2cb9-479a-a6d3-1d4da4894369,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:18.453184 env[1493]: time="2025-11-01T00:20:18.453138146Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cddcf5574-gh77j,Uid:142cddeb-2de3-4f33-b2e2-51c515867ae1,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:20:18.505423 env[1493]: time="2025-11-01T00:20:18.505328632Z" level=error msg="Failed to destroy network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.505915 env[1493]: time="2025-11-01T00:20:18.505882072Z" level=error msg="encountered an error cleaning up failed sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.506053 env[1493]: time="2025-11-01T00:20:18.506027152Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dgmjc,Uid:68b0f8e7-293b-45a6-ad9c-88db70c5f5c2,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.508225 kubelet[2483]: E1101 00:20:18.506412 2483 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.508225 kubelet[2483]: E1101 00:20:18.506534 2483 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-dgmjc" Nov 1 00:20:18.508225 kubelet[2483]: E1101 00:20:18.506557 2483 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-dgmjc" Nov 1 00:20:18.508401 kubelet[2483]: E1101 00:20:18.506615 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-dgmjc_kube-system(68b0f8e7-293b-45a6-ad9c-88db70c5f5c2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-dgmjc_kube-system(68b0f8e7-293b-45a6-ad9c-88db70c5f5c2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-dgmjc" podUID="68b0f8e7-293b-45a6-ad9c-88db70c5f5c2" Nov 1 00:20:18.579166 env[1493]: time="2025-11-01T00:20:18.572570281Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:20:18.582353 kubelet[2483]: I1101 00:20:18.580545 2483 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:18.583105 env[1493]: time="2025-11-01T00:20:18.583057842Z" level=info msg="StopPodSandbox for \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\"" Nov 1 00:20:18.584535 kubelet[2483]: I1101 00:20:18.584062 2483 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:18.584924 env[1493]: time="2025-11-01T00:20:18.584840603Z" level=info msg="StopPodSandbox for \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\"" Nov 1 00:20:18.635905 env[1493]: time="2025-11-01T00:20:18.635833249Z" level=error msg="Failed to destroy network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.636255 env[1493]: time="2025-11-01T00:20:18.636214289Z" level=error msg="encountered an error cleaning up failed sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.636298 env[1493]: time="2025-11-01T00:20:18.636276409Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6546b95b7c-fzns4,Uid:61cf4df3-9495-4ec5-bf84-8b16f6220291,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.636548 kubelet[2483]: E1101 00:20:18.636508 2483 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.636619 kubelet[2483]: E1101 00:20:18.636570 2483 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" Nov 1 00:20:18.636619 kubelet[2483]: E1101 00:20:18.636593 2483 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" Nov 1 00:20:18.636711 kubelet[2483]: E1101 00:20:18.636664 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6546b95b7c-fzns4_calico-system(61cf4df3-9495-4ec5-bf84-8b16f6220291)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6546b95b7c-fzns4_calico-system(61cf4df3-9495-4ec5-bf84-8b16f6220291)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:20:18.653545 env[1493]: time="2025-11-01T00:20:18.653389731Z" level=error msg="StopPodSandbox for \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\" failed" error="failed to destroy network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.655355 kubelet[2483]: E1101 00:20:18.655154 2483 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:18.655355 kubelet[2483]: E1101 00:20:18.655212 2483 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656"} Nov 1 00:20:18.655355 kubelet[2483]: E1101 00:20:18.655290 2483 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d1bae2b3-184b-4fab-8bf3-245332cdbb4f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:18.655355 kubelet[2483]: E1101 00:20:18.655323 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d1bae2b3-184b-4fab-8bf3-245332cdbb4f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:18.683235 env[1493]: time="2025-11-01T00:20:18.683170335Z" level=error msg="Failed to destroy network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.683585 env[1493]: time="2025-11-01T00:20:18.683544695Z" level=error msg="encountered an error cleaning up failed sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.683667 env[1493]: time="2025-11-01T00:20:18.683600775Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-hc9wn,Uid:cd0e393b-2cb9-479a-a6d3-1d4da4894369,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.683847 kubelet[2483]: E1101 00:20:18.683802 2483 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.683911 kubelet[2483]: E1101 00:20:18.683855 2483 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-hc9wn" Nov 1 00:20:18.683911 kubelet[2483]: E1101 00:20:18.683876 2483 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-hc9wn" Nov 1 00:20:18.683966 kubelet[2483]: E1101 00:20:18.683920 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-hc9wn_calico-system(cd0e393b-2cb9-479a-a6d3-1d4da4894369)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-hc9wn_calico-system(cd0e393b-2cb9-479a-a6d3-1d4da4894369)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:20:18.690007 env[1493]: time="2025-11-01T00:20:18.689940536Z" level=error msg="StopPodSandbox for \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\" failed" error="failed to destroy network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.690550 kubelet[2483]: E1101 00:20:18.690500 2483 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:18.690671 kubelet[2483]: E1101 00:20:18.690556 2483 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48"} Nov 1 00:20:18.690671 kubelet[2483]: E1101 00:20:18.690586 2483 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"68b0f8e7-293b-45a6-ad9c-88db70c5f5c2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:18.690671 kubelet[2483]: E1101 00:20:18.690607 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"68b0f8e7-293b-45a6-ad9c-88db70c5f5c2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-dgmjc" podUID="68b0f8e7-293b-45a6-ad9c-88db70c5f5c2" Nov 1 00:20:18.692323 env[1493]: time="2025-11-01T00:20:18.692267416Z" level=error msg="Failed to destroy network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.692676 env[1493]: time="2025-11-01T00:20:18.692616176Z" level=error msg="encountered an error cleaning up failed sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.692736 env[1493]: time="2025-11-01T00:20:18.692696936Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cddcf5574-gh77j,Uid:142cddeb-2de3-4f33-b2e2-51c515867ae1,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.693217 kubelet[2483]: E1101 00:20:18.693176 2483 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.693277 kubelet[2483]: E1101 00:20:18.693236 2483 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" Nov 1 00:20:18.693277 kubelet[2483]: E1101 00:20:18.693257 2483 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" Nov 1 00:20:18.693339 kubelet[2483]: E1101 00:20:18.693296 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5cddcf5574-gh77j_calico-apiserver(142cddeb-2de3-4f33-b2e2-51c515867ae1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5cddcf5574-gh77j_calico-apiserver(142cddeb-2de3-4f33-b2e2-51c515867ae1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:20:18.695602 env[1493]: time="2025-11-01T00:20:18.695556697Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cddcf5574-mwskz,Uid:8fc92f66-851e-47b9-a145-ba988de2a931,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:20:18.713937 env[1493]: time="2025-11-01T00:20:18.713894899Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xfbtb,Uid:9082d4e0-79be-4894-8d55-8fd3da886cb9,Namespace:kube-system,Attempt:0,}" Nov 1 00:20:18.733476 env[1493]: time="2025-11-01T00:20:18.733435782Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-589774b76c-s8hpc,Uid:8833c03b-ed51-420b-92b4-d19a3af74382,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:18.819589 env[1493]: time="2025-11-01T00:20:18.819524793Z" level=error msg="Failed to destroy network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.820139 env[1493]: time="2025-11-01T00:20:18.820102273Z" level=error msg="encountered an error cleaning up failed sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.820277 env[1493]: time="2025-11-01T00:20:18.820249993Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cddcf5574-mwskz,Uid:8fc92f66-851e-47b9-a145-ba988de2a931,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.821167 kubelet[2483]: E1101 00:20:18.820670 2483 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.821167 kubelet[2483]: E1101 00:20:18.820761 2483 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" Nov 1 00:20:18.821167 kubelet[2483]: E1101 00:20:18.820782 2483 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" Nov 1 00:20:18.821339 kubelet[2483]: E1101 00:20:18.820856 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5cddcf5574-mwskz_calico-apiserver(8fc92f66-851e-47b9-a145-ba988de2a931)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5cddcf5574-mwskz_calico-apiserver(8fc92f66-851e-47b9-a145-ba988de2a931)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:20:18.858598 env[1493]: time="2025-11-01T00:20:18.858528958Z" level=error msg="Failed to destroy network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.858952 env[1493]: time="2025-11-01T00:20:18.858920918Z" level=error msg="encountered an error cleaning up failed sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.858952 env[1493]: time="2025-11-01T00:20:18.858985278Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xfbtb,Uid:9082d4e0-79be-4894-8d55-8fd3da886cb9,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.859258 kubelet[2483]: E1101 00:20:18.859203 2483 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.859322 kubelet[2483]: E1101 00:20:18.859269 2483 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-xfbtb" Nov 1 00:20:18.859322 kubelet[2483]: E1101 00:20:18.859292 2483 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-xfbtb" Nov 1 00:20:18.859392 kubelet[2483]: E1101 00:20:18.859341 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-xfbtb_kube-system(9082d4e0-79be-4894-8d55-8fd3da886cb9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-xfbtb_kube-system(9082d4e0-79be-4894-8d55-8fd3da886cb9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-xfbtb" podUID="9082d4e0-79be-4894-8d55-8fd3da886cb9" Nov 1 00:20:18.865918 env[1493]: time="2025-11-01T00:20:18.865865159Z" level=error msg="Failed to destroy network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.866477 env[1493]: time="2025-11-01T00:20:18.866441399Z" level=error msg="encountered an error cleaning up failed sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.866897 env[1493]: time="2025-11-01T00:20:18.866866839Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-589774b76c-s8hpc,Uid:8833c03b-ed51-420b-92b4-d19a3af74382,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.867230 kubelet[2483]: E1101 00:20:18.867191 2483 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:18.867322 kubelet[2483]: E1101 00:20:18.867249 2483 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-589774b76c-s8hpc" Nov 1 00:20:18.867322 kubelet[2483]: E1101 00:20:18.867270 2483 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-589774b76c-s8hpc" Nov 1 00:20:18.867380 kubelet[2483]: E1101 00:20:18.867321 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-589774b76c-s8hpc_calico-system(8833c03b-ed51-420b-92b4-d19a3af74382)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-589774b76c-s8hpc_calico-system(8833c03b-ed51-420b-92b4-d19a3af74382)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-589774b76c-s8hpc" podUID="8833c03b-ed51-420b-92b4-d19a3af74382" Nov 1 00:20:19.588040 kubelet[2483]: I1101 00:20:19.587677 2483 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:19.590172 env[1493]: time="2025-11-01T00:20:19.588984050Z" level=info msg="StopPodSandbox for \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\"" Nov 1 00:20:19.590806 kubelet[2483]: I1101 00:20:19.590773 2483 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:19.591345 env[1493]: time="2025-11-01T00:20:19.591314970Z" level=info msg="StopPodSandbox for \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\"" Nov 1 00:20:19.592434 kubelet[2483]: I1101 00:20:19.592402 2483 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:19.592971 env[1493]: time="2025-11-01T00:20:19.592936570Z" level=info msg="StopPodSandbox for \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\"" Nov 1 00:20:19.594228 kubelet[2483]: I1101 00:20:19.594202 2483 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:19.594726 env[1493]: time="2025-11-01T00:20:19.594687131Z" level=info msg="StopPodSandbox for \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\"" Nov 1 00:20:19.595681 kubelet[2483]: I1101 00:20:19.595497 2483 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:19.598098 env[1493]: time="2025-11-01T00:20:19.597050771Z" level=info msg="StopPodSandbox for \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\"" Nov 1 00:20:19.599231 kubelet[2483]: I1101 00:20:19.599202 2483 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:19.599683 env[1493]: time="2025-11-01T00:20:19.599653531Z" level=info msg="StopPodSandbox for \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\"" Nov 1 00:20:19.681573 env[1493]: time="2025-11-01T00:20:19.681494982Z" level=error msg="StopPodSandbox for \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\" failed" error="failed to destroy network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:19.681991 kubelet[2483]: E1101 00:20:19.681949 2483 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:19.682086 kubelet[2483]: E1101 00:20:19.682007 2483 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98"} Nov 1 00:20:19.682086 kubelet[2483]: E1101 00:20:19.682041 2483 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8fc92f66-851e-47b9-a145-ba988de2a931\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:19.682086 kubelet[2483]: E1101 00:20:19.682062 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8fc92f66-851e-47b9-a145-ba988de2a931\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:20:19.684820 env[1493]: time="2025-11-01T00:20:19.684769182Z" level=error msg="StopPodSandbox for \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\" failed" error="failed to destroy network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:19.685136 kubelet[2483]: E1101 00:20:19.685098 2483 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:19.685238 kubelet[2483]: E1101 00:20:19.685150 2483 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116"} Nov 1 00:20:19.685238 kubelet[2483]: E1101 00:20:19.685185 2483 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8833c03b-ed51-420b-92b4-d19a3af74382\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:19.685238 kubelet[2483]: E1101 00:20:19.685204 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8833c03b-ed51-420b-92b4-d19a3af74382\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-589774b76c-s8hpc" podUID="8833c03b-ed51-420b-92b4-d19a3af74382" Nov 1 00:20:19.697261 env[1493]: time="2025-11-01T00:20:19.697167143Z" level=error msg="StopPodSandbox for \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\" failed" error="failed to destroy network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:19.697611 kubelet[2483]: E1101 00:20:19.697563 2483 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:19.697711 kubelet[2483]: E1101 00:20:19.697619 2483 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf"} Nov 1 00:20:19.697711 kubelet[2483]: E1101 00:20:19.697676 2483 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"61cf4df3-9495-4ec5-bf84-8b16f6220291\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:19.697711 kubelet[2483]: E1101 00:20:19.697699 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"61cf4df3-9495-4ec5-bf84-8b16f6220291\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:20:19.698576 env[1493]: time="2025-11-01T00:20:19.698534064Z" level=error msg="StopPodSandbox for \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\" failed" error="failed to destroy network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:19.699007 kubelet[2483]: E1101 00:20:19.698859 2483 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:19.699007 kubelet[2483]: E1101 00:20:19.698900 2483 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f"} Nov 1 00:20:19.699007 kubelet[2483]: E1101 00:20:19.698953 2483 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9082d4e0-79be-4894-8d55-8fd3da886cb9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:19.699007 kubelet[2483]: E1101 00:20:19.698973 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9082d4e0-79be-4894-8d55-8fd3da886cb9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-xfbtb" podUID="9082d4e0-79be-4894-8d55-8fd3da886cb9" Nov 1 00:20:19.701660 env[1493]: time="2025-11-01T00:20:19.701602704Z" level=error msg="StopPodSandbox for \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\" failed" error="failed to destroy network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:19.701969 kubelet[2483]: E1101 00:20:19.701936 2483 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:19.702040 kubelet[2483]: E1101 00:20:19.701976 2483 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5"} Nov 1 00:20:19.702040 kubelet[2483]: E1101 00:20:19.702003 2483 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"142cddeb-2de3-4f33-b2e2-51c515867ae1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:19.702125 kubelet[2483]: E1101 00:20:19.702021 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"142cddeb-2de3-4f33-b2e2-51c515867ae1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:20:19.702572 env[1493]: time="2025-11-01T00:20:19.702539504Z" level=error msg="StopPodSandbox for \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\" failed" error="failed to destroy network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:19.702956 kubelet[2483]: E1101 00:20:19.702920 2483 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:19.703044 kubelet[2483]: E1101 00:20:19.702959 2483 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f"} Nov 1 00:20:19.703044 kubelet[2483]: E1101 00:20:19.702986 2483 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cd0e393b-2cb9-479a-a6d3-1d4da4894369\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:19.703044 kubelet[2483]: E1101 00:20:19.703004 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cd0e393b-2cb9-479a-a6d3-1d4da4894369\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:20:23.725420 kubelet[2483]: I1101 00:20:23.725237 2483 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:20:23.788133 kernel: kauditd_printk_skb: 34 callbacks suppressed Nov 1 00:20:23.788272 kernel: audit: type=1325 audit(1761956423.767:972): table=filter:108 family=2 entries=21 op=nft_register_rule pid=3615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:23.767000 audit[3615]: NETFILTER_CFG table=filter:108 family=2 entries=21 op=nft_register_rule pid=3615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:23.767000 audit[3615]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdcf39840 a2=0 a3=1 items=0 ppid=2587 pid=3615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:23.767000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:23.833088 kernel: audit: type=1300 audit(1761956423.767:972): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdcf39840 a2=0 a3=1 items=0 ppid=2587 pid=3615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:23.833192 kernel: audit: type=1327 audit(1761956423.767:972): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:23.817000 audit[3615]: NETFILTER_CFG table=nat:109 family=2 entries=19 op=nft_register_chain pid=3615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:23.817000 audit[3615]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdcf39840 a2=0 a3=1 items=0 ppid=2587 pid=3615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:23.847661 kernel: audit: type=1325 audit(1761956423.817:973): table=nat:109 family=2 entries=19 op=nft_register_chain pid=3615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:23.817000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:23.887794 kernel: audit: type=1300 audit(1761956423.817:973): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdcf39840 a2=0 a3=1 items=0 ppid=2587 pid=3615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:23.887896 kernel: audit: type=1327 audit(1761956423.817:973): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:26.215973 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2578823956.mount: Deactivated successfully. Nov 1 00:20:26.459193 env[1493]: time="2025-11-01T00:20:26.459140229Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:26.470955 env[1493]: time="2025-11-01T00:20:26.470840270Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:26.475183 env[1493]: time="2025-11-01T00:20:26.475139711Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:26.478656 env[1493]: time="2025-11-01T00:20:26.478589951Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:26.478934 env[1493]: time="2025-11-01T00:20:26.478904071Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Nov 1 00:20:26.506909 env[1493]: time="2025-11-01T00:20:26.506861594Z" level=info msg="CreateContainer within sandbox \"f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:20:26.556791 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2801250805.mount: Deactivated successfully. Nov 1 00:20:26.574562 env[1493]: time="2025-11-01T00:20:26.574494642Z" level=info msg="CreateContainer within sandbox \"f46da8ccfbccefecbc943496bccf2b73762406c8b6b461df51c45ed938fba099\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005\"" Nov 1 00:20:26.577024 env[1493]: time="2025-11-01T00:20:26.576985282Z" level=info msg="StartContainer for \"3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005\"" Nov 1 00:20:26.596914 systemd[1]: Started cri-containerd-3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005.scope. Nov 1 00:20:26.621000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.621000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2964 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:26.670448 kernel: audit: type=1400 audit(1761956426.621:974): avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.670577 kernel: audit: type=1300 audit(1761956426.621:974): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2964 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:26.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343861343536316433386463336461623536303232306535663864 Nov 1 00:20:26.697807 kernel: audit: type=1327 audit(1761956426.621:974): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343861343536316433386463336461623536303232306535663864 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.717647 kernel: audit: type=1400 audit(1761956426.626:975): avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.626000 audit: BPF prog-id=134 op=LOAD Nov 1 00:20:26.626000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2964 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:26.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343861343536316433386463336461623536303232306535663864 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit: BPF prog-id=135 op=LOAD Nov 1 00:20:26.641000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2964 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:26.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343861343536316433386463336461623536303232306535663864 Nov 1 00:20:26.641000 audit: BPF prog-id=135 op=UNLOAD Nov 1 00:20:26.641000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:26.641000 audit: BPF prog-id=136 op=LOAD Nov 1 00:20:26.641000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2964 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:26.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331343861343536316433386463336461623536303232306535663864 Nov 1 00:20:26.881665 env[1493]: time="2025-11-01T00:20:26.880679557Z" level=info msg="StartContainer for \"3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005\" returns successfully" Nov 1 00:20:27.629919 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:20:27.630063 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:20:27.659883 systemd[1]: run-containerd-runc-k8s.io-3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005-runc.LKcyH6.mount: Deactivated successfully. Nov 1 00:20:27.676973 kubelet[2483]: I1101 00:20:27.676549 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-qqbcz" podStartSLOduration=1.979077899 podStartE2EDuration="23.676532685s" podCreationTimestamp="2025-11-01 00:20:04 +0000 UTC" firstStartedPulling="2025-11-01 00:20:04.782518565 +0000 UTC m=+28.466565630" lastFinishedPulling="2025-11-01 00:20:26.479973311 +0000 UTC m=+50.164020416" observedRunningTime="2025-11-01 00:20:27.676196045 +0000 UTC m=+51.360243150" watchObservedRunningTime="2025-11-01 00:20:27.676532685 +0000 UTC m=+51.360579790" Nov 1 00:20:27.827331 env[1493]: time="2025-11-01T00:20:27.827291662Z" level=info msg="StopPodSandbox for \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\"" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.916 [INFO][3692] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.916 [INFO][3692] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" iface="eth0" netns="/var/run/netns/cni-45ce0c92-2ca2-d841-af76-b0f582e524ec" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.916 [INFO][3692] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" iface="eth0" netns="/var/run/netns/cni-45ce0c92-2ca2-d841-af76-b0f582e524ec" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.916 [INFO][3692] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" iface="eth0" netns="/var/run/netns/cni-45ce0c92-2ca2-d841-af76-b0f582e524ec" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.916 [INFO][3692] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.916 [INFO][3692] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.953 [INFO][3707] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.953 [INFO][3707] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.954 [INFO][3707] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.963 [WARNING][3707] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.963 [INFO][3707] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.965 [INFO][3707] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:27.968904 env[1493]: 2025-11-01 00:20:27.967 [INFO][3692] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:27.971680 systemd[1]: run-netns-cni\x2d45ce0c92\x2d2ca2\x2dd841\x2daf76\x2db0f582e524ec.mount: Deactivated successfully. Nov 1 00:20:27.973175 env[1493]: time="2025-11-01T00:20:27.973135479Z" level=info msg="TearDown network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\" successfully" Nov 1 00:20:27.973317 env[1493]: time="2025-11-01T00:20:27.973296319Z" level=info msg="StopPodSandbox for \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\" returns successfully" Nov 1 00:20:28.054100 kubelet[2483]: I1101 00:20:28.053442 2483 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8833c03b-ed51-420b-92b4-d19a3af74382-whisker-backend-key-pair\") pod \"8833c03b-ed51-420b-92b4-d19a3af74382\" (UID: \"8833c03b-ed51-420b-92b4-d19a3af74382\") " Nov 1 00:20:28.054100 kubelet[2483]: I1101 00:20:28.053487 2483 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8833c03b-ed51-420b-92b4-d19a3af74382-whisker-ca-bundle\") pod \"8833c03b-ed51-420b-92b4-d19a3af74382\" (UID: \"8833c03b-ed51-420b-92b4-d19a3af74382\") " Nov 1 00:20:28.054100 kubelet[2483]: I1101 00:20:28.053514 2483 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-w4c67\" (UniqueName: \"kubernetes.io/projected/8833c03b-ed51-420b-92b4-d19a3af74382-kube-api-access-w4c67\") pod \"8833c03b-ed51-420b-92b4-d19a3af74382\" (UID: \"8833c03b-ed51-420b-92b4-d19a3af74382\") " Nov 1 00:20:28.054987 kubelet[2483]: I1101 00:20:28.054939 2483 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8833c03b-ed51-420b-92b4-d19a3af74382-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "8833c03b-ed51-420b-92b4-d19a3af74382" (UID: "8833c03b-ed51-420b-92b4-d19a3af74382"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:20:28.060558 kubelet[2483]: I1101 00:20:28.060490 2483 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8833c03b-ed51-420b-92b4-d19a3af74382-kube-api-access-w4c67" (OuterVolumeSpecName: "kube-api-access-w4c67") pod "8833c03b-ed51-420b-92b4-d19a3af74382" (UID: "8833c03b-ed51-420b-92b4-d19a3af74382"). InnerVolumeSpecName "kube-api-access-w4c67". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:20:28.061556 kubelet[2483]: I1101 00:20:28.061509 2483 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/8833c03b-ed51-420b-92b4-d19a3af74382-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "8833c03b-ed51-420b-92b4-d19a3af74382" (UID: "8833c03b-ed51-420b-92b4-d19a3af74382"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:20:28.154892 kubelet[2483]: I1101 00:20:28.154805 2483 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8833c03b-ed51-420b-92b4-d19a3af74382-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-c6a118d14a\" DevicePath \"\"" Nov 1 00:20:28.154892 kubelet[2483]: I1101 00:20:28.154839 2483 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8833c03b-ed51-420b-92b4-d19a3af74382-whisker-ca-bundle\") on node \"ci-3510.3.8-n-c6a118d14a\" DevicePath \"\"" Nov 1 00:20:28.154892 kubelet[2483]: I1101 00:20:28.154858 2483 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-w4c67\" (UniqueName: \"kubernetes.io/projected/8833c03b-ed51-420b-92b4-d19a3af74382-kube-api-access-w4c67\") on node \"ci-3510.3.8-n-c6a118d14a\" DevicePath \"\"" Nov 1 00:20:28.216234 systemd[1]: var-lib-kubelet-pods-8833c03b\x2ded51\x2d420b\x2d92b4\x2dd19a3af74382-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dw4c67.mount: Deactivated successfully. Nov 1 00:20:28.216521 systemd[1]: var-lib-kubelet-pods-8833c03b\x2ded51\x2d420b\x2d92b4\x2dd19a3af74382-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:20:28.451236 systemd[1]: Removed slice kubepods-besteffort-pod8833c03b_ed51_420b_92b4_d19a3af74382.slice. Nov 1 00:20:28.661444 systemd[1]: run-containerd-runc-k8s.io-3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005-runc.Puc3vA.mount: Deactivated successfully. Nov 1 00:20:28.741576 systemd[1]: Created slice kubepods-besteffort-pod97a994ab_2ddd_40e4_9a61_19b37b9bbf5a.slice. Nov 1 00:20:28.759221 kubelet[2483]: I1101 00:20:28.759182 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v47g9\" (UniqueName: \"kubernetes.io/projected/97a994ab-2ddd-40e4-9a61-19b37b9bbf5a-kube-api-access-v47g9\") pod \"whisker-6f68476947-5gd4l\" (UID: \"97a994ab-2ddd-40e4-9a61-19b37b9bbf5a\") " pod="calico-system/whisker-6f68476947-5gd4l" Nov 1 00:20:28.759774 kubelet[2483]: I1101 00:20:28.759753 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/97a994ab-2ddd-40e4-9a61-19b37b9bbf5a-whisker-backend-key-pair\") pod \"whisker-6f68476947-5gd4l\" (UID: \"97a994ab-2ddd-40e4-9a61-19b37b9bbf5a\") " pod="calico-system/whisker-6f68476947-5gd4l" Nov 1 00:20:28.759911 kubelet[2483]: I1101 00:20:28.759894 2483 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/97a994ab-2ddd-40e4-9a61-19b37b9bbf5a-whisker-ca-bundle\") pod \"whisker-6f68476947-5gd4l\" (UID: \"97a994ab-2ddd-40e4-9a61-19b37b9bbf5a\") " pod="calico-system/whisker-6f68476947-5gd4l" Nov 1 00:20:29.047395 env[1493]: time="2025-11-01T00:20:29.046946477Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6f68476947-5gd4l,Uid:97a994ab-2ddd-40e4-9a61-19b37b9bbf5a,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:29.233735 kernel: kauditd_printk_skb: 39 callbacks suppressed Nov 1 00:20:29.233905 kernel: audit: type=1400 audit(1761956429.219:980): avc: denied { write } for pid=3817 comm="tee" name="fd" dev="proc" ino=25305 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.219000 audit[3817]: AVC avc: denied { write } for pid=3817 comm="tee" name="fd" dev="proc" ino=25305 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.219000 audit[3817]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff77f97bf a2=241 a3=1b6 items=1 ppid=3792 pid=3817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.283490 kernel: audit: type=1300 audit(1761956429.219:980): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff77f97bf a2=241 a3=1b6 items=1 ppid=3792 pid=3817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.219000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:20:29.294154 kernel: audit: type=1307 audit(1761956429.219:980): cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:20:29.219000 audit: PATH item=0 name="/dev/fd/63" inode=25962 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.313056 kernel: audit: type=1302 audit(1761956429.219:980): item=0 name="/dev/fd/63" inode=25962 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.219000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.332742 kernel: audit: type=1327 audit(1761956429.219:980): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.339273 kernel: audit: type=1400 audit(1761956429.228:981): avc: denied { write } for pid=3821 comm="tee" name="fd" dev="proc" ino=25312 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.228000 audit[3821]: AVC avc: denied { write } for pid=3821 comm="tee" name="fd" dev="proc" ino=25312 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.228000 audit[3821]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffce46c7d1 a2=241 a3=1b6 items=1 ppid=3768 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.392260 kernel: audit: type=1300 audit(1761956429.228:981): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffce46c7d1 a2=241 a3=1b6 items=1 ppid=3768 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.228000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:20:29.403910 kernel: audit: type=1307 audit(1761956429.228:981): cwd="/etc/service/enabled/cni/log" Nov 1 00:20:29.228000 audit: PATH item=0 name="/dev/fd/63" inode=25309 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.424298 kernel: audit: type=1302 audit(1761956429.228:981): item=0 name="/dev/fd/63" inode=25309 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.228000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.441354 kernel: audit: type=1327 audit(1761956429.228:981): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.269000 audit[3811]: AVC avc: denied { write } for pid=3811 comm="tee" name="fd" dev="proc" ino=25327 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.269000 audit[3811]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff6ba57cf a2=241 a3=1b6 items=1 ppid=3771 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.269000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:20:29.269000 audit: PATH item=0 name="/dev/fd/63" inode=25956 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.269000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.279000 audit[3814]: AVC avc: denied { write } for pid=3814 comm="tee" name="fd" dev="proc" ino=25334 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.279000 audit[3814]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffedf5b7c0 a2=241 a3=1b6 items=1 ppid=3774 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.279000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:20:29.279000 audit: PATH item=0 name="/dev/fd/63" inode=25959 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.279000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.291000 audit[3834]: AVC avc: denied { write } for pid=3834 comm="tee" name="fd" dev="proc" ino=25340 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.291000 audit[3834]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffd8ca7d0 a2=241 a3=1b6 items=1 ppid=3767 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.291000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:20:29.291000 audit: PATH item=0 name="/dev/fd/63" inode=25331 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.291000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.361000 audit[3848]: AVC avc: denied { write } for pid=3848 comm="tee" name="fd" dev="proc" ino=25978 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.361000 audit[3848]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe202d7cf a2=241 a3=1b6 items=1 ppid=3781 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.361000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:20:29.361000 audit: PATH item=0 name="/dev/fd/63" inode=25345 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.361000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.394000 audit[3853]: AVC avc: denied { write } for pid=3853 comm="tee" name="fd" dev="proc" ino=25982 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:29.394000 audit[3853]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffda59f7cf a2=241 a3=1b6 items=1 ppid=3776 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.394000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:20:29.394000 audit: PATH item=0 name="/dev/fd/63" inode=25359 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:29.394000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:29.500012 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:20:29.500147 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali40474e3c387: link becomes ready Nov 1 00:20:29.507143 systemd-networkd[1647]: cali40474e3c387: Link UP Nov 1 00:20:29.507331 systemd-networkd[1647]: cali40474e3c387: Gained carrier Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.109 [INFO][3748] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.126 [INFO][3748] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0 whisker-6f68476947- calico-system 97a994ab-2ddd-40e4-9a61-19b37b9bbf5a 922 0 2025-11-01 00:20:28 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6f68476947 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-c6a118d14a whisker-6f68476947-5gd4l eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali40474e3c387 [] [] }} ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Namespace="calico-system" Pod="whisker-6f68476947-5gd4l" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.126 [INFO][3748] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Namespace="calico-system" Pod="whisker-6f68476947-5gd4l" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.171 [INFO][3784] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" HandleID="k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.171 [INFO][3784] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" HandleID="k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab3a0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-c6a118d14a", "pod":"whisker-6f68476947-5gd4l", "timestamp":"2025-11-01 00:20:29.17133533 +0000 UTC"}, Hostname:"ci-3510.3.8-n-c6a118d14a", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.171 [INFO][3784] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.171 [INFO][3784] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.171 [INFO][3784] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-c6a118d14a' Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.186 [INFO][3784] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.192 [INFO][3784] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.209 [INFO][3784] ipam/ipam.go 511: Trying affinity for 192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.211 [INFO][3784] ipam/ipam.go 158: Attempting to load block cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.213 [INFO][3784] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.213 [INFO][3784] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.3.192/26 handle="k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.250 [INFO][3784] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40 Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.294 [INFO][3784] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.3.192/26 handle="k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.333 [INFO][3784] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.3.193/26] block=192.168.3.192/26 handle="k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.333 [INFO][3784] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.3.193/26] handle="k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.333 [INFO][3784] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:29.535275 env[1493]: 2025-11-01 00:20:29.333 [INFO][3784] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.3.193/26] IPv6=[] ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" HandleID="k8s-pod-network.4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" Nov 1 00:20:29.536044 env[1493]: 2025-11-01 00:20:29.358 [INFO][3748] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Namespace="calico-system" Pod="whisker-6f68476947-5gd4l" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0", GenerateName:"whisker-6f68476947-", Namespace:"calico-system", SelfLink:"", UID:"97a994ab-2ddd-40e4-9a61-19b37b9bbf5a", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6f68476947", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"", Pod:"whisker-6f68476947-5gd4l", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.3.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali40474e3c387", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:29.536044 env[1493]: 2025-11-01 00:20:29.358 [INFO][3748] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.3.193/32] ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Namespace="calico-system" Pod="whisker-6f68476947-5gd4l" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" Nov 1 00:20:29.536044 env[1493]: 2025-11-01 00:20:29.358 [INFO][3748] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali40474e3c387 ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Namespace="calico-system" Pod="whisker-6f68476947-5gd4l" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" Nov 1 00:20:29.536044 env[1493]: 2025-11-01 00:20:29.512 [INFO][3748] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Namespace="calico-system" Pod="whisker-6f68476947-5gd4l" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" Nov 1 00:20:29.536044 env[1493]: 2025-11-01 00:20:29.514 [INFO][3748] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Namespace="calico-system" Pod="whisker-6f68476947-5gd4l" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0", GenerateName:"whisker-6f68476947-", Namespace:"calico-system", SelfLink:"", UID:"97a994ab-2ddd-40e4-9a61-19b37b9bbf5a", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6f68476947", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40", Pod:"whisker-6f68476947-5gd4l", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.3.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali40474e3c387", MAC:"aa:ae:0e:68:af:99", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:29.536044 env[1493]: 2025-11-01 00:20:29.533 [INFO][3748] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40" Namespace="calico-system" Pod="whisker-6f68476947-5gd4l" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--6f68476947--5gd4l-eth0" Nov 1 00:20:29.559494 env[1493]: time="2025-11-01T00:20:29.559397132Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:29.559679 env[1493]: time="2025-11-01T00:20:29.559508132Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:29.559679 env[1493]: time="2025-11-01T00:20:29.559537012Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:29.559924 env[1493]: time="2025-11-01T00:20:29.559846452Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40 pid=3870 runtime=io.containerd.runc.v2 Nov 1 00:20:29.589394 systemd[1]: Started cri-containerd-4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40.scope. Nov 1 00:20:29.607695 systemd[1]: run-containerd-runc-k8s.io-4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40-runc.pXQvzp.mount: Deactivated successfully. Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.655000 audit: BPF prog-id=137 op=LOAD Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646439346435666138353261316465323061663639356136613964 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646439346435666138353261316465323061663639356136613964 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit: BPF prog-id=138 op=LOAD Nov 1 00:20:29.656000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646439346435666138353261316465323061663639356136613964 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit: BPF prog-id=139 op=LOAD Nov 1 00:20:29.656000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646439346435666138353261316465323061663639356136613964 Nov 1 00:20:29.656000 audit: BPF prog-id=139 op=UNLOAD Nov 1 00:20:29.656000 audit: BPF prog-id=138 op=UNLOAD Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.656000 audit: BPF prog-id=140 op=LOAD Nov 1 00:20:29.656000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463646439346435666138353261316465323061663639356136613964 Nov 1 00:20:29.692785 env[1493]: time="2025-11-01T00:20:29.692731747Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6f68476947-5gd4l,Uid:97a994ab-2ddd-40e4-9a61-19b37b9bbf5a,Namespace:calico-system,Attempt:0,} returns sandbox id \"4cdd94d5fa852a1de20af695a6a9d6469a3b49d07eddc728801a0d8dc05b9e40\"" Nov 1 00:20:29.694955 env[1493]: time="2025-11-01T00:20:29.694909267Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.797000 audit: BPF prog-id=141 op=LOAD Nov 1 00:20:29.797000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffda3747c8 a2=98 a3=ffffda3747b8 items=0 ppid=3777 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.797000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:20:29.798000 audit: BPF prog-id=141 op=UNLOAD Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit: BPF prog-id=142 op=LOAD Nov 1 00:20:29.798000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffda374678 a2=74 a3=95 items=0 ppid=3777 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.798000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:20:29.798000 audit: BPF prog-id=142 op=UNLOAD Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit: BPF prog-id=143 op=LOAD Nov 1 00:20:29.798000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffda3746a8 a2=40 a3=ffffda3746d8 items=0 ppid=3777 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.798000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:20:29.798000 audit: BPF prog-id=143 op=UNLOAD Nov 1 00:20:29.798000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.798000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffda3747c0 a2=50 a3=0 items=0 ppid=3777 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.798000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit: BPF prog-id=144 op=LOAD Nov 1 00:20:29.800000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc9b23608 a2=98 a3=ffffc9b235f8 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.800000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.800000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit: BPF prog-id=145 op=LOAD Nov 1 00:20:29.800000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc9b23298 a2=74 a3=95 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.800000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.800000 audit: BPF prog-id=145 op=UNLOAD Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.800000 audit: BPF prog-id=146 op=LOAD Nov 1 00:20:29.800000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc9b232f8 a2=94 a3=2 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.800000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.800000 audit: BPF prog-id=146 op=UNLOAD Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit: BPF prog-id=147 op=LOAD Nov 1 00:20:29.895000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc9b232b8 a2=40 a3=ffffc9b232e8 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.895000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.895000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:20:29.895000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.895000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc9b233d0 a2=50 a3=0 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.895000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b23328 a2=28 a3=ffffc9b23458 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b23358 a2=28 a3=ffffc9b23488 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b23208 a2=28 a3=ffffc9b23338 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b23378 a2=28 a3=ffffc9b234a8 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b23358 a2=28 a3=ffffc9b23488 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b23348 a2=28 a3=ffffc9b23478 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b23378 a2=28 a3=ffffc9b234a8 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b23358 a2=28 a3=ffffc9b23488 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b23378 a2=28 a3=ffffc9b234a8 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b23348 a2=28 a3=ffffc9b23478 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b233c8 a2=28 a3=ffffc9b23508 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc9b23100 a2=50 a3=0 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit: BPF prog-id=148 op=LOAD Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc9b23108 a2=94 a3=5 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc9b23210 a2=50 a3=0 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc9b23358 a2=4 a3=3 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.904000 audit[3931]: AVC avc: denied { confidentiality } for pid=3931 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:29.904000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc9b23338 a2=94 a3=6 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.904000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { confidentiality } for pid=3931 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:29.905000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc9b22b08 a2=94 a3=83 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.905000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.905000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc9b22b08 a2=94 a3=83 items=0 ppid=3777 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.905000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.914000 audit: BPF prog-id=149 op=LOAD Nov 1 00:20:29.914000 audit[3934]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd3888418 a2=98 a3=ffffd3888408 items=0 ppid=3777 pid=3934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.914000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:20:29.915000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit: BPF prog-id=150 op=LOAD Nov 1 00:20:29.915000 audit[3934]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd38882c8 a2=74 a3=95 items=0 ppid=3777 pid=3934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.915000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:20:29.915000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { perfmon } for pid=3934 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit[3934]: AVC avc: denied { bpf } for pid=3934 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:29.915000 audit: BPF prog-id=151 op=LOAD Nov 1 00:20:29.915000 audit[3934]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd38882f8 a2=40 a3=ffffd3888328 items=0 ppid=3777 pid=3934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:29.915000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:20:29.915000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:20:29.927089 env[1493]: time="2025-11-01T00:20:29.926827252Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:29.930479 env[1493]: time="2025-11-01T00:20:29.930304052Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:20:29.930694 kubelet[2483]: E1101 00:20:29.930638 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:20:29.931007 kubelet[2483]: E1101 00:20:29.930705 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:20:29.931050 kubelet[2483]: E1101 00:20:29.930839 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:23ceceeffe7f468b9e31b12311d593ed,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:29.932993 env[1493]: time="2025-11-01T00:20:29.932948173Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:20:30.090255 systemd-networkd[1647]: vxlan.calico: Link UP Nov 1 00:20:30.090262 systemd-networkd[1647]: vxlan.calico: Gained carrier Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit: BPF prog-id=152 op=LOAD Nov 1 00:20:30.116000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd859cee8 a2=98 a3=ffffd859ced8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.116000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.116000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.116000 audit: BPF prog-id=153 op=LOAD Nov 1 00:20:30.116000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd859cbc8 a2=74 a3=95 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.116000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit: BPF prog-id=154 op=LOAD Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd859cc28 a2=94 a3=2 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd859cc58 a2=28 a3=ffffd859cd88 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd859cc88 a2=28 a3=ffffd859cdb8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd859cb38 a2=28 a3=ffffd859cc68 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd859cca8 a2=28 a3=ffffd859cdd8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd859cc88 a2=28 a3=ffffd859cdb8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd859cc78 a2=28 a3=ffffd859cda8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd859cca8 a2=28 a3=ffffd859cdd8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd859cc88 a2=28 a3=ffffd859cdb8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd859cca8 a2=28 a3=ffffd859cdd8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd859cc78 a2=28 a3=ffffd859cda8 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd859ccf8 a2=28 a3=ffffd859ce38 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit: BPF prog-id=155 op=LOAD Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd859cb18 a2=40 a3=ffffd859cb48 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.117000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:20:30.117000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.117000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffd859cb40 a2=50 a3=0 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.117000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffd859cb40 a2=50 a3=0 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.118000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit: BPF prog-id=156 op=LOAD Nov 1 00:20:30.118000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd859c2a8 a2=94 a3=2 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.118000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.118000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { perfmon } for pid=3962 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit[3962]: AVC avc: denied { bpf } for pid=3962 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.118000 audit: BPF prog-id=157 op=LOAD Nov 1 00:20:30.118000 audit[3962]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd859c438 a2=94 a3=30 items=0 ppid=3777 pid=3962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.118000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit: BPF prog-id=158 op=LOAD Nov 1 00:20:30.129000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd5b65ec8 a2=98 a3=ffffd5b65eb8 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.129000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.129000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit: BPF prog-id=159 op=LOAD Nov 1 00:20:30.129000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd5b65b58 a2=74 a3=95 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.129000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.129000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.129000 audit: BPF prog-id=160 op=LOAD Nov 1 00:20:30.129000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd5b65bb8 a2=94 a3=2 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.129000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.129000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:20:30.163920 env[1493]: time="2025-11-01T00:20:30.163671437Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:30.176701 env[1493]: time="2025-11-01T00:20:30.176285319Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:20:30.177607 kubelet[2483]: E1101 00:20:30.176636 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:20:30.177607 kubelet[2483]: E1101 00:20:30.176696 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:20:30.177607 kubelet[2483]: E1101 00:20:30.176816 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:30.178912 kubelet[2483]: E1101 00:20:30.178819 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.237000 audit: BPF prog-id=161 op=LOAD Nov 1 00:20:30.237000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd5b65b78 a2=40 a3=ffffd5b65ba8 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.237000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.238000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:20:30.238000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.238000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd5b65c90 a2=50 a3=0 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.238000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.246000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.246000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd5b65be8 a2=28 a3=ffffd5b65d18 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.246000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.246000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5b65c18 a2=28 a3=ffffd5b65d48 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.246000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.246000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5b65ac8 a2=28 a3=ffffd5b65bf8 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.246000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.246000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd5b65c38 a2=28 a3=ffffd5b65d68 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.246000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.246000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd5b65c18 a2=28 a3=ffffd5b65d48 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.246000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.246000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd5b65c08 a2=28 a3=ffffd5b65d38 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.246000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd5b65c38 a2=28 a3=ffffd5b65d68 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5b65c18 a2=28 a3=ffffd5b65d48 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5b65c38 a2=28 a3=ffffd5b65d68 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5b65c08 a2=28 a3=ffffd5b65d38 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd5b65c88 a2=28 a3=ffffd5b65dc8 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd5b659c0 a2=50 a3=0 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit: BPF prog-id=162 op=LOAD Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd5b659c8 a2=94 a3=5 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd5b65ad0 a2=50 a3=0 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd5b65c18 a2=4 a3=3 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { confidentiality } for pid=3965 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd5b65bf8 a2=94 a3=6 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { confidentiality } for pid=3965 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd5b653c8 a2=94 a3=83 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { perfmon } for pid=3965 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.247000 audit[3965]: AVC avc: denied { confidentiality } for pid=3965 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:30.247000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd5b653c8 a2=94 a3=83 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.247000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.248000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.248000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd5b66e08 a2=10 a3=ffffd5b66ef8 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.248000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.248000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.248000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd5b66cc8 a2=10 a3=ffffd5b66db8 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.248000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.248000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.248000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd5b66c38 a2=10 a3=ffffd5b66db8 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.248000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.248000 audit[3965]: AVC avc: denied { bpf } for pid=3965 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:30.248000 audit[3965]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd5b66c38 a2=10 a3=ffffd5b66db8 items=0 ppid=3777 pid=3965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.248000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:30.258000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:20:30.457584 env[1493]: time="2025-11-01T00:20:30.447528268Z" level=info msg="StopPodSandbox for \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\"" Nov 1 00:20:30.457584 env[1493]: time="2025-11-01T00:20:30.450213468Z" level=info msg="StopPodSandbox for \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\"" Nov 1 00:20:30.457802 kubelet[2483]: I1101 00:20:30.451134 2483 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="8833c03b-ed51-420b-92b4-d19a3af74382" path="/var/lib/kubelet/pods/8833c03b-ed51-420b-92b4-d19a3af74382/volumes" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.537 [INFO][4001] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.537 [INFO][4001] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" iface="eth0" netns="/var/run/netns/cni-7781762e-1bda-5c07-771c-5923bf68b481" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.538 [INFO][4001] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" iface="eth0" netns="/var/run/netns/cni-7781762e-1bda-5c07-771c-5923bf68b481" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.538 [INFO][4001] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" iface="eth0" netns="/var/run/netns/cni-7781762e-1bda-5c07-771c-5923bf68b481" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.538 [INFO][4001] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.538 [INFO][4001] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.586 [INFO][4013] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.587 [INFO][4013] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.587 [INFO][4013] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.599 [WARNING][4013] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.599 [INFO][4013] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.605 [INFO][4013] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:30.609504 env[1493]: 2025-11-01 00:20:30.608 [INFO][4001] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:30.611715 systemd[1]: run-netns-cni\x2d7781762e\x2d1bda\x2d5c07\x2d771c\x2d5923bf68b481.mount: Deactivated successfully. Nov 1 00:20:30.616564 env[1493]: time="2025-11-01T00:20:30.614616966Z" level=info msg="TearDown network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\" successfully" Nov 1 00:20:30.616564 env[1493]: time="2025-11-01T00:20:30.614695486Z" level=info msg="StopPodSandbox for \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\" returns successfully" Nov 1 00:20:30.617098 env[1493]: time="2025-11-01T00:20:30.617063286Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dgmjc,Uid:68b0f8e7-293b-45a6-ad9c-88db70c5f5c2,Namespace:kube-system,Attempt:1,}" Nov 1 00:20:30.633000 audit[4037]: NETFILTER_CFG table=mangle:110 family=2 entries=16 op=nft_register_chain pid=4037 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:30.633000 audit[4037]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffd9c905d0 a2=0 a3=ffff89c9efa8 items=0 ppid=3777 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.633000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:30.644096 kubelet[2483]: E1101 00:20:30.643940 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:20:30.702000 audit[4035]: NETFILTER_CFG table=nat:111 family=2 entries=15 op=nft_register_chain pid=4035 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:30.702000 audit[4035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffffcb67040 a2=0 a3=ffff9dc99fa8 items=0 ppid=3777 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.702000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.560 [INFO][4000] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.560 [INFO][4000] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" iface="eth0" netns="/var/run/netns/cni-1e8073e5-b5f4-4bcc-899e-71c6f0e9aad3" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.561 [INFO][4000] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" iface="eth0" netns="/var/run/netns/cni-1e8073e5-b5f4-4bcc-899e-71c6f0e9aad3" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.563 [INFO][4000] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" iface="eth0" netns="/var/run/netns/cni-1e8073e5-b5f4-4bcc-899e-71c6f0e9aad3" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.563 [INFO][4000] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.563 [INFO][4000] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.688 [INFO][4019] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.688 [INFO][4019] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.688 [INFO][4019] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.717 [WARNING][4019] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.718 [INFO][4019] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.721 [INFO][4019] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:30.727558 env[1493]: 2025-11-01 00:20:30.726 [INFO][4000] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:30.730386 systemd[1]: run-netns-cni\x2d1e8073e5\x2db5f4\x2d4bcc\x2d899e\x2d71c6f0e9aad3.mount: Deactivated successfully. Nov 1 00:20:30.737588 env[1493]: time="2025-11-01T00:20:30.737538179Z" level=info msg="TearDown network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\" successfully" Nov 1 00:20:30.737839 env[1493]: time="2025-11-01T00:20:30.737817339Z" level=info msg="StopPodSandbox for \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\" returns successfully" Nov 1 00:20:30.740073 env[1493]: time="2025-11-01T00:20:30.740033899Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cddcf5574-gh77j,Uid:142cddeb-2de3-4f33-b2e2-51c515867ae1,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:20:30.740000 audit[4057]: NETFILTER_CFG table=filter:112 family=2 entries=20 op=nft_register_rule pid=4057 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:30.740000 audit[4057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffffa4dd7f0 a2=0 a3=1 items=0 ppid=2587 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.740000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:30.746000 audit[4057]: NETFILTER_CFG table=nat:113 family=2 entries=14 op=nft_register_rule pid=4057 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:30.746000 audit[4057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffffa4dd7f0 a2=0 a3=1 items=0 ppid=2587 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.746000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:30.816000 audit[4034]: NETFILTER_CFG table=raw:114 family=2 entries=21 op=nft_register_chain pid=4034 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:30.816000 audit[4034]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffecdeaf20 a2=0 a3=ffff84981fa8 items=0 ppid=3777 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.816000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:30.900860 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4cb64883bf7: link becomes ready Nov 1 00:20:30.901000 audit[4038]: NETFILTER_CFG table=filter:115 family=2 entries=94 op=nft_register_chain pid=4038 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:30.901000 audit[4038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=fffff184ca80 a2=0 a3=ffff923b5fa8 items=0 ppid=3777 pid=4038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.901000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:30.902778 systemd-networkd[1647]: cali4cb64883bf7: Link UP Nov 1 00:20:30.903658 systemd-networkd[1647]: cali4cb64883bf7: Gained carrier Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.786 [INFO][4050] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0 coredns-674b8bbfcf- kube-system 68b0f8e7-293b-45a6-ad9c-88db70c5f5c2 938 0 2025-11-01 00:19:43 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-c6a118d14a coredns-674b8bbfcf-dgmjc eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4cb64883bf7 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgmjc" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.786 [INFO][4050] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgmjc" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.816 [INFO][4063] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" HandleID="k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.817 [INFO][4063] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" HandleID="k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cafe0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-c6a118d14a", "pod":"coredns-674b8bbfcf-dgmjc", "timestamp":"2025-11-01 00:20:30.816920227 +0000 UTC"}, Hostname:"ci-3510.3.8-n-c6a118d14a", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.817 [INFO][4063] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.817 [INFO][4063] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.817 [INFO][4063] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-c6a118d14a' Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.828 [INFO][4063] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.833 [INFO][4063] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.845 [INFO][4063] ipam/ipam.go 511: Trying affinity for 192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.852 [INFO][4063] ipam/ipam.go 158: Attempting to load block cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.858 [INFO][4063] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.858 [INFO][4063] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.3.192/26 handle="k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.861 [INFO][4063] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.869 [INFO][4063] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.3.192/26 handle="k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.886 [INFO][4063] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.3.194/26] block=192.168.3.192/26 handle="k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.886 [INFO][4063] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.3.194/26] handle="k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.886 [INFO][4063] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:30.933644 env[1493]: 2025-11-01 00:20:30.886 [INFO][4063] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.3.194/26] IPv6=[] ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" HandleID="k8s-pod-network.a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.934246 env[1493]: 2025-11-01 00:20:30.888 [INFO][4050] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgmjc" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"68b0f8e7-293b-45a6-ad9c-88db70c5f5c2", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"", Pod:"coredns-674b8bbfcf-dgmjc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.3.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4cb64883bf7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:30.934246 env[1493]: 2025-11-01 00:20:30.888 [INFO][4050] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.3.194/32] ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgmjc" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.934246 env[1493]: 2025-11-01 00:20:30.888 [INFO][4050] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4cb64883bf7 ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgmjc" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.934246 env[1493]: 2025-11-01 00:20:30.904 [INFO][4050] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgmjc" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.934246 env[1493]: 2025-11-01 00:20:30.916 [INFO][4050] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgmjc" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"68b0f8e7-293b-45a6-ad9c-88db70c5f5c2", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a", Pod:"coredns-674b8bbfcf-dgmjc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.3.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4cb64883bf7", MAC:"46:76:63:e9:db:5e", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:30.934246 env[1493]: 2025-11-01 00:20:30.932 [INFO][4050] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgmjc" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:30.946249 env[1493]: time="2025-11-01T00:20:30.946168561Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:30.946449 env[1493]: time="2025-11-01T00:20:30.946425001Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:30.946555 env[1493]: time="2025-11-01T00:20:30.946533561Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:30.946818 env[1493]: time="2025-11-01T00:20:30.946788881Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a pid=4105 runtime=io.containerd.runc.v2 Nov 1 00:20:30.970388 systemd[1]: Started cri-containerd-a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a.scope. Nov 1 00:20:30.971000 audit[4127]: NETFILTER_CFG table=filter:116 family=2 entries=42 op=nft_register_chain pid=4127 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:30.971000 audit[4127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22552 a0=3 a1=ffffdedc5950 a2=0 a3=ffff93d1cfa8 items=0 ppid=3777 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:30.971000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:30.995767 systemd-networkd[1647]: cali40474e3c387: Gained IPv6LL Nov 1 00:20:31.003258 systemd-networkd[1647]: cali8cb2b6985a0: Link UP Nov 1 00:20:31.015026 systemd-networkd[1647]: cali8cb2b6985a0: Gained carrier Nov 1 00:20:31.015738 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8cb2b6985a0: link becomes ready Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.017000 audit: BPF prog-id=163 op=LOAD Nov 1 00:20:31.020000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.020000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4105 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135376131353738656439303965306165646364383462313032643330 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4105 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135376131353738656439303965306165646364383462313032643330 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit: BPF prog-id=164 op=LOAD Nov 1 00:20:31.021000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4105 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135376131353738656439303965306165646364383462313032643330 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit: BPF prog-id=165 op=LOAD Nov 1 00:20:31.021000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4105 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135376131353738656439303965306165646364383462313032643330 Nov 1 00:20:31.021000 audit: BPF prog-id=165 op=UNLOAD Nov 1 00:20:31.021000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.021000 audit: BPF prog-id=166 op=LOAD Nov 1 00:20:31.021000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4105 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135376131353738656439303965306165646364383462313032643330 Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.867 [INFO][4070] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0 calico-apiserver-5cddcf5574- calico-apiserver 142cddeb-2de3-4f33-b2e2-51c515867ae1 939 0 2025-11-01 00:19:55 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5cddcf5574 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-c6a118d14a calico-apiserver-5cddcf5574-gh77j eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8cb2b6985a0 [] [] }} ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-gh77j" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.867 [INFO][4070] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-gh77j" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.906 [INFO][4086] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" HandleID="k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.906 [INFO][4086] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" HandleID="k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3010), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-c6a118d14a", "pod":"calico-apiserver-5cddcf5574-gh77j", "timestamp":"2025-11-01 00:20:30.906541277 +0000 UTC"}, Hostname:"ci-3510.3.8-n-c6a118d14a", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.906 [INFO][4086] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.906 [INFO][4086] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.907 [INFO][4086] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-c6a118d14a' Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.929 [INFO][4086] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.950 [INFO][4086] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.964 [INFO][4086] ipam/ipam.go 511: Trying affinity for 192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.967 [INFO][4086] ipam/ipam.go 158: Attempting to load block cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.976 [INFO][4086] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.976 [INFO][4086] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.3.192/26 handle="k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.978 [INFO][4086] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2 Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.987 [INFO][4086] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.3.192/26 handle="k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.999 [INFO][4086] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.3.195/26] block=192.168.3.192/26 handle="k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.999 [INFO][4086] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.3.195/26] handle="k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.999 [INFO][4086] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:31.043279 env[1493]: 2025-11-01 00:20:30.999 [INFO][4086] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.3.195/26] IPv6=[] ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" HandleID="k8s-pod-network.85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:31.044045 env[1493]: 2025-11-01 00:20:31.001 [INFO][4070] cni-plugin/k8s.go 418: Populated endpoint ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-gh77j" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0", GenerateName:"calico-apiserver-5cddcf5574-", Namespace:"calico-apiserver", SelfLink:"", UID:"142cddeb-2de3-4f33-b2e2-51c515867ae1", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cddcf5574", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"", Pod:"calico-apiserver-5cddcf5574-gh77j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.3.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8cb2b6985a0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:31.044045 env[1493]: 2025-11-01 00:20:31.001 [INFO][4070] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.3.195/32] ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-gh77j" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:31.044045 env[1493]: 2025-11-01 00:20:31.001 [INFO][4070] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8cb2b6985a0 ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-gh77j" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:31.044045 env[1493]: 2025-11-01 00:20:31.016 [INFO][4070] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-gh77j" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:31.044045 env[1493]: 2025-11-01 00:20:31.016 [INFO][4070] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-gh77j" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0", GenerateName:"calico-apiserver-5cddcf5574-", Namespace:"calico-apiserver", SelfLink:"", UID:"142cddeb-2de3-4f33-b2e2-51c515867ae1", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cddcf5574", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2", Pod:"calico-apiserver-5cddcf5574-gh77j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.3.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8cb2b6985a0", MAC:"96:5f:46:4e:17:48", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:31.044045 env[1493]: 2025-11-01 00:20:31.039 [INFO][4070] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-gh77j" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:31.057750 env[1493]: time="2025-11-01T00:20:31.057698093Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dgmjc,Uid:68b0f8e7-293b-45a6-ad9c-88db70c5f5c2,Namespace:kube-system,Attempt:1,} returns sandbox id \"a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a\"" Nov 1 00:20:31.073958 env[1493]: time="2025-11-01T00:20:31.073228694Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:31.073958 env[1493]: time="2025-11-01T00:20:31.073341174Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:31.073958 env[1493]: time="2025-11-01T00:20:31.073369014Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:31.073958 env[1493]: time="2025-11-01T00:20:31.073551654Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2 pid=4158 runtime=io.containerd.runc.v2 Nov 1 00:20:31.076095 env[1493]: time="2025-11-01T00:20:31.076056975Z" level=info msg="CreateContainer within sandbox \"a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:20:31.100780 systemd[1]: Started cri-containerd-85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2.scope. Nov 1 00:20:31.128154 env[1493]: time="2025-11-01T00:20:31.128100420Z" level=info msg="CreateContainer within sandbox \"a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"31b97856c6d1656b767963f141ba76976abb901062328edefd6279c4ede15671\"" Nov 1 00:20:31.131410 env[1493]: time="2025-11-01T00:20:31.131342981Z" level=info msg="StartContainer for \"31b97856c6d1656b767963f141ba76976abb901062328edefd6279c4ede15671\"" Nov 1 00:20:31.155042 systemd[1]: Started cri-containerd-31b97856c6d1656b767963f141ba76976abb901062328edefd6279c4ede15671.scope. Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.160000 audit: BPF prog-id=167 op=LOAD Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4158 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303833643334346131636334303963356361643363623763643066 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4158 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303833643334346131636334303963356361643363623763643066 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit: BPF prog-id=168 op=LOAD Nov 1 00:20:31.161000 audit[4169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4158 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303833643334346131636334303963356361643363623763643066 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit: BPF prog-id=169 op=LOAD Nov 1 00:20:31.161000 audit[4169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4158 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303833643334346131636334303963356361643363623763643066 Nov 1 00:20:31.161000 audit: BPF prog-id=169 op=UNLOAD Nov 1 00:20:31.161000 audit: BPF prog-id=168 op=UNLOAD Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.161000 audit: BPF prog-id=170 op=LOAD Nov 1 00:20:31.161000 audit[4169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4158 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303833643334346131636334303963356361643363623763643066 Nov 1 00:20:31.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.201000 audit: BPF prog-id=171 op=LOAD Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4105 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331623937383536633664313635366237363739363366313431626137 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4105 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331623937383536633664313635366237363739363366313431626137 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit: BPF prog-id=172 op=LOAD Nov 1 00:20:31.202000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4105 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331623937383536633664313635366237363739363366313431626137 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit: BPF prog-id=173 op=LOAD Nov 1 00:20:31.202000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4105 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331623937383536633664313635366237363739363366313431626137 Nov 1 00:20:31.202000 audit: BPF prog-id=173 op=UNLOAD Nov 1 00:20:31.202000 audit: BPF prog-id=172 op=UNLOAD Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.202000 audit: BPF prog-id=174 op=LOAD Nov 1 00:20:31.202000 audit[4195]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4105 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331623937383536633664313635366237363739363366313431626137 Nov 1 00:20:31.277826 env[1493]: time="2025-11-01T00:20:31.277726956Z" level=info msg="StartContainer for \"31b97856c6d1656b767963f141ba76976abb901062328edefd6279c4ede15671\" returns successfully" Nov 1 00:20:31.287000 audit[4205]: AVC avc: denied { getattr } for pid=4205 comm="coredns" path="cgroup:[4026532655]" dev="nsfs" ino=4026532655 scontext=system_u:system_r:svirt_lxc_net_t:s0:c89,c840 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:20:31.287000 audit[4205]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056168 a2=400063e038 a3=0 items=0 ppid=4105 pid=4205 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c89,c840 key=(null) Nov 1 00:20:31.287000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:20:31.300000 audit[4206]: NETFILTER_CFG table=filter:117 family=2 entries=60 op=nft_register_chain pid=4206 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:31.300000 audit[4206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=32248 a0=3 a1=ffffccbc2cf0 a2=0 a3=ffff7f626fa8 items=0 ppid=3777 pid=4206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.300000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:31.345211 env[1493]: time="2025-11-01T00:20:31.345170323Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cddcf5574-gh77j,Uid:142cddeb-2de3-4f33-b2e2-51c515867ae1,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2\"" Nov 1 00:20:31.347413 env[1493]: time="2025-11-01T00:20:31.347366403Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:31.446419 env[1493]: time="2025-11-01T00:20:31.446369054Z" level=info msg="StopPodSandbox for \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\"" Nov 1 00:20:31.446797 env[1493]: time="2025-11-01T00:20:31.446754614Z" level=info msg="StopPodSandbox for \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\"" Nov 1 00:20:31.579342 env[1493]: time="2025-11-01T00:20:31.579197748Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:31.584211 env[1493]: time="2025-11-01T00:20:31.584134108Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:31.584707 kubelet[2483]: E1101 00:20:31.584489 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:31.584707 kubelet[2483]: E1101 00:20:31.584533 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:31.586082 kubelet[2483]: E1101 00:20:31.586005 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j52db,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-gh77j_calico-apiserver(142cddeb-2de3-4f33-b2e2-51c515867ae1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:31.587606 kubelet[2483]: E1101 00:20:31.587544 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.526 [INFO][4251] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.539 [INFO][4251] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" iface="eth0" netns="/var/run/netns/cni-86eca243-6fad-4fff-ddea-c863dc076b78" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.540 [INFO][4251] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" iface="eth0" netns="/var/run/netns/cni-86eca243-6fad-4fff-ddea-c863dc076b78" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.540 [INFO][4251] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" iface="eth0" netns="/var/run/netns/cni-86eca243-6fad-4fff-ddea-c863dc076b78" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.540 [INFO][4251] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.540 [INFO][4251] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.572 [INFO][4265] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.572 [INFO][4265] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.572 [INFO][4265] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.582 [WARNING][4265] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.582 [INFO][4265] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.588 [INFO][4265] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:31.592799 env[1493]: 2025-11-01 00:20:31.590 [INFO][4251] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:31.593233 env[1493]: time="2025-11-01T00:20:31.592788429Z" level=info msg="TearDown network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\" successfully" Nov 1 00:20:31.593233 env[1493]: time="2025-11-01T00:20:31.592831869Z" level=info msg="StopPodSandbox for \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\" returns successfully" Nov 1 00:20:31.593901 env[1493]: time="2025-11-01T00:20:31.593844829Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-hc9wn,Uid:cd0e393b-2cb9-479a-a6d3-1d4da4894369,Namespace:calico-system,Attempt:1,}" Nov 1 00:20:31.614091 systemd[1]: run-netns-cni\x2d86eca243\x2d6fad\x2d4fff\x2dddea\x2dc863dc076b78.mount: Deactivated successfully. Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.553 [INFO][4252] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.553 [INFO][4252] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" iface="eth0" netns="/var/run/netns/cni-9fb94456-a2bf-19ca-6839-298fdd76d66a" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.553 [INFO][4252] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" iface="eth0" netns="/var/run/netns/cni-9fb94456-a2bf-19ca-6839-298fdd76d66a" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.553 [INFO][4252] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" iface="eth0" netns="/var/run/netns/cni-9fb94456-a2bf-19ca-6839-298fdd76d66a" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.553 [INFO][4252] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.553 [INFO][4252] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.598 [INFO][4270] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.598 [INFO][4270] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.598 [INFO][4270] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.616 [WARNING][4270] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.616 [INFO][4270] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.618 [INFO][4270] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:31.623057 env[1493]: 2025-11-01 00:20:31.620 [INFO][4252] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:31.625776 env[1493]: time="2025-11-01T00:20:31.625727633Z" level=info msg="TearDown network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\" successfully" Nov 1 00:20:31.625911 env[1493]: time="2025-11-01T00:20:31.625891753Z" level=info msg="StopPodSandbox for \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\" returns successfully" Nov 1 00:20:31.628004 env[1493]: time="2025-11-01T00:20:31.626714633Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xfbtb,Uid:9082d4e0-79be-4894-8d55-8fd3da886cb9,Namespace:kube-system,Attempt:1,}" Nov 1 00:20:31.627103 systemd[1]: run-netns-cni\x2d9fb94456\x2da2bf\x2d19ca\x2d6839\x2d298fdd76d66a.mount: Deactivated successfully. Nov 1 00:20:31.663457 kubelet[2483]: E1101 00:20:31.663406 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:20:31.664351 kubelet[2483]: E1101 00:20:31.664300 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:20:31.680688 kubelet[2483]: I1101 00:20:31.680603 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-dgmjc" podStartSLOduration=48.680586079 podStartE2EDuration="48.680586079s" podCreationTimestamp="2025-11-01 00:19:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:20:31.679457718 +0000 UTC m=+55.363504863" watchObservedRunningTime="2025-11-01 00:20:31.680586079 +0000 UTC m=+55.364633184" Nov 1 00:20:31.699761 systemd-networkd[1647]: vxlan.calico: Gained IPv6LL Nov 1 00:20:31.717000 audit[4296]: NETFILTER_CFG table=filter:118 family=2 entries=20 op=nft_register_rule pid=4296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:31.717000 audit[4296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd1b1ae10 a2=0 a3=1 items=0 ppid=2587 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.717000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:31.725000 audit[4296]: NETFILTER_CFG table=nat:119 family=2 entries=14 op=nft_register_rule pid=4296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:31.725000 audit[4296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffd1b1ae10 a2=0 a3=1 items=0 ppid=2587 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.725000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:31.762000 audit[4303]: NETFILTER_CFG table=filter:120 family=2 entries=17 op=nft_register_rule pid=4303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:31.762000 audit[4303]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcd91b720 a2=0 a3=1 items=0 ppid=2587 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.762000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:31.768000 audit[4303]: NETFILTER_CFG table=nat:121 family=2 entries=35 op=nft_register_chain pid=4303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:31.768000 audit[4303]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffcd91b720 a2=0 a3=1 items=0 ppid=2587 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.768000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:31.893165 systemd-networkd[1647]: cali61cece16cb0: Link UP Nov 1 00:20:31.907736 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:20:31.907873 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali61cece16cb0: link becomes ready Nov 1 00:20:31.908312 systemd-networkd[1647]: cali61cece16cb0: Gained carrier Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.773 [INFO][4279] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0 goldmane-666569f655- calico-system cd0e393b-2cb9-479a-a6d3-1d4da4894369 963 0 2025-11-01 00:20:00 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-c6a118d14a goldmane-666569f655-hc9wn eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali61cece16cb0 [] [] }} ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Namespace="calico-system" Pod="goldmane-666569f655-hc9wn" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.773 [INFO][4279] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Namespace="calico-system" Pod="goldmane-666569f655-hc9wn" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.822 [INFO][4307] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" HandleID="k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.822 [INFO][4307] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" HandleID="k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cafe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-c6a118d14a", "pod":"goldmane-666569f655-hc9wn", "timestamp":"2025-11-01 00:20:31.822462693 +0000 UTC"}, Hostname:"ci-3510.3.8-n-c6a118d14a", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.822 [INFO][4307] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.822 [INFO][4307] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.822 [INFO][4307] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-c6a118d14a' Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.837 [INFO][4307] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.847 [INFO][4307] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.853 [INFO][4307] ipam/ipam.go 511: Trying affinity for 192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.857 [INFO][4307] ipam/ipam.go 158: Attempting to load block cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.860 [INFO][4307] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.860 [INFO][4307] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.3.192/26 handle="k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.862 [INFO][4307] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0 Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.870 [INFO][4307] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.3.192/26 handle="k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.877 [INFO][4307] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.3.196/26] block=192.168.3.192/26 handle="k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.877 [INFO][4307] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.3.196/26] handle="k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.877 [INFO][4307] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:31.930745 env[1493]: 2025-11-01 00:20:31.877 [INFO][4307] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.3.196/26] IPv6=[] ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" HandleID="k8s-pod-network.26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.931487 env[1493]: 2025-11-01 00:20:31.879 [INFO][4279] cni-plugin/k8s.go 418: Populated endpoint ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Namespace="calico-system" Pod="goldmane-666569f655-hc9wn" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"cd0e393b-2cb9-479a-a6d3-1d4da4894369", ResourceVersion:"963", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"", Pod:"goldmane-666569f655-hc9wn", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.3.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali61cece16cb0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:31.931487 env[1493]: 2025-11-01 00:20:31.880 [INFO][4279] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.3.196/32] ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Namespace="calico-system" Pod="goldmane-666569f655-hc9wn" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.931487 env[1493]: 2025-11-01 00:20:31.880 [INFO][4279] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali61cece16cb0 ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Namespace="calico-system" Pod="goldmane-666569f655-hc9wn" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.931487 env[1493]: 2025-11-01 00:20:31.909 [INFO][4279] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Namespace="calico-system" Pod="goldmane-666569f655-hc9wn" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.931487 env[1493]: 2025-11-01 00:20:31.909 [INFO][4279] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Namespace="calico-system" Pod="goldmane-666569f655-hc9wn" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"cd0e393b-2cb9-479a-a6d3-1d4da4894369", ResourceVersion:"963", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0", Pod:"goldmane-666569f655-hc9wn", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.3.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali61cece16cb0", MAC:"4e:69:17:17:03:e1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:31.931487 env[1493]: 2025-11-01 00:20:31.928 [INFO][4279] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0" Namespace="calico-system" Pod="goldmane-666569f655-hc9wn" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:31.946690 env[1493]: time="2025-11-01T00:20:31.945911307Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:31.946690 env[1493]: time="2025-11-01T00:20:31.945959787Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:31.946690 env[1493]: time="2025-11-01T00:20:31.945970227Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:31.946690 env[1493]: time="2025-11-01T00:20:31.946094067Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0 pid=4337 runtime=io.containerd.runc.v2 Nov 1 00:20:31.961572 systemd[1]: Started cri-containerd-26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0.scope. Nov 1 00:20:31.959000 audit[4357]: NETFILTER_CFG table=filter:122 family=2 entries=48 op=nft_register_chain pid=4357 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:31.959000 audit[4357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26352 a0=3 a1=ffffc9542bb0 a2=0 a3=ffff8b333fa8 items=0 ppid=3777 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.959000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.985000 audit: BPF prog-id=175 op=LOAD Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4337 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236653061643234353464333163346162653731373839623766636531 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4337 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236653061643234353464333163346162653731373839623766636531 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit: BPF prog-id=176 op=LOAD Nov 1 00:20:31.986000 audit[4345]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4337 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236653061643234353464333163346162653731373839623766636531 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.986000 audit: BPF prog-id=177 op=LOAD Nov 1 00:20:31.986000 audit[4345]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4337 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236653061643234353464333163346162653731373839623766636531 Nov 1 00:20:31.987000 audit: BPF prog-id=177 op=UNLOAD Nov 1 00:20:31.987000 audit: BPF prog-id=176 op=UNLOAD Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:31.987000 audit: BPF prog-id=178 op=LOAD Nov 1 00:20:31.987000 audit[4345]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4337 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:31.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236653061643234353464333163346162653731373839623766636531 Nov 1 00:20:32.015515 systemd-networkd[1647]: cali246c0364256: Link UP Nov 1 00:20:32.024339 systemd-networkd[1647]: cali246c0364256: Gained carrier Nov 1 00:20:32.024740 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali246c0364256: link becomes ready Nov 1 00:20:32.026530 env[1493]: time="2025-11-01T00:20:32.026432155Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-hc9wn,Uid:cd0e393b-2cb9-479a-a6d3-1d4da4894369,Namespace:calico-system,Attempt:1,} returns sandbox id \"26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0\"" Nov 1 00:20:32.029067 env[1493]: time="2025-11-01T00:20:32.028472915Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.816 [INFO][4291] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0 coredns-674b8bbfcf- kube-system 9082d4e0-79be-4894-8d55-8fd3da886cb9 964 0 2025-11-01 00:19:43 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-c6a118d14a coredns-674b8bbfcf-xfbtb eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali246c0364256 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Namespace="kube-system" Pod="coredns-674b8bbfcf-xfbtb" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.817 [INFO][4291] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Namespace="kube-system" Pod="coredns-674b8bbfcf-xfbtb" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.855 [INFO][4314] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" HandleID="k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.856 [INFO][4314] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" HandleID="k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cafe0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-c6a118d14a", "pod":"coredns-674b8bbfcf-xfbtb", "timestamp":"2025-11-01 00:20:31.855984497 +0000 UTC"}, Hostname:"ci-3510.3.8-n-c6a118d14a", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.856 [INFO][4314] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.877 [INFO][4314] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.877 [INFO][4314] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-c6a118d14a' Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.937 [INFO][4314] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.952 [INFO][4314] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.957 [INFO][4314] ipam/ipam.go 511: Trying affinity for 192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.964 [INFO][4314] ipam/ipam.go 158: Attempting to load block cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.968 [INFO][4314] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.968 [INFO][4314] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.3.192/26 handle="k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.972 [INFO][4314] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51 Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.982 [INFO][4314] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.3.192/26 handle="k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.993 [INFO][4314] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.3.197/26] block=192.168.3.192/26 handle="k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.993 [INFO][4314] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.3.197/26] handle="k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.993 [INFO][4314] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:32.051896 env[1493]: 2025-11-01 00:20:31.993 [INFO][4314] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.3.197/26] IPv6=[] ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" HandleID="k8s-pod-network.70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:32.052521 env[1493]: 2025-11-01 00:20:31.997 [INFO][4291] cni-plugin/k8s.go 418: Populated endpoint ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Namespace="kube-system" Pod="coredns-674b8bbfcf-xfbtb" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9082d4e0-79be-4894-8d55-8fd3da886cb9", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"", Pod:"coredns-674b8bbfcf-xfbtb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.3.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali246c0364256", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:32.052521 env[1493]: 2025-11-01 00:20:31.997 [INFO][4291] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.3.197/32] ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Namespace="kube-system" Pod="coredns-674b8bbfcf-xfbtb" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:32.052521 env[1493]: 2025-11-01 00:20:31.997 [INFO][4291] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali246c0364256 ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Namespace="kube-system" Pod="coredns-674b8bbfcf-xfbtb" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:32.052521 env[1493]: 2025-11-01 00:20:32.029 [INFO][4291] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Namespace="kube-system" Pod="coredns-674b8bbfcf-xfbtb" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:32.052521 env[1493]: 2025-11-01 00:20:32.030 [INFO][4291] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Namespace="kube-system" Pod="coredns-674b8bbfcf-xfbtb" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9082d4e0-79be-4894-8d55-8fd3da886cb9", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51", Pod:"coredns-674b8bbfcf-xfbtb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.3.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali246c0364256", MAC:"ca:b5:af:10:c9:2a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:32.052521 env[1493]: 2025-11-01 00:20:32.046 [INFO][4291] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51" Namespace="kube-system" Pod="coredns-674b8bbfcf-xfbtb" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:32.066000 audit[4383]: NETFILTER_CFG table=filter:123 family=2 entries=40 op=nft_register_chain pid=4383 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:32.066000 audit[4383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20328 a0=3 a1=ffffc3588210 a2=0 a3=ffffa5340fa8 items=0 ppid=3777 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.066000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:32.079713 env[1493]: time="2025-11-01T00:20:32.079344120Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:32.079713 env[1493]: time="2025-11-01T00:20:32.079390240Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:32.079713 env[1493]: time="2025-11-01T00:20:32.079401600Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:32.079713 env[1493]: time="2025-11-01T00:20:32.079518921Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51 pid=4390 runtime=io.containerd.runc.v2 Nov 1 00:20:32.084969 systemd-networkd[1647]: cali4cb64883bf7: Gained IPv6LL Nov 1 00:20:32.113453 systemd[1]: Started cri-containerd-70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51.scope. Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.137000 audit: BPF prog-id=179 op=LOAD Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4390 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730343635643763656565356664656436633833366465616662366634 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4390 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730343635643763656565356664656436633833366465616662366634 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.138000 audit: BPF prog-id=180 op=LOAD Nov 1 00:20:32.138000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4390 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730343635643763656565356664656436633833366465616662366634 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.139000 audit: BPF prog-id=181 op=LOAD Nov 1 00:20:32.139000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4390 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730343635643763656565356664656436633833366465616662366634 Nov 1 00:20:32.140000 audit: BPF prog-id=181 op=UNLOAD Nov 1 00:20:32.140000 audit: BPF prog-id=180 op=UNLOAD Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.140000 audit: BPF prog-id=182 op=LOAD Nov 1 00:20:32.140000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4390 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730343635643763656565356664656436633833366465616662366634 Nov 1 00:20:32.171995 env[1493]: time="2025-11-01T00:20:32.171951930Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xfbtb,Uid:9082d4e0-79be-4894-8d55-8fd3da886cb9,Namespace:kube-system,Attempt:1,} returns sandbox id \"70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51\"" Nov 1 00:20:32.228254 env[1493]: time="2025-11-01T00:20:32.228205496Z" level=info msg="CreateContainer within sandbox \"70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:20:32.259947 env[1493]: time="2025-11-01T00:20:32.259898379Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:32.270234 env[1493]: time="2025-11-01T00:20:32.270144980Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:20:32.270524 kubelet[2483]: E1101 00:20:32.270467 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:20:32.270615 kubelet[2483]: E1101 00:20:32.270532 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:20:32.270768 kubelet[2483]: E1101 00:20:32.270709 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k7frb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hc9wn_calico-system(cd0e393b-2cb9-479a-a6d3-1d4da4894369): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:32.272167 kubelet[2483]: E1101 00:20:32.272112 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:20:32.283799 env[1493]: time="2025-11-01T00:20:32.283743262Z" level=info msg="CreateContainer within sandbox \"70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f6f23d8a9b82adde11a55ee6a827096c46bff0106e38ec08bb9f6734874169c2\"" Nov 1 00:20:32.285096 env[1493]: time="2025-11-01T00:20:32.285056862Z" level=info msg="StartContainer for \"f6f23d8a9b82adde11a55ee6a827096c46bff0106e38ec08bb9f6734874169c2\"" Nov 1 00:20:32.300833 systemd[1]: Started cri-containerd-f6f23d8a9b82adde11a55ee6a827096c46bff0106e38ec08bb9f6734874169c2.scope. Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.320000 audit: BPF prog-id=183 op=LOAD Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4390 pid=4432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636663233643861396238326164646531316135356565366138323730 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4390 pid=4432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636663233643861396238326164646531316135356565366138323730 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit: BPF prog-id=184 op=LOAD Nov 1 00:20:32.321000 audit[4432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4390 pid=4432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636663233643861396238326164646531316135356565366138323730 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit: BPF prog-id=185 op=LOAD Nov 1 00:20:32.321000 audit[4432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4390 pid=4432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636663233643861396238326164646531316135356565366138323730 Nov 1 00:20:32.321000 audit: BPF prog-id=185 op=UNLOAD Nov 1 00:20:32.321000 audit: BPF prog-id=184 op=UNLOAD Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { perfmon } for pid=4432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit[4432]: AVC avc: denied { bpf } for pid=4432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:32.321000 audit: BPF prog-id=186 op=LOAD Nov 1 00:20:32.321000 audit[4432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4390 pid=4432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636663233643861396238326164646531316135356565366138323730 Nov 1 00:20:32.341960 env[1493]: time="2025-11-01T00:20:32.341897828Z" level=info msg="StartContainer for \"f6f23d8a9b82adde11a55ee6a827096c46bff0106e38ec08bb9f6734874169c2\" returns successfully" Nov 1 00:20:32.347000 audit[4443]: AVC avc: denied { getattr } for pid=4443 comm="coredns" path="cgroup:[4026532670]" dev="nsfs" ino=4026532670 scontext=system_u:system_r:svirt_lxc_net_t:s0:c325,c973 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:20:32.347000 audit[4443]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056810 a2=400014c578 a3=0 items=0 ppid=4390 pid=4443 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c325,c973 key=(null) Nov 1 00:20:32.347000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:20:32.681174 kubelet[2483]: E1101 00:20:32.681119 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:20:32.683769 kubelet[2483]: E1101 00:20:32.683728 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:20:32.711493 kubelet[2483]: I1101 00:20:32.711408 2483 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-xfbtb" podStartSLOduration=49.711389826 podStartE2EDuration="49.711389826s" podCreationTimestamp="2025-11-01 00:19:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:20:32.688161224 +0000 UTC m=+56.372208329" watchObservedRunningTime="2025-11-01 00:20:32.711389826 +0000 UTC m=+56.395436931" Nov 1 00:20:32.762000 audit[4463]: NETFILTER_CFG table=filter:124 family=2 entries=14 op=nft_register_rule pid=4463 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:32.762000 audit[4463]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe5ef7a50 a2=0 a3=1 items=0 ppid=2587 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.762000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:32.776000 audit[4463]: NETFILTER_CFG table=nat:125 family=2 entries=56 op=nft_register_chain pid=4463 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:32.776000 audit[4463]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffe5ef7a50 a2=0 a3=1 items=0 ppid=2587 pid=4463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:32.776000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:32.915810 systemd-networkd[1647]: cali8cb2b6985a0: Gained IPv6LL Nov 1 00:20:33.102000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:33.102000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002add110 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:33.102000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:33.103000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:33.103000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40018dcc20 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:33.103000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:33.446053 env[1493]: time="2025-11-01T00:20:33.445936422Z" level=info msg="StopPodSandbox for \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\"" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.495 [INFO][4474] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.495 [INFO][4474] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" iface="eth0" netns="/var/run/netns/cni-eeac15a8-f053-324e-6f26-1a316a75b9ea" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.496 [INFO][4474] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" iface="eth0" netns="/var/run/netns/cni-eeac15a8-f053-324e-6f26-1a316a75b9ea" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.496 [INFO][4474] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" iface="eth0" netns="/var/run/netns/cni-eeac15a8-f053-324e-6f26-1a316a75b9ea" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.496 [INFO][4474] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.496 [INFO][4474] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.522 [INFO][4482] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.522 [INFO][4482] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.522 [INFO][4482] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.533 [WARNING][4482] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.533 [INFO][4482] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.536 [INFO][4482] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:33.540407 env[1493]: 2025-11-01 00:20:33.538 [INFO][4474] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:33.542000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:33.542000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4008e81020 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:20:33.542000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:33.542000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:33.542000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4008c1e7e0 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:20:33.542000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:33.542000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:33.542000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4008c1e870 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:20:33.542000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:33.549672 env[1493]: time="2025-11-01T00:20:33.543243152Z" level=info msg="TearDown network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\" successfully" Nov 1 00:20:33.549672 env[1493]: time="2025-11-01T00:20:33.543288032Z" level=info msg="StopPodSandbox for \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\" returns successfully" Nov 1 00:20:33.549672 env[1493]: time="2025-11-01T00:20:33.546006512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9mw49,Uid:d1bae2b3-184b-4fab-8bf3-245332cdbb4f,Namespace:calico-system,Attempt:1,}" Nov 1 00:20:33.543109 systemd[1]: run-netns-cni\x2deeac15a8\x2df053\x2d324e\x2d6f26\x2d1a316a75b9ea.mount: Deactivated successfully. Nov 1 00:20:33.555000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:33.555000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4008d9b0e0 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:20:33.555000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:33.620000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:33.620000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4008e81fe0 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:20:33.620000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:33.620000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:33.620000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4008f28c90 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:20:33.620000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:33.673512 kubelet[2483]: E1101 00:20:33.673286 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:20:33.704811 systemd-networkd[1647]: cali26dfce59395: Link UP Nov 1 00:20:33.722971 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:20:33.723111 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali26dfce59395: link becomes ready Nov 1 00:20:33.727406 systemd-networkd[1647]: cali26dfce59395: Gained carrier Nov 1 00:20:33.747891 systemd-networkd[1647]: cali61cece16cb0: Gained IPv6LL Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.615 [INFO][4488] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0 csi-node-driver- calico-system d1bae2b3-184b-4fab-8bf3-245332cdbb4f 1018 0 2025-11-01 00:20:04 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-c6a118d14a csi-node-driver-9mw49 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali26dfce59395 [] [] }} ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Namespace="calico-system" Pod="csi-node-driver-9mw49" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.616 [INFO][4488] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Namespace="calico-system" Pod="csi-node-driver-9mw49" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.641 [INFO][4501] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" HandleID="k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.641 [INFO][4501] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" HandleID="k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-c6a118d14a", "pod":"csi-node-driver-9mw49", "timestamp":"2025-11-01 00:20:33.641774162 +0000 UTC"}, Hostname:"ci-3510.3.8-n-c6a118d14a", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.641 [INFO][4501] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.642 [INFO][4501] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.642 [INFO][4501] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-c6a118d14a' Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.652 [INFO][4501] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.657 [INFO][4501] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.661 [INFO][4501] ipam/ipam.go 511: Trying affinity for 192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.662 [INFO][4501] ipam/ipam.go 158: Attempting to load block cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.665 [INFO][4501] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.665 [INFO][4501] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.3.192/26 handle="k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.667 [INFO][4501] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7 Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.675 [INFO][4501] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.3.192/26 handle="k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.695 [INFO][4501] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.3.198/26] block=192.168.3.192/26 handle="k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.695 [INFO][4501] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.3.198/26] handle="k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.695 [INFO][4501] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:33.749897 env[1493]: 2025-11-01 00:20:33.695 [INFO][4501] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.3.198/26] IPv6=[] ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" HandleID="k8s-pod-network.a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.750531 env[1493]: 2025-11-01 00:20:33.699 [INFO][4488] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Namespace="calico-system" Pod="csi-node-driver-9mw49" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d1bae2b3-184b-4fab-8bf3-245332cdbb4f", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"", Pod:"csi-node-driver-9mw49", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.3.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali26dfce59395", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:33.750531 env[1493]: 2025-11-01 00:20:33.699 [INFO][4488] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.3.198/32] ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Namespace="calico-system" Pod="csi-node-driver-9mw49" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.750531 env[1493]: 2025-11-01 00:20:33.699 [INFO][4488] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali26dfce59395 ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Namespace="calico-system" Pod="csi-node-driver-9mw49" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.750531 env[1493]: 2025-11-01 00:20:33.706 [INFO][4488] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Namespace="calico-system" Pod="csi-node-driver-9mw49" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.750531 env[1493]: 2025-11-01 00:20:33.728 [INFO][4488] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Namespace="calico-system" Pod="csi-node-driver-9mw49" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d1bae2b3-184b-4fab-8bf3-245332cdbb4f", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7", Pod:"csi-node-driver-9mw49", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.3.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali26dfce59395", MAC:"22:a1:0f:da:45:7a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:33.750531 env[1493]: 2025-11-01 00:20:33.745 [INFO][4488] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7" Namespace="calico-system" Pod="csi-node-driver-9mw49" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:33.764983 env[1493]: time="2025-11-01T00:20:33.764807335Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:33.764983 env[1493]: time="2025-11-01T00:20:33.764848255Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:33.764983 env[1493]: time="2025-11-01T00:20:33.764858895Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:33.769518 env[1493]: time="2025-11-01T00:20:33.765249975Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7 pid=4525 runtime=io.containerd.runc.v2 Nov 1 00:20:33.790539 systemd[1]: run-containerd-runc-k8s.io-a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7-runc.cwymZv.mount: Deactivated successfully. Nov 1 00:20:33.805007 systemd[1]: Started cri-containerd-a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7.scope. Nov 1 00:20:33.809000 audit[4541]: NETFILTER_CFG table=filter:126 family=2 entries=54 op=nft_register_chain pid=4541 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:33.809000 audit[4541]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25976 a0=3 a1=ffffc7b39cf0 a2=0 a3=ffffbb540fa8 items=0 ppid=3777 pid=4541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:33.809000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.820000 audit: BPF prog-id=187 op=LOAD Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4525 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:33.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138663561373138626535373236386564353135336439363166653862 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4525 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:33.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138663561373138626535373236386564353135336439363166653862 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit: BPF prog-id=188 op=LOAD Nov 1 00:20:33.821000 audit[4533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4525 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:33.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138663561373138626535373236386564353135336439363166653862 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit: BPF prog-id=189 op=LOAD Nov 1 00:20:33.821000 audit[4533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4525 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:33.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138663561373138626535373236386564353135336439363166653862 Nov 1 00:20:33.821000 audit: BPF prog-id=189 op=UNLOAD Nov 1 00:20:33.821000 audit: BPF prog-id=188 op=UNLOAD Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:33.821000 audit: BPF prog-id=190 op=LOAD Nov 1 00:20:33.821000 audit[4533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4525 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:33.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138663561373138626535373236386564353135336439363166653862 Nov 1 00:20:33.825000 audit[4551]: NETFILTER_CFG table=filter:127 family=2 entries=14 op=nft_register_rule pid=4551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:33.825000 audit[4551]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc3bd98d0 a2=0 a3=1 items=0 ppid=2587 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:33.825000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:33.831000 audit[4551]: NETFILTER_CFG table=nat:128 family=2 entries=20 op=nft_register_rule pid=4551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:33.831000 audit[4551]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc3bd98d0 a2=0 a3=1 items=0 ppid=2587 pid=4551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:33.831000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:33.838895 env[1493]: time="2025-11-01T00:20:33.838850303Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-9mw49,Uid:d1bae2b3-184b-4fab-8bf3-245332cdbb4f,Namespace:calico-system,Attempt:1,} returns sandbox id \"a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7\"" Nov 1 00:20:33.845688 env[1493]: time="2025-11-01T00:20:33.845617183Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:20:33.939900 systemd-networkd[1647]: cali246c0364256: Gained IPv6LL Nov 1 00:20:34.104345 env[1493]: time="2025-11-01T00:20:34.104288970Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:34.107560 env[1493]: time="2025-11-01T00:20:34.107508970Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:20:34.108515 kubelet[2483]: E1101 00:20:34.108458 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:20:34.108845 kubelet[2483]: E1101 00:20:34.108528 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:20:34.110505 kubelet[2483]: E1101 00:20:34.110427 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:34.112868 env[1493]: time="2025-11-01T00:20:34.112830531Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:20:34.353467 env[1493]: time="2025-11-01T00:20:34.353412715Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:34.357446 env[1493]: time="2025-11-01T00:20:34.357309875Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:20:34.357852 kubelet[2483]: E1101 00:20:34.357818 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:20:34.357991 kubelet[2483]: E1101 00:20:34.357975 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:20:34.358225 kubelet[2483]: E1101 00:20:34.358187 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:34.359559 kubelet[2483]: E1101 00:20:34.359512 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:34.448584 env[1493]: time="2025-11-01T00:20:34.448548365Z" level=info msg="StopPodSandbox for \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\"" Nov 1 00:20:34.449115 env[1493]: time="2025-11-01T00:20:34.448657685Z" level=info msg="StopPodSandbox for \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\"" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.515 [INFO][4580] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.515 [INFO][4580] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" iface="eth0" netns="/var/run/netns/cni-07a48d63-71f4-514b-2c7e-3d6437da9395" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.515 [INFO][4580] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" iface="eth0" netns="/var/run/netns/cni-07a48d63-71f4-514b-2c7e-3d6437da9395" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.520 [INFO][4580] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" iface="eth0" netns="/var/run/netns/cni-07a48d63-71f4-514b-2c7e-3d6437da9395" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.521 [INFO][4580] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.521 [INFO][4580] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.549 [INFO][4594] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.549 [INFO][4594] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.550 [INFO][4594] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.560 [WARNING][4594] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.560 [INFO][4594] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.561 [INFO][4594] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:34.564643 env[1493]: 2025-11-01 00:20:34.563 [INFO][4580] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:34.567178 systemd[1]: run-netns-cni\x2d07a48d63\x2d71f4\x2d514b\x2d2c7e\x2d3d6437da9395.mount: Deactivated successfully. Nov 1 00:20:34.568922 env[1493]: time="2025-11-01T00:20:34.568866377Z" level=info msg="TearDown network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\" successfully" Nov 1 00:20:34.568922 env[1493]: time="2025-11-01T00:20:34.568917457Z" level=info msg="StopPodSandbox for \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\" returns successfully" Nov 1 00:20:34.569964 env[1493]: time="2025-11-01T00:20:34.569930537Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6546b95b7c-fzns4,Uid:61cf4df3-9495-4ec5-bf84-8b16f6220291,Namespace:calico-system,Attempt:1,}" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.520 [INFO][4581] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.520 [INFO][4581] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" iface="eth0" netns="/var/run/netns/cni-00e76196-a082-b0d1-fe4e-1e25f76c8089" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.520 [INFO][4581] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" iface="eth0" netns="/var/run/netns/cni-00e76196-a082-b0d1-fe4e-1e25f76c8089" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.521 [INFO][4581] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" iface="eth0" netns="/var/run/netns/cni-00e76196-a082-b0d1-fe4e-1e25f76c8089" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.521 [INFO][4581] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.521 [INFO][4581] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.575 [INFO][4598] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.576 [INFO][4598] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.576 [INFO][4598] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.585 [WARNING][4598] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.586 [INFO][4598] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.587 [INFO][4598] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:34.590704 env[1493]: 2025-11-01 00:20:34.589 [INFO][4581] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:34.591327 env[1493]: time="2025-11-01T00:20:34.591291619Z" level=info msg="TearDown network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\" successfully" Nov 1 00:20:34.591413 env[1493]: time="2025-11-01T00:20:34.591395979Z" level=info msg="StopPodSandbox for \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\" returns successfully" Nov 1 00:20:34.592468 env[1493]: time="2025-11-01T00:20:34.592438019Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cddcf5574-mwskz,Uid:8fc92f66-851e-47b9-a145-ba988de2a931,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:20:34.683326 kubelet[2483]: E1101 00:20:34.682017 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:34.770236 systemd[1]: run-netns-cni\x2d00e76196\x2da082\x2db0d1\x2dfe4e\x2d1e25f76c8089.mount: Deactivated successfully. Nov 1 00:20:34.800547 systemd-networkd[1647]: calibae6a049601: Link UP Nov 1 00:20:34.808596 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:20:34.808732 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibae6a049601: link becomes ready Nov 1 00:20:34.812733 systemd-networkd[1647]: calibae6a049601: Gained carrier Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.658 [INFO][4606] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0 calico-kube-controllers-6546b95b7c- calico-system 61cf4df3-9495-4ec5-bf84-8b16f6220291 1034 0 2025-11-01 00:20:04 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6546b95b7c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-c6a118d14a calico-kube-controllers-6546b95b7c-fzns4 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calibae6a049601 [] [] }} ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Namespace="calico-system" Pod="calico-kube-controllers-6546b95b7c-fzns4" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.658 [INFO][4606] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Namespace="calico-system" Pod="calico-kube-controllers-6546b95b7c-fzns4" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.727 [INFO][4630] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" HandleID="k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.728 [INFO][4630] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" HandleID="k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd8f0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-c6a118d14a", "pod":"calico-kube-controllers-6546b95b7c-fzns4", "timestamp":"2025-11-01 00:20:34.727672313 +0000 UTC"}, Hostname:"ci-3510.3.8-n-c6a118d14a", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.728 [INFO][4630] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.728 [INFO][4630] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.728 [INFO][4630] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-c6a118d14a' Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.743 [INFO][4630] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.752 [INFO][4630] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.757 [INFO][4630] ipam/ipam.go 511: Trying affinity for 192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.759 [INFO][4630] ipam/ipam.go 158: Attempting to load block cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.762 [INFO][4630] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.762 [INFO][4630] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.3.192/26 handle="k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.764 [INFO][4630] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175 Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.776 [INFO][4630] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.3.192/26 handle="k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.788 [INFO][4630] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.3.199/26] block=192.168.3.192/26 handle="k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.788 [INFO][4630] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.3.199/26] handle="k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.788 [INFO][4630] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:34.826716 env[1493]: 2025-11-01 00:20:34.788 [INFO][4630] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.3.199/26] IPv6=[] ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" HandleID="k8s-pod-network.cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.829744 env[1493]: 2025-11-01 00:20:34.791 [INFO][4606] cni-plugin/k8s.go 418: Populated endpoint ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Namespace="calico-system" Pod="calico-kube-controllers-6546b95b7c-fzns4" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0", GenerateName:"calico-kube-controllers-6546b95b7c-", Namespace:"calico-system", SelfLink:"", UID:"61cf4df3-9495-4ec5-bf84-8b16f6220291", ResourceVersion:"1034", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6546b95b7c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"", Pod:"calico-kube-controllers-6546b95b7c-fzns4", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.3.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibae6a049601", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:34.829744 env[1493]: 2025-11-01 00:20:34.791 [INFO][4606] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.3.199/32] ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Namespace="calico-system" Pod="calico-kube-controllers-6546b95b7c-fzns4" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.829744 env[1493]: 2025-11-01 00:20:34.791 [INFO][4606] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibae6a049601 ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Namespace="calico-system" Pod="calico-kube-controllers-6546b95b7c-fzns4" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.829744 env[1493]: 2025-11-01 00:20:34.812 [INFO][4606] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Namespace="calico-system" Pod="calico-kube-controllers-6546b95b7c-fzns4" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.829744 env[1493]: 2025-11-01 00:20:34.812 [INFO][4606] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Namespace="calico-system" Pod="calico-kube-controllers-6546b95b7c-fzns4" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0", GenerateName:"calico-kube-controllers-6546b95b7c-", Namespace:"calico-system", SelfLink:"", UID:"61cf4df3-9495-4ec5-bf84-8b16f6220291", ResourceVersion:"1034", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6546b95b7c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175", Pod:"calico-kube-controllers-6546b95b7c-fzns4", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.3.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibae6a049601", MAC:"da:ff:3e:45:42:2d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:34.829744 env[1493]: 2025-11-01 00:20:34.825 [INFO][4606] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175" Namespace="calico-system" Pod="calico-kube-controllers-6546b95b7c-fzns4" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:34.846285 env[1493]: time="2025-11-01T00:20:34.846205885Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:34.846431 env[1493]: time="2025-11-01T00:20:34.846297885Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:34.846431 env[1493]: time="2025-11-01T00:20:34.846323165Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:34.846501 env[1493]: time="2025-11-01T00:20:34.846465685Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175 pid=4662 runtime=io.containerd.runc.v2 Nov 1 00:20:34.865724 kernel: kauditd_printk_skb: 1084 callbacks suppressed Nov 1 00:20:34.865885 kernel: audit: type=1325 audit(1761956434.848:1258): table=filter:129 family=2 entries=48 op=nft_register_chain pid=4667 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:34.848000 audit[4667]: NETFILTER_CFG table=filter:129 family=2 entries=48 op=nft_register_chain pid=4667 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:34.848000 audit[4667]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23108 a0=3 a1=fffffdaec230 a2=0 a3=ffff8dbe3fa8 items=0 ppid=3777 pid=4667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:34.903321 kernel: audit: type=1300 audit(1761956434.848:1258): arch=c00000b7 syscall=211 success=yes exit=23108 a0=3 a1=fffffdaec230 a2=0 a3=ffff8dbe3fa8 items=0 ppid=3777 pid=4667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:34.912291 systemd[1]: Started cri-containerd-cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175.scope. Nov 1 00:20:34.848000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:34.931305 kernel: audit: type=1327 audit(1761956434.848:1258): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.990807 kernel: audit: type=1400 audit(1761956434.950:1259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.990953 kernel: audit: type=1400 audit(1761956434.950:1260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.011046 kernel: audit: type=1400 audit(1761956434.950:1261): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.029403 kernel: audit: type=1400 audit(1761956434.950:1262): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.047852 kernel: audit: type=1400 audit(1761956434.950:1263): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.067137 env[1493]: time="2025-11-01T00:20:35.067095827Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6546b95b7c-fzns4,Uid:61cf4df3-9495-4ec5-bf84-8b16f6220291,Namespace:calico-system,Attempt:1,} returns sandbox id \"cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175\"" Nov 1 00:20:35.072206 env[1493]: time="2025-11-01T00:20:35.072160348Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:20:35.080769 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif18beeb44f8: link becomes ready Nov 1 00:20:35.080887 kernel: audit: type=1400 audit(1761956434.950:1264): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.080157 systemd-networkd[1647]: calif18beeb44f8: Link UP Nov 1 00:20:35.080286 systemd-networkd[1647]: calif18beeb44f8: Gained carrier Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.102793 kernel: audit: type=1400 audit(1761956434.950:1265): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit: BPF prog-id=191 op=LOAD Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4662 pid=4673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:34.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623732386338313564373330373038316331623130386339373637 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4662 pid=4673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:34.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623732386338313564373330373038316331623130386339373637 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.951000 audit: BPF prog-id=192 op=LOAD Nov 1 00:20:34.951000 audit[4673]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4662 pid=4673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:34.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623732386338313564373330373038316331623130386339373637 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit: BPF prog-id=193 op=LOAD Nov 1 00:20:34.968000 audit[4673]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4662 pid=4673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:34.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623732386338313564373330373038316331623130386339373637 Nov 1 00:20:34.968000 audit: BPF prog-id=193 op=UNLOAD Nov 1 00:20:34.968000 audit: BPF prog-id=192 op=UNLOAD Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { perfmon } for pid=4673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit[4673]: AVC avc: denied { bpf } for pid=4673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:34.968000 audit: BPF prog-id=194 op=LOAD Nov 1 00:20:34.968000 audit[4673]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4662 pid=4673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:34.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623732386338313564373330373038316331623130386339373637 Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.709 [INFO][4619] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0 calico-apiserver-5cddcf5574- calico-apiserver 8fc92f66-851e-47b9-a145-ba988de2a931 1035 0 2025-11-01 00:19:55 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5cddcf5574 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-c6a118d14a calico-apiserver-5cddcf5574-mwskz eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif18beeb44f8 [] [] }} ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-mwskz" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.709 [INFO][4619] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-mwskz" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.758 [INFO][4637] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" HandleID="k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.759 [INFO][4637] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" HandleID="k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024b1c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-c6a118d14a", "pod":"calico-apiserver-5cddcf5574-mwskz", "timestamp":"2025-11-01 00:20:34.758601796 +0000 UTC"}, Hostname:"ci-3510.3.8-n-c6a118d14a", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.760 [INFO][4637] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.789 [INFO][4637] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.789 [INFO][4637] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-c6a118d14a' Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.843 [INFO][4637] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.875 [INFO][4637] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.914 [INFO][4637] ipam/ipam.go 511: Trying affinity for 192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.933 [INFO][4637] ipam/ipam.go 158: Attempting to load block cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.939 [INFO][4637] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.3.192/26 host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.939 [INFO][4637] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.3.192/26 handle="k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.944 [INFO][4637] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:34.973 [INFO][4637] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.3.192/26 handle="k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:35.014 [INFO][4637] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.3.200/26] block=192.168.3.192/26 handle="k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:35.014 [INFO][4637] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.3.200/26] handle="k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" host="ci-3510.3.8-n-c6a118d14a" Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:35.014 [INFO][4637] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:35.108062 env[1493]: 2025-11-01 00:20:35.014 [INFO][4637] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.3.200/26] IPv6=[] ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" HandleID="k8s-pod-network.bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:35.108725 env[1493]: 2025-11-01 00:20:35.029 [INFO][4619] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-mwskz" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0", GenerateName:"calico-apiserver-5cddcf5574-", Namespace:"calico-apiserver", SelfLink:"", UID:"8fc92f66-851e-47b9-a145-ba988de2a931", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cddcf5574", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"", Pod:"calico-apiserver-5cddcf5574-mwskz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.3.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif18beeb44f8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:35.108725 env[1493]: 2025-11-01 00:20:35.029 [INFO][4619] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.3.200/32] ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-mwskz" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:35.108725 env[1493]: 2025-11-01 00:20:35.030 [INFO][4619] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif18beeb44f8 ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-mwskz" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:35.108725 env[1493]: 2025-11-01 00:20:35.037 [INFO][4619] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-mwskz" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:35.108725 env[1493]: 2025-11-01 00:20:35.081 [INFO][4619] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-mwskz" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0", GenerateName:"calico-apiserver-5cddcf5574-", Namespace:"calico-apiserver", SelfLink:"", UID:"8fc92f66-851e-47b9-a145-ba988de2a931", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cddcf5574", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f", Pod:"calico-apiserver-5cddcf5574-mwskz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.3.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif18beeb44f8", MAC:"72:72:88:4e:d9:37", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:35.108725 env[1493]: 2025-11-01 00:20:35.103 [INFO][4619] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f" Namespace="calico-apiserver" Pod="calico-apiserver-5cddcf5574-mwskz" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:35.130000 audit[4703]: NETFILTER_CFG table=filter:130 family=2 entries=53 op=nft_register_chain pid=4703 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:35.130000 audit[4703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26608 a0=3 a1=ffffc079d4d0 a2=0 a3=ffffb4c45fa8 items=0 ppid=3777 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.130000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:35.134726 env[1493]: time="2025-11-01T00:20:35.134639954Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:35.134726 env[1493]: time="2025-11-01T00:20:35.134683114Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:35.134726 env[1493]: time="2025-11-01T00:20:35.134693874Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:35.135198 env[1493]: time="2025-11-01T00:20:35.135132994Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f pid=4710 runtime=io.containerd.runc.v2 Nov 1 00:20:35.149579 systemd[1]: Started cri-containerd-bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f.scope. Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.176000 audit: BPF prog-id=195 op=LOAD Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4710 pid=4718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396536393962356361376335313437666565333436383561653966 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4710 pid=4718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396536393962356361376335313437666565333436383561653966 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.177000 audit: BPF prog-id=196 op=LOAD Nov 1 00:20:35.177000 audit[4718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4710 pid=4718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396536393962356361376335313437666565333436383561653966 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.178000 audit: BPF prog-id=197 op=LOAD Nov 1 00:20:35.178000 audit[4718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4710 pid=4718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396536393962356361376335313437666565333436383561653966 Nov 1 00:20:35.179000 audit: BPF prog-id=197 op=UNLOAD Nov 1 00:20:35.179000 audit: BPF prog-id=196 op=UNLOAD Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { perfmon } for pid=4718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit[4718]: AVC avc: denied { bpf } for pid=4718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.179000 audit: BPF prog-id=198 op=LOAD Nov 1 00:20:35.179000 audit[4718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4710 pid=4718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266396536393962356361376335313437666565333436383561653966 Nov 1 00:20:35.224727 env[1493]: time="2025-11-01T00:20:35.224576843Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cddcf5574-mwskz,Uid:8fc92f66-851e-47b9-a145-ba988de2a931,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f\"" Nov 1 00:20:35.283793 systemd-networkd[1647]: cali26dfce59395: Gained IPv6LL Nov 1 00:20:35.312926 env[1493]: time="2025-11-01T00:20:35.312872532Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:35.316459 env[1493]: time="2025-11-01T00:20:35.316392932Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:20:35.316900 kubelet[2483]: E1101 00:20:35.316844 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:20:35.317246 kubelet[2483]: E1101 00:20:35.316904 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:20:35.317246 kubelet[2483]: E1101 00:20:35.317146 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbqd9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-6546b95b7c-fzns4_calico-system(61cf4df3-9495-4ec5-bf84-8b16f6220291): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:35.317712 env[1493]: time="2025-11-01T00:20:35.317674333Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:35.318758 kubelet[2483]: E1101 00:20:35.318706 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:20:35.562903 env[1493]: time="2025-11-01T00:20:35.562777637Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:35.567316 env[1493]: time="2025-11-01T00:20:35.567249838Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:35.567757 kubelet[2483]: E1101 00:20:35.567708 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:35.567908 kubelet[2483]: E1101 00:20:35.567890 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:35.568378 kubelet[2483]: E1101 00:20:35.568337 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ncpzr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-mwskz_calico-apiserver(8fc92f66-851e-47b9-a145-ba988de2a931): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:35.569745 kubelet[2483]: E1101 00:20:35.569703 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:20:35.683741 kubelet[2483]: E1101 00:20:35.683702 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:20:35.687140 kubelet[2483]: E1101 00:20:35.687086 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:20:35.687738 kubelet[2483]: E1101 00:20:35.687682 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:35.725000 audit[4746]: NETFILTER_CFG table=filter:131 family=2 entries=14 op=nft_register_rule pid=4746 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:35.725000 audit[4746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd05d5590 a2=0 a3=1 items=0 ppid=2587 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.725000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:35.730000 audit[4746]: NETFILTER_CFG table=nat:132 family=2 entries=20 op=nft_register_rule pid=4746 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:35.730000 audit[4746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd05d5590 a2=0 a3=1 items=0 ppid=2587 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.730000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:36.405259 env[1493]: time="2025-11-01T00:20:36.405218761Z" level=info msg="StopPodSandbox for \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\"" Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.449 [WARNING][4759] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0", GenerateName:"calico-kube-controllers-6546b95b7c-", Namespace:"calico-system", SelfLink:"", UID:"61cf4df3-9495-4ec5-bf84-8b16f6220291", ResourceVersion:"1069", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6546b95b7c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175", Pod:"calico-kube-controllers-6546b95b7c-fzns4", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.3.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibae6a049601", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.450 [INFO][4759] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.450 [INFO][4759] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" iface="eth0" netns="" Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.450 [INFO][4759] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.450 [INFO][4759] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.476 [INFO][4766] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.476 [INFO][4766] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.476 [INFO][4766] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.485 [WARNING][4766] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.485 [INFO][4766] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.487 [INFO][4766] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:36.490635 env[1493]: 2025-11-01 00:20:36.489 [INFO][4759] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:36.491182 env[1493]: time="2025-11-01T00:20:36.491147370Z" level=info msg="TearDown network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\" successfully" Nov 1 00:20:36.491261 env[1493]: time="2025-11-01T00:20:36.491241010Z" level=info msg="StopPodSandbox for \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\" returns successfully" Nov 1 00:20:36.492095 env[1493]: time="2025-11-01T00:20:36.492071570Z" level=info msg="RemovePodSandbox for \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\"" Nov 1 00:20:36.492245 env[1493]: time="2025-11-01T00:20:36.492202610Z" level=info msg="Forcibly stopping sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\"" Nov 1 00:20:36.501228 systemd-networkd[1647]: calibae6a049601: Gained IPv6LL Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.537 [WARNING][4783] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0", GenerateName:"calico-kube-controllers-6546b95b7c-", Namespace:"calico-system", SelfLink:"", UID:"61cf4df3-9495-4ec5-bf84-8b16f6220291", ResourceVersion:"1069", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6546b95b7c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"cbb728c815d7307081c1b108c9767540948ddcf82517e15e09414d55969aa175", Pod:"calico-kube-controllers-6546b95b7c-fzns4", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.3.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibae6a049601", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.538 [INFO][4783] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.538 [INFO][4783] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" iface="eth0" netns="" Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.538 [INFO][4783] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.538 [INFO][4783] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.564 [INFO][4791] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.564 [INFO][4791] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.564 [INFO][4791] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.573 [WARNING][4791] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.573 [INFO][4791] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" HandleID="k8s-pod-network.04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--kube--controllers--6546b95b7c--fzns4-eth0" Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.574 [INFO][4791] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:36.577499 env[1493]: 2025-11-01 00:20:36.576 [INFO][4783] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf" Nov 1 00:20:36.578252 env[1493]: time="2025-11-01T00:20:36.578201418Z" level=info msg="TearDown network for sandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\" successfully" Nov 1 00:20:36.586805 env[1493]: time="2025-11-01T00:20:36.586760659Z" level=info msg="RemovePodSandbox \"04fc58e123faf659af397ef9cacee915553e9c03e12e9e8fbbe38cca0bd822cf\" returns successfully" Nov 1 00:20:36.587619 env[1493]: time="2025-11-01T00:20:36.587587659Z" level=info msg="StopPodSandbox for \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\"" Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.628 [WARNING][4806] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0", GenerateName:"calico-apiserver-5cddcf5574-", Namespace:"calico-apiserver", SelfLink:"", UID:"142cddeb-2de3-4f33-b2e2-51c515867ae1", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cddcf5574", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2", Pod:"calico-apiserver-5cddcf5574-gh77j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.3.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8cb2b6985a0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.629 [INFO][4806] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.629 [INFO][4806] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" iface="eth0" netns="" Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.629 [INFO][4806] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.629 [INFO][4806] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.651 [INFO][4813] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.651 [INFO][4813] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.651 [INFO][4813] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.660 [WARNING][4813] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.660 [INFO][4813] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.661 [INFO][4813] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:36.664828 env[1493]: 2025-11-01 00:20:36.663 [INFO][4806] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:36.665358 env[1493]: time="2025-11-01T00:20:36.665309067Z" level=info msg="TearDown network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\" successfully" Nov 1 00:20:36.665447 env[1493]: time="2025-11-01T00:20:36.665425107Z" level=info msg="StopPodSandbox for \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\" returns successfully" Nov 1 00:20:36.666040 env[1493]: time="2025-11-01T00:20:36.666014507Z" level=info msg="RemovePodSandbox for \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\"" Nov 1 00:20:36.666200 env[1493]: time="2025-11-01T00:20:36.666161427Z" level=info msg="Forcibly stopping sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\"" Nov 1 00:20:36.690459 kubelet[2483]: E1101 00:20:36.689967 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:20:36.690459 kubelet[2483]: E1101 00:20:36.690073 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.719 [WARNING][4827] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0", GenerateName:"calico-apiserver-5cddcf5574-", Namespace:"calico-apiserver", SelfLink:"", UID:"142cddeb-2de3-4f33-b2e2-51c515867ae1", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cddcf5574", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"85083d344a1cc409c5cad3cb7cd0f79c3de91e0d046b0a36fc779ec9291ad2d2", Pod:"calico-apiserver-5cddcf5574-gh77j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.3.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8cb2b6985a0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.720 [INFO][4827] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.720 [INFO][4827] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" iface="eth0" netns="" Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.720 [INFO][4827] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.720 [INFO][4827] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.754 [INFO][4835] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.754 [INFO][4835] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.754 [INFO][4835] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.772 [WARNING][4835] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.772 [INFO][4835] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" HandleID="k8s-pod-network.5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--gh77j-eth0" Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.773 [INFO][4835] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:36.776567 env[1493]: 2025-11-01 00:20:36.775 [INFO][4827] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5" Nov 1 00:20:36.777134 env[1493]: time="2025-11-01T00:20:36.777087518Z" level=info msg="TearDown network for sandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\" successfully" Nov 1 00:20:36.784712 env[1493]: time="2025-11-01T00:20:36.784667159Z" level=info msg="RemovePodSandbox \"5c2bf4c5576a588d2790e6f3406c5d24c7b94cf6a6ab4848e1173484605e1fe5\" returns successfully" Nov 1 00:20:36.785433 env[1493]: time="2025-11-01T00:20:36.785404999Z" level=info msg="StopPodSandbox for \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\"" Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.830 [WARNING][4849] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9082d4e0-79be-4894-8d55-8fd3da886cb9", ResourceVersion:"1006", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51", Pod:"coredns-674b8bbfcf-xfbtb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.3.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali246c0364256", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.830 [INFO][4849] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.830 [INFO][4849] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" iface="eth0" netns="" Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.830 [INFO][4849] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.830 [INFO][4849] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.852 [INFO][4857] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.853 [INFO][4857] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.853 [INFO][4857] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.862 [WARNING][4857] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.862 [INFO][4857] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.864 [INFO][4857] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:36.866907 env[1493]: 2025-11-01 00:20:36.865 [INFO][4849] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:36.867517 env[1493]: time="2025-11-01T00:20:36.867471327Z" level=info msg="TearDown network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\" successfully" Nov 1 00:20:36.867592 env[1493]: time="2025-11-01T00:20:36.867573127Z" level=info msg="StopPodSandbox for \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\" returns successfully" Nov 1 00:20:36.868141 env[1493]: time="2025-11-01T00:20:36.868112527Z" level=info msg="RemovePodSandbox for \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\"" Nov 1 00:20:36.868384 env[1493]: time="2025-11-01T00:20:36.868340007Z" level=info msg="Forcibly stopping sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\"" Nov 1 00:20:36.885202 systemd-networkd[1647]: calif18beeb44f8: Gained IPv6LL Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.908 [WARNING][4872] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9082d4e0-79be-4894-8d55-8fd3da886cb9", ResourceVersion:"1006", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"70465d7ceee5fded6c836deafb6f45ae33e1c73c6bcf0f6e3b3249c551d7fd51", Pod:"coredns-674b8bbfcf-xfbtb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.3.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali246c0364256", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.908 [INFO][4872] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.908 [INFO][4872] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" iface="eth0" netns="" Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.908 [INFO][4872] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.908 [INFO][4872] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.932 [INFO][4879] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.932 [INFO][4879] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.932 [INFO][4879] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.944 [WARNING][4879] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.944 [INFO][4879] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" HandleID="k8s-pod-network.4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--xfbtb-eth0" Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.947 [INFO][4879] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:36.951348 env[1493]: 2025-11-01 00:20:36.949 [INFO][4872] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f" Nov 1 00:20:36.951975 env[1493]: time="2025-11-01T00:20:36.951929535Z" level=info msg="TearDown network for sandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\" successfully" Nov 1 00:20:36.963837 env[1493]: time="2025-11-01T00:20:36.963787336Z" level=info msg="RemovePodSandbox \"4ccf85e46482845aea3ca8695cb7418f66f748d9d6426a1f07b7afb7037fcb4f\" returns successfully" Nov 1 00:20:36.964541 env[1493]: time="2025-11-01T00:20:36.964511576Z" level=info msg="StopPodSandbox for \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\"" Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:36.999 [WARNING][4893] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0", GenerateName:"calico-apiserver-5cddcf5574-", Namespace:"calico-apiserver", SelfLink:"", UID:"8fc92f66-851e-47b9-a145-ba988de2a931", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cddcf5574", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f", Pod:"calico-apiserver-5cddcf5574-mwskz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.3.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif18beeb44f8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:36.999 [INFO][4893] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:36.999 [INFO][4893] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" iface="eth0" netns="" Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:36.999 [INFO][4893] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:36.999 [INFO][4893] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:37.019 [INFO][4901] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:37.020 [INFO][4901] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:37.020 [INFO][4901] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:37.031 [WARNING][4901] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:37.031 [INFO][4901] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:37.032 [INFO][4901] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.035417 env[1493]: 2025-11-01 00:20:37.034 [INFO][4893] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:37.035911 env[1493]: time="2025-11-01T00:20:37.035452463Z" level=info msg="TearDown network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\" successfully" Nov 1 00:20:37.035911 env[1493]: time="2025-11-01T00:20:37.035484703Z" level=info msg="StopPodSandbox for \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\" returns successfully" Nov 1 00:20:37.036369 env[1493]: time="2025-11-01T00:20:37.036329624Z" level=info msg="RemovePodSandbox for \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\"" Nov 1 00:20:37.036446 env[1493]: time="2025-11-01T00:20:37.036371424Z" level=info msg="Forcibly stopping sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\"" Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.077 [WARNING][4915] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0", GenerateName:"calico-apiserver-5cddcf5574-", Namespace:"calico-apiserver", SelfLink:"", UID:"8fc92f66-851e-47b9-a145-ba988de2a931", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cddcf5574", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"bf9e699b5ca7c5147fee34685ae9fdcf4fee47dac1f7829bc354800b62f1382f", Pod:"calico-apiserver-5cddcf5574-mwskz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.3.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif18beeb44f8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.078 [INFO][4915] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.078 [INFO][4915] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" iface="eth0" netns="" Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.078 [INFO][4915] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.078 [INFO][4915] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.100 [INFO][4922] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.101 [INFO][4922] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.101 [INFO][4922] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.111 [WARNING][4922] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.111 [INFO][4922] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" HandleID="k8s-pod-network.b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Workload="ci--3510.3.8--n--c6a118d14a-k8s-calico--apiserver--5cddcf5574--mwskz-eth0" Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.113 [INFO][4922] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.116855 env[1493]: 2025-11-01 00:20:37.115 [INFO][4915] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98" Nov 1 00:20:37.116855 env[1493]: time="2025-11-01T00:20:37.116792951Z" level=info msg="TearDown network for sandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\" successfully" Nov 1 00:20:37.124682 env[1493]: time="2025-11-01T00:20:37.124468792Z" level=info msg="RemovePodSandbox \"b6fd1e6697cd404472070380f0d5c36cf3c486b047558f1cf3033a2fb20c8e98\" returns successfully" Nov 1 00:20:37.125069 env[1493]: time="2025-11-01T00:20:37.125040712Z" level=info msg="StopPodSandbox for \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\"" Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.172 [WARNING][4936] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"68b0f8e7-293b-45a6-ad9c-88db70c5f5c2", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a", Pod:"coredns-674b8bbfcf-dgmjc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.3.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4cb64883bf7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.172 [INFO][4936] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.172 [INFO][4936] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" iface="eth0" netns="" Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.172 [INFO][4936] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.172 [INFO][4936] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.194 [INFO][4944] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.194 [INFO][4944] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.194 [INFO][4944] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.207 [WARNING][4944] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.207 [INFO][4944] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.208 [INFO][4944] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.212620 env[1493]: 2025-11-01 00:20:37.210 [INFO][4936] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:37.213339 env[1493]: time="2025-11-01T00:20:37.213297161Z" level=info msg="TearDown network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\" successfully" Nov 1 00:20:37.213419 env[1493]: time="2025-11-01T00:20:37.213401721Z" level=info msg="StopPodSandbox for \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\" returns successfully" Nov 1 00:20:37.214041 env[1493]: time="2025-11-01T00:20:37.214015401Z" level=info msg="RemovePodSandbox for \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\"" Nov 1 00:20:37.214281 env[1493]: time="2025-11-01T00:20:37.214208281Z" level=info msg="Forcibly stopping sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\"" Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.257 [WARNING][4959] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"68b0f8e7-293b-45a6-ad9c-88db70c5f5c2", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 19, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"a57a1578ed909e0aedcd84b102d30a8ac3f1e6a050c5b67e39f1a0e728b2237a", Pod:"coredns-674b8bbfcf-dgmjc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.3.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4cb64883bf7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.257 [INFO][4959] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.257 [INFO][4959] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" iface="eth0" netns="" Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.257 [INFO][4959] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.257 [INFO][4959] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.278 [INFO][4966] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.279 [INFO][4966] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.279 [INFO][4966] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.288 [WARNING][4966] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.288 [INFO][4966] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" HandleID="k8s-pod-network.1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Workload="ci--3510.3.8--n--c6a118d14a-k8s-coredns--674b8bbfcf--dgmjc-eth0" Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.289 [INFO][4966] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.292378 env[1493]: 2025-11-01 00:20:37.290 [INFO][4959] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48" Nov 1 00:20:37.292999 env[1493]: time="2025-11-01T00:20:37.292961729Z" level=info msg="TearDown network for sandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\" successfully" Nov 1 00:20:37.301617 env[1493]: time="2025-11-01T00:20:37.301567009Z" level=info msg="RemovePodSandbox \"1b57b3b98b7413d3e0e177dab881c708b2065abcd6f43af971eed68d7fcfaf48\" returns successfully" Nov 1 00:20:37.302290 env[1493]: time="2025-11-01T00:20:37.302265370Z" level=info msg="StopPodSandbox for \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\"" Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.337 [WARNING][4984] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"cd0e393b-2cb9-479a-a6d3-1d4da4894369", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0", Pod:"goldmane-666569f655-hc9wn", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.3.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali61cece16cb0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.337 [INFO][4984] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.337 [INFO][4984] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" iface="eth0" netns="" Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.337 [INFO][4984] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.337 [INFO][4984] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.359 [INFO][4991] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.359 [INFO][4991] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.359 [INFO][4991] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.369 [WARNING][4991] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.369 [INFO][4991] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.370 [INFO][4991] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.373925 env[1493]: 2025-11-01 00:20:37.372 [INFO][4984] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:37.374485 env[1493]: time="2025-11-01T00:20:37.374436337Z" level=info msg="TearDown network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\" successfully" Nov 1 00:20:37.374575 env[1493]: time="2025-11-01T00:20:37.374546297Z" level=info msg="StopPodSandbox for \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\" returns successfully" Nov 1 00:20:37.375144 env[1493]: time="2025-11-01T00:20:37.375119297Z" level=info msg="RemovePodSandbox for \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\"" Nov 1 00:20:37.375412 env[1493]: time="2025-11-01T00:20:37.375355497Z" level=info msg="Forcibly stopping sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\"" Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.416 [WARNING][5005] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"cd0e393b-2cb9-479a-a6d3-1d4da4894369", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"26e0ad2454d31c4abe71789b7fce1f6896b943f0c368c7d3ddb2268c1c8243e0", Pod:"goldmane-666569f655-hc9wn", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.3.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali61cece16cb0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.417 [INFO][5005] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.417 [INFO][5005] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" iface="eth0" netns="" Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.417 [INFO][5005] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.417 [INFO][5005] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.443 [INFO][5013] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.443 [INFO][5013] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.443 [INFO][5013] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.454 [WARNING][5013] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.454 [INFO][5013] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" HandleID="k8s-pod-network.a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Workload="ci--3510.3.8--n--c6a118d14a-k8s-goldmane--666569f655--hc9wn-eth0" Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.457 [INFO][5013] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.462326 env[1493]: 2025-11-01 00:20:37.460 [INFO][5005] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f" Nov 1 00:20:37.462982 env[1493]: time="2025-11-01T00:20:37.462898305Z" level=info msg="TearDown network for sandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\" successfully" Nov 1 00:20:37.472516 env[1493]: time="2025-11-01T00:20:37.472468666Z" level=info msg="RemovePodSandbox \"a1de479d743d0f88345a72b0b2bb8e6055011da500fc76c19599d651a2d6c20f\" returns successfully" Nov 1 00:20:37.473304 env[1493]: time="2025-11-01T00:20:37.473264026Z" level=info msg="StopPodSandbox for \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\"" Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.517 [WARNING][5027] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d1bae2b3-184b-4fab-8bf3-245332cdbb4f", ResourceVersion:"1065", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7", Pod:"csi-node-driver-9mw49", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.3.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali26dfce59395", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.517 [INFO][5027] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.518 [INFO][5027] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" iface="eth0" netns="" Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.518 [INFO][5027] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.518 [INFO][5027] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.538 [INFO][5034] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.538 [INFO][5034] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.538 [INFO][5034] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.554 [WARNING][5034] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.555 [INFO][5034] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.556 [INFO][5034] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.561181 env[1493]: 2025-11-01 00:20:37.558 [INFO][5027] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:37.561671 env[1493]: time="2025-11-01T00:20:37.561210475Z" level=info msg="TearDown network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\" successfully" Nov 1 00:20:37.561671 env[1493]: time="2025-11-01T00:20:37.561243915Z" level=info msg="StopPodSandbox for \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\" returns successfully" Nov 1 00:20:37.562222 env[1493]: time="2025-11-01T00:20:37.562189355Z" level=info msg="RemovePodSandbox for \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\"" Nov 1 00:20:37.562296 env[1493]: time="2025-11-01T00:20:37.562229635Z" level=info msg="Forcibly stopping sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\"" Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.601 [WARNING][5048] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d1bae2b3-184b-4fab-8bf3-245332cdbb4f", ResourceVersion:"1065", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-c6a118d14a", ContainerID:"a8f5a718be57268ed5153d961fe8bd82986a3e707fd5881845676687b284deb7", Pod:"csi-node-driver-9mw49", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.3.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali26dfce59395", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.601 [INFO][5048] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.601 [INFO][5048] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" iface="eth0" netns="" Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.601 [INFO][5048] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.601 [INFO][5048] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.629 [INFO][5055] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.629 [INFO][5055] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.629 [INFO][5055] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.641 [WARNING][5055] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.641 [INFO][5055] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" HandleID="k8s-pod-network.7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Workload="ci--3510.3.8--n--c6a118d14a-k8s-csi--node--driver--9mw49-eth0" Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.644 [INFO][5055] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.648381 env[1493]: 2025-11-01 00:20:37.645 [INFO][5048] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656" Nov 1 00:20:37.649202 env[1493]: time="2025-11-01T00:20:37.648425083Z" level=info msg="TearDown network for sandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\" successfully" Nov 1 00:20:37.724851 env[1493]: time="2025-11-01T00:20:37.724790091Z" level=info msg="RemovePodSandbox \"7162ac26707d43fc632ef5513ac0cca7a6e09ef4715931092a5537f9b63d0656\" returns successfully" Nov 1 00:20:37.725349 env[1493]: time="2025-11-01T00:20:37.725322211Z" level=info msg="StopPodSandbox for \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\"" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.769 [WARNING][5069] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.770 [INFO][5069] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.770 [INFO][5069] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" iface="eth0" netns="" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.770 [INFO][5069] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.770 [INFO][5069] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.788 [INFO][5076] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.788 [INFO][5076] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.789 [INFO][5076] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.800 [WARNING][5076] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.800 [INFO][5076] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.801 [INFO][5076] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.804553 env[1493]: 2025-11-01 00:20:37.803 [INFO][5069] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:37.805070 env[1493]: time="2025-11-01T00:20:37.805031379Z" level=info msg="TearDown network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\" successfully" Nov 1 00:20:37.805140 env[1493]: time="2025-11-01T00:20:37.805123979Z" level=info msg="StopPodSandbox for \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\" returns successfully" Nov 1 00:20:37.805821 env[1493]: time="2025-11-01T00:20:37.805784579Z" level=info msg="RemovePodSandbox for \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\"" Nov 1 00:20:37.805919 env[1493]: time="2025-11-01T00:20:37.805826499Z" level=info msg="Forcibly stopping sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\"" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.845 [WARNING][5090] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" WorkloadEndpoint="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.845 [INFO][5090] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.845 [INFO][5090] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" iface="eth0" netns="" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.845 [INFO][5090] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.845 [INFO][5090] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.867 [INFO][5097] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.867 [INFO][5097] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.867 [INFO][5097] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.876 [WARNING][5097] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.876 [INFO][5097] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" HandleID="k8s-pod-network.2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Workload="ci--3510.3.8--n--c6a118d14a-k8s-whisker--589774b76c--s8hpc-eth0" Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.878 [INFO][5097] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.880798 env[1493]: 2025-11-01 00:20:37.879 [INFO][5090] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116" Nov 1 00:20:37.881353 env[1493]: time="2025-11-01T00:20:37.881295186Z" level=info msg="TearDown network for sandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\" successfully" Nov 1 00:20:37.890324 env[1493]: time="2025-11-01T00:20:37.890274187Z" level=info msg="RemovePodSandbox \"2ff7b157f4803cc49760a8009ce68fa4cd36c818de457f649d21a1607cdd0116\" returns successfully" Nov 1 00:20:40.741000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:40.748378 kernel: kauditd_printk_skb: 116 callbacks suppressed Nov 1 00:20:40.748535 kernel: audit: type=1400 audit(1761956440.741:1298): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:40.741000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001868940 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:40.798257 kernel: audit: type=1300 audit(1761956440.741:1298): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001868940 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:40.798748 kernel: audit: type=1327 audit(1761956440.741:1298): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:40.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:40.741000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:40.845648 kernel: audit: type=1400 audit(1761956440.741:1299): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:40.845808 kernel: audit: type=1300 audit(1761956440.741:1299): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001868ba0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:40.741000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001868ba0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:40.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:40.900432 kernel: audit: type=1327 audit(1761956440.741:1299): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:40.900582 kernel: audit: type=1400 audit(1761956440.741:1300): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:40.741000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:40.741000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40022bfae0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:40.952247 kernel: audit: type=1300 audit(1761956440.741:1300): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40022bfae0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:40.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:40.976720 kernel: audit: type=1327 audit(1761956440.741:1300): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:40.976845 kernel: audit: type=1400 audit(1761956440.741:1301): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:40.741000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:40.741000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40022bfb00 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:20:40.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:44.447382 env[1493]: time="2025-11-01T00:20:44.447333883Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:44.688540 env[1493]: time="2025-11-01T00:20:44.688468905Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:44.691759 env[1493]: time="2025-11-01T00:20:44.691707705Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:44.691984 kubelet[2483]: E1101 00:20:44.691941 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:44.692292 kubelet[2483]: E1101 00:20:44.691994 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:44.692292 kubelet[2483]: E1101 00:20:44.692121 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j52db,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-gh77j_calico-apiserver(142cddeb-2de3-4f33-b2e2-51c515867ae1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:44.693695 kubelet[2483]: E1101 00:20:44.693608 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:20:45.446679 env[1493]: time="2025-11-01T00:20:45.446608533Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:20:45.676293 env[1493]: time="2025-11-01T00:20:45.676139954Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:45.680999 env[1493]: time="2025-11-01T00:20:45.680942194Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:20:45.681285 kubelet[2483]: E1101 00:20:45.681240 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:20:45.681372 kubelet[2483]: E1101 00:20:45.681292 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:20:45.681444 kubelet[2483]: E1101 00:20:45.681406 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:23ceceeffe7f468b9e31b12311d593ed,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:45.683633 env[1493]: time="2025-11-01T00:20:45.683583954Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:20:45.952559 env[1493]: time="2025-11-01T00:20:45.952502538Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:45.955559 env[1493]: time="2025-11-01T00:20:45.955494899Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:20:45.955854 kubelet[2483]: E1101 00:20:45.955811 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:20:45.956153 kubelet[2483]: E1101 00:20:45.955867 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:20:45.956153 kubelet[2483]: E1101 00:20:45.955995 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:45.957455 kubelet[2483]: E1101 00:20:45.957403 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:20:47.446745 env[1493]: time="2025-11-01T00:20:47.446466031Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:20:47.673657 env[1493]: time="2025-11-01T00:20:47.673449211Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:47.679551 env[1493]: time="2025-11-01T00:20:47.679488891Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:20:47.679865 kubelet[2483]: E1101 00:20:47.679822 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:20:47.680166 kubelet[2483]: E1101 00:20:47.679879 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:20:47.680212 env[1493]: time="2025-11-01T00:20:47.680193411Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:20:47.680807 kubelet[2483]: E1101 00:20:47.680649 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k7frb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hc9wn_calico-system(cd0e393b-2cb9-479a-a6d3-1d4da4894369): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:47.682272 kubelet[2483]: E1101 00:20:47.682232 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:20:47.938906 env[1493]: time="2025-11-01T00:20:47.938852274Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:47.942099 env[1493]: time="2025-11-01T00:20:47.942040634Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:20:47.942360 kubelet[2483]: E1101 00:20:47.942328 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:20:47.942487 kubelet[2483]: E1101 00:20:47.942471 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:20:47.942740 kubelet[2483]: E1101 00:20:47.942694 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:47.945101 env[1493]: time="2025-11-01T00:20:47.944895435Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:20:48.175175 env[1493]: time="2025-11-01T00:20:48.175066255Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:48.178466 env[1493]: time="2025-11-01T00:20:48.178413055Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:20:48.178719 kubelet[2483]: E1101 00:20:48.178678 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:20:48.178784 kubelet[2483]: E1101 00:20:48.178738 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:20:48.179350 kubelet[2483]: E1101 00:20:48.179286 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:48.180569 kubelet[2483]: E1101 00:20:48.180465 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:20:49.446884 env[1493]: time="2025-11-01T00:20:49.446830325Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:20:49.707389 env[1493]: time="2025-11-01T00:20:49.707275948Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:49.710637 env[1493]: time="2025-11-01T00:20:49.710568388Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:20:49.711007 kubelet[2483]: E1101 00:20:49.710966 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:20:49.711305 kubelet[2483]: E1101 00:20:49.711018 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:20:49.711305 kubelet[2483]: E1101 00:20:49.711152 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbqd9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-6546b95b7c-fzns4_calico-system(61cf4df3-9495-4ec5-bf84-8b16f6220291): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:49.712634 kubelet[2483]: E1101 00:20:49.712586 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:20:52.449466 env[1493]: time="2025-11-01T00:20:52.449401661Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:52.676673 env[1493]: time="2025-11-01T00:20:52.676589400Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:52.680300 env[1493]: time="2025-11-01T00:20:52.680248000Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:52.680528 kubelet[2483]: E1101 00:20:52.680490 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:52.680882 kubelet[2483]: E1101 00:20:52.680860 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:52.681104 kubelet[2483]: E1101 00:20:52.681065 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ncpzr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-mwskz_calico-apiserver(8fc92f66-851e-47b9-a145-ba988de2a931): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:52.682941 kubelet[2483]: E1101 00:20:52.682888 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:20:55.446523 kubelet[2483]: E1101 00:20:55.446478 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:20:58.448477 kubelet[2483]: E1101 00:20:58.448431 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:20:58.652134 systemd[1]: run-containerd-runc-k8s.io-3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005-runc.Rq9mQJ.mount: Deactivated successfully. Nov 1 00:20:59.446816 kubelet[2483]: E1101 00:20:59.446762 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:21:02.450796 kubelet[2483]: E1101 00:21:02.450721 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:21:03.445996 kubelet[2483]: E1101 00:21:03.445955 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:21:05.446853 kubelet[2483]: E1101 00:21:05.446816 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:21:07.447449 env[1493]: time="2025-11-01T00:21:07.447367693Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:21:07.733716 env[1493]: time="2025-11-01T00:21:07.733658315Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:07.737009 env[1493]: time="2025-11-01T00:21:07.736953635Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:21:07.737265 kubelet[2483]: E1101 00:21:07.737223 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:07.737546 kubelet[2483]: E1101 00:21:07.737277 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:07.737546 kubelet[2483]: E1101 00:21:07.737402 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j52db,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-gh77j_calico-apiserver(142cddeb-2de3-4f33-b2e2-51c515867ae1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:07.738963 kubelet[2483]: E1101 00:21:07.738888 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:21:10.447788 env[1493]: time="2025-11-01T00:21:10.447739038Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:21:10.704818 env[1493]: time="2025-11-01T00:21:10.704698377Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:10.708334 env[1493]: time="2025-11-01T00:21:10.708273657Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:21:10.708775 kubelet[2483]: E1101 00:21:10.708741 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:21:10.709122 kubelet[2483]: E1101 00:21:10.709099 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:21:10.709372 kubelet[2483]: E1101 00:21:10.709329 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:23ceceeffe7f468b9e31b12311d593ed,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:10.711743 env[1493]: time="2025-11-01T00:21:10.711705257Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:21:10.999248 env[1493]: time="2025-11-01T00:21:10.999196039Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:11.002977 env[1493]: time="2025-11-01T00:21:11.002910679Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:21:11.003399 kubelet[2483]: E1101 00:21:11.003366 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:21:11.003537 kubelet[2483]: E1101 00:21:11.003517 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:21:11.003793 kubelet[2483]: E1101 00:21:11.003754 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:11.005451 kubelet[2483]: E1101 00:21:11.005404 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:21:12.449235 env[1493]: time="2025-11-01T00:21:12.449006986Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:21:12.699997 env[1493]: time="2025-11-01T00:21:12.699880644Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:12.711635 env[1493]: time="2025-11-01T00:21:12.711554845Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:21:12.712063 kubelet[2483]: E1101 00:21:12.712001 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:21:12.712361 kubelet[2483]: E1101 00:21:12.712076 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:21:12.712361 kubelet[2483]: E1101 00:21:12.712202 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:12.714573 env[1493]: time="2025-11-01T00:21:12.714539445Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:21:13.080096 env[1493]: time="2025-11-01T00:21:13.080041672Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:13.083479 env[1493]: time="2025-11-01T00:21:13.083416632Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:21:13.083714 kubelet[2483]: E1101 00:21:13.083675 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:21:13.083780 kubelet[2483]: E1101 00:21:13.083726 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:21:13.083892 kubelet[2483]: E1101 00:21:13.083840 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:13.085389 kubelet[2483]: E1101 00:21:13.085344 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:21:15.447254 env[1493]: time="2025-11-01T00:21:15.447208924Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:21:15.692668 env[1493]: time="2025-11-01T00:21:15.692429382Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:15.695887 env[1493]: time="2025-11-01T00:21:15.695812982Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:21:15.696167 kubelet[2483]: E1101 00:21:15.696095 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:21:15.696456 kubelet[2483]: E1101 00:21:15.696173 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:21:15.696500 kubelet[2483]: E1101 00:21:15.696420 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbqd9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-6546b95b7c-fzns4_calico-system(61cf4df3-9495-4ec5-bf84-8b16f6220291): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:15.697438 env[1493]: time="2025-11-01T00:21:15.697182862Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:21:15.698313 kubelet[2483]: E1101 00:21:15.698251 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:21:15.942869 env[1493]: time="2025-11-01T00:21:15.942818760Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:15.947345 env[1493]: time="2025-11-01T00:21:15.947284960Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:21:15.947810 kubelet[2483]: E1101 00:21:15.947724 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:21:15.947986 kubelet[2483]: E1101 00:21:15.947965 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:21:15.948262 kubelet[2483]: E1101 00:21:15.948210 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k7frb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hc9wn_calico-system(cd0e393b-2cb9-479a-a6d3-1d4da4894369): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:15.949922 kubelet[2483]: E1101 00:21:15.949865 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:21:18.448600 env[1493]: time="2025-11-01T00:21:18.448541780Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:21:18.694119 env[1493]: time="2025-11-01T00:21:18.694048597Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:18.697555 env[1493]: time="2025-11-01T00:21:18.697470678Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:21:18.697892 kubelet[2483]: E1101 00:21:18.697858 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:18.698219 kubelet[2483]: E1101 00:21:18.698196 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:18.698456 kubelet[2483]: E1101 00:21:18.698393 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ncpzr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-mwskz_calico-apiserver(8fc92f66-851e-47b9-a145-ba988de2a931): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:18.700168 kubelet[2483]: E1101 00:21:18.700053 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:21:19.446155 kubelet[2483]: E1101 00:21:19.446106 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:21:23.447795 kubelet[2483]: E1101 00:21:23.447745 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:21:27.447431 kubelet[2483]: E1101 00:21:27.447380 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:21:28.653814 systemd[1]: run-containerd-runc-k8s.io-3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005-runc.lVZKZF.mount: Deactivated successfully. Nov 1 00:21:29.446768 kubelet[2483]: E1101 00:21:29.446612 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:21:29.446768 kubelet[2483]: E1101 00:21:29.446612 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:21:30.447225 kubelet[2483]: E1101 00:21:30.447170 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:21:33.133966 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:21:33.134142 kernel: audit: type=1400 audit(1761956493.104:1302): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.104000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.104000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000819380 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:33.104000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:33.196295 kernel: audit: type=1300 audit(1761956493.104:1302): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000819380 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:33.196439 kernel: audit: type=1327 audit(1761956493.104:1302): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:33.132000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.226569 kernel: audit: type=1400 audit(1761956493.132:1303): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.132000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000acdf20 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:33.258283 kernel: audit: type=1300 audit(1761956493.132:1303): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000acdf20 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:33.132000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:33.291409 kernel: audit: type=1327 audit(1761956493.132:1303): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:33.446219 kubelet[2483]: E1101 00:21:33.446108 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:21:33.542000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.542000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.589507 kernel: audit: type=1400 audit(1761956493.542:1304): avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.589679 kernel: audit: type=1400 audit(1761956493.542:1305): avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.542000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4014aca840 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:21:33.617361 kernel: audit: type=1300 audit(1761956493.542:1305): arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4014aca840 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:21:33.542000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:33.642520 kernel: audit: type=1327 audit(1761956493.542:1305): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:33.542000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.542000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4014aca8a0 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:21:33.542000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:33.542000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4003bc5880 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:21:33.542000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:33.553000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.553000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4014acac90 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:21:33.553000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:33.641000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.641000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4006944480 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:21:33.641000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:33.641000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:33.641000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=40080e4690 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:21:33.641000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:35.446537 kubelet[2483]: E1101 00:21:35.446486 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:21:38.448939 kubelet[2483]: E1101 00:21:38.448894 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:21:40.742000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:40.749515 kernel: kauditd_printk_skb: 14 callbacks suppressed Nov 1 00:21:40.749726 kernel: audit: type=1400 audit(1761956500.742:1310): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:40.770000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:40.796160 kernel: audit: type=1400 audit(1761956500.770:1311): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:40.770000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017d83a0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:40.825800 kernel: audit: type=1300 audit(1761956500.770:1311): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017d83a0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:40.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:40.851378 kernel: audit: type=1327 audit(1761956500.770:1311): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:40.770000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:40.876270 kernel: audit: type=1400 audit(1761956500.770:1312): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:40.876393 kernel: audit: type=1300 audit(1761956500.770:1312): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017d83c0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:40.770000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017d83c0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:40.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:40.931095 kernel: audit: type=1327 audit(1761956500.770:1312): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:40.931220 kernel: audit: type=1400 audit(1761956500.771:1313): avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:40.771000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:40.771000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017d88e0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:40.981887 kernel: audit: type=1300 audit(1761956500.771:1313): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017d88e0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:40.771000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:41.006226 kernel: audit: type=1327 audit(1761956500.771:1313): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:40.742000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ab3720 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:21:40.742000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:42.448264 kubelet[2483]: E1101 00:21:42.448225 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:21:43.446780 kubelet[2483]: E1101 00:21:43.446728 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:21:44.447791 kubelet[2483]: E1101 00:21:44.447743 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:21:46.453098 kubelet[2483]: E1101 00:21:46.446540 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:21:49.447712 kubelet[2483]: E1101 00:21:49.447660 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:21:49.448307 kubelet[2483]: E1101 00:21:49.448272 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:21:54.448430 kubelet[2483]: E1101 00:21:54.448381 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:21:55.446572 env[1493]: time="2025-11-01T00:21:55.446528134Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:21:55.695659 env[1493]: time="2025-11-01T00:21:55.695591696Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:55.698849 env[1493]: time="2025-11-01T00:21:55.698707256Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:21:55.699375 kubelet[2483]: E1101 00:21:55.699156 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:55.699375 kubelet[2483]: E1101 00:21:55.699221 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:55.699733 kubelet[2483]: E1101 00:21:55.699380 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j52db,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-gh77j_calico-apiserver(142cddeb-2de3-4f33-b2e2-51c515867ae1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:55.700994 kubelet[2483]: E1101 00:21:55.700949 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:21:58.654513 systemd[1]: run-containerd-runc-k8s.io-3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005-runc.SwagwW.mount: Deactivated successfully. Nov 1 00:21:59.446981 env[1493]: time="2025-11-01T00:21:59.446927833Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:21:59.698386 env[1493]: time="2025-11-01T00:21:59.698145034Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:59.701256 env[1493]: time="2025-11-01T00:21:59.701194715Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:21:59.701618 kubelet[2483]: E1101 00:21:59.701580 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:21:59.701902 kubelet[2483]: E1101 00:21:59.701649 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:21:59.701902 kubelet[2483]: E1101 00:21:59.701804 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k7frb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hc9wn_calico-system(cd0e393b-2cb9-479a-a6d3-1d4da4894369): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:59.703352 kubelet[2483]: E1101 00:21:59.703295 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:22:00.202156 update_engine[1483]: I1101 00:22:00.202111 1483 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Nov 1 00:22:00.202156 update_engine[1483]: I1101 00:22:00.202152 1483 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Nov 1 00:22:00.202870 update_engine[1483]: I1101 00:22:00.202838 1483 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Nov 1 00:22:00.203722 update_engine[1483]: I1101 00:22:00.203694 1483 omaha_request_params.cc:62] Current group set to lts Nov 1 00:22:00.204649 update_engine[1483]: I1101 00:22:00.204607 1483 update_attempter.cc:499] Already updated boot flags. Skipping. Nov 1 00:22:00.204649 update_engine[1483]: I1101 00:22:00.204639 1483 update_attempter.cc:643] Scheduling an action processor start. Nov 1 00:22:00.204755 update_engine[1483]: I1101 00:22:00.204661 1483 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Nov 1 00:22:00.204755 update_engine[1483]: I1101 00:22:00.204697 1483 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Nov 1 00:22:00.206299 locksmithd[1563]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Nov 1 00:22:00.246144 update_engine[1483]: I1101 00:22:00.246093 1483 omaha_request_action.cc:270] Posting an Omaha request to disabled Nov 1 00:22:00.246144 update_engine[1483]: I1101 00:22:00.246130 1483 omaha_request_action.cc:271] Request: Nov 1 00:22:00.246144 update_engine[1483]: Nov 1 00:22:00.246144 update_engine[1483]: Nov 1 00:22:00.246144 update_engine[1483]: Nov 1 00:22:00.246144 update_engine[1483]: Nov 1 00:22:00.246144 update_engine[1483]: Nov 1 00:22:00.246144 update_engine[1483]: Nov 1 00:22:00.246144 update_engine[1483]: Nov 1 00:22:00.246144 update_engine[1483]: Nov 1 00:22:00.246144 update_engine[1483]: I1101 00:22:00.246136 1483 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:22:00.418893 update_engine[1483]: I1101 00:22:00.418843 1483 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:22:00.419157 update_engine[1483]: I1101 00:22:00.419128 1483 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:22:00.447149 env[1493]: time="2025-11-01T00:22:00.446857835Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:22:00.460963 update_engine[1483]: E1101 00:22:00.460848 1483 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:22:00.461093 update_engine[1483]: I1101 00:22:00.460968 1483 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Nov 1 00:22:00.702755 env[1493]: time="2025-11-01T00:22:00.702688196Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:00.705759 env[1493]: time="2025-11-01T00:22:00.705692436Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:22:00.706002 kubelet[2483]: E1101 00:22:00.705945 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:22:00.706264 kubelet[2483]: E1101 00:22:00.706015 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:22:00.706389 kubelet[2483]: E1101 00:22:00.706328 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:00.708976 env[1493]: time="2025-11-01T00:22:00.708740597Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:22:00.954825 env[1493]: time="2025-11-01T00:22:00.954758116Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:00.964815 env[1493]: time="2025-11-01T00:22:00.964752918Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:22:00.965122 kubelet[2483]: E1101 00:22:00.965060 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:22:00.965193 kubelet[2483]: E1101 00:22:00.965126 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:22:00.965314 kubelet[2483]: E1101 00:22:00.965267 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:00.966702 kubelet[2483]: E1101 00:22:00.966658 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:22:01.446685 env[1493]: time="2025-11-01T00:22:01.446619515Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:22:01.676227 env[1493]: time="2025-11-01T00:22:01.676161112Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:01.680923 env[1493]: time="2025-11-01T00:22:01.680844552Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:22:01.681159 kubelet[2483]: E1101 00:22:01.681116 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:22:01.681232 kubelet[2483]: E1101 00:22:01.681180 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:22:01.681386 kubelet[2483]: E1101 00:22:01.681333 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ncpzr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-mwskz_calico-apiserver(8fc92f66-851e-47b9-a145-ba988de2a931): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:01.682676 kubelet[2483]: E1101 00:22:01.682601 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:22:04.446982 env[1493]: time="2025-11-01T00:22:04.446727668Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:22:04.692538 env[1493]: time="2025-11-01T00:22:04.692478466Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:04.700673 env[1493]: time="2025-11-01T00:22:04.700524228Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:22:04.701282 kubelet[2483]: E1101 00:22:04.701235 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:22:04.701590 kubelet[2483]: E1101 00:22:04.701295 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:22:04.701590 kubelet[2483]: E1101 00:22:04.701406 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:23ceceeffe7f468b9e31b12311d593ed,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:04.703900 env[1493]: time="2025-11-01T00:22:04.703856068Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:22:04.948648 env[1493]: time="2025-11-01T00:22:04.948579066Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:04.955455 env[1493]: time="2025-11-01T00:22:04.955312107Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:22:04.956260 kubelet[2483]: E1101 00:22:04.955875 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:22:04.956260 kubelet[2483]: E1101 00:22:04.955924 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:22:04.956260 kubelet[2483]: E1101 00:22:04.956034 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:04.957445 kubelet[2483]: E1101 00:22:04.957398 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:22:05.446786 env[1493]: time="2025-11-01T00:22:05.446737463Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:22:05.676559 env[1493]: time="2025-11-01T00:22:05.676497819Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:05.681050 env[1493]: time="2025-11-01T00:22:05.680990500Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:22:05.681421 kubelet[2483]: E1101 00:22:05.681378 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:22:05.681516 kubelet[2483]: E1101 00:22:05.681432 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:22:05.681675 kubelet[2483]: E1101 00:22:05.681600 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbqd9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-6546b95b7c-fzns4_calico-system(61cf4df3-9495-4ec5-bf84-8b16f6220291): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:05.682962 kubelet[2483]: E1101 00:22:05.682911 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:22:09.446753 kubelet[2483]: E1101 00:22:09.446696 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:22:10.446495 kubelet[2483]: E1101 00:22:10.446439 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:22:11.127365 update_engine[1483]: I1101 00:22:11.127321 1483 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:22:11.127720 update_engine[1483]: I1101 00:22:11.127540 1483 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:22:11.127758 update_engine[1483]: I1101 00:22:11.127751 1483 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:22:11.230887 update_engine[1483]: E1101 00:22:11.230846 1483 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:22:11.231043 update_engine[1483]: I1101 00:22:11.230964 1483 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Nov 1 00:22:11.447143 kubelet[2483]: E1101 00:22:11.447036 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:22:13.447029 kubelet[2483]: E1101 00:22:13.446709 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:22:17.447117 kubelet[2483]: E1101 00:22:17.447073 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:22:21.126909 update_engine[1483]: I1101 00:22:21.126857 1483 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:22:21.127315 update_engine[1483]: I1101 00:22:21.127085 1483 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:22:21.127315 update_engine[1483]: I1101 00:22:21.127300 1483 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:22:21.166660 update_engine[1483]: E1101 00:22:21.166585 1483 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:22:21.166823 update_engine[1483]: I1101 00:22:21.166731 1483 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Nov 1 00:22:21.446636 kubelet[2483]: E1101 00:22:21.446517 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:22:21.447857 kubelet[2483]: E1101 00:22:21.447826 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:22:24.446337 kubelet[2483]: E1101 00:22:24.446280 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:22:25.446657 kubelet[2483]: E1101 00:22:25.446577 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:22:25.840141 systemd[1]: Started sshd@7-10.200.20.19:22-10.200.16.10:60720.service. Nov 1 00:22:25.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.16.10:60720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:25.845743 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:22:25.845964 kernel: audit: type=1130 audit(1761956545.838:1314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.16.10:60720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:26.284000 audit[5239]: USER_ACCT pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.287969 sshd[5239]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:22:26.289909 sshd[5239]: Accepted publickey for core from 10.200.16.10 port 60720 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:22:26.314251 systemd[1]: Started session-10.scope. Nov 1 00:22:26.315521 systemd-logind[1480]: New session 10 of user core. Nov 1 00:22:26.285000 audit[5239]: CRED_ACQ pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.338844 kernel: audit: type=1101 audit(1761956546.284:1315): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.339004 kernel: audit: type=1103 audit(1761956546.285:1316): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.353760 kernel: audit: type=1006 audit(1761956546.285:1317): pid=5239 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:22:26.285000 audit[5239]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed3efea0 a2=3 a3=1 items=0 ppid=1 pid=5239 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:26.377707 kernel: audit: type=1300 audit(1761956546.285:1317): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed3efea0 a2=3 a3=1 items=0 ppid=1 pid=5239 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:26.285000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:26.387291 kernel: audit: type=1327 audit(1761956546.285:1317): proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:26.388000 audit[5239]: USER_START pid=5239 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.415000 audit[5241]: CRED_ACQ pid=5241 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.439077 kernel: audit: type=1105 audit(1761956546.388:1318): pid=5239 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.439201 kernel: audit: type=1103 audit(1761956546.415:1319): pid=5241 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.446917 kubelet[2483]: E1101 00:22:26.446581 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:22:26.788706 sshd[5239]: pam_unix(sshd:session): session closed for user core Nov 1 00:22:26.788000 audit[5239]: USER_END pid=5239 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.791782 systemd[1]: sshd@7-10.200.20.19:22-10.200.16.10:60720.service: Deactivated successfully. Nov 1 00:22:26.792601 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:22:26.788000 audit[5239]: CRED_DISP pid=5239 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.816913 systemd-logind[1480]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:22:26.838475 kernel: audit: type=1106 audit(1761956546.788:1320): pid=5239 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.838635 kernel: audit: type=1104 audit(1761956546.788:1321): pid=5239 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:26.840315 systemd-logind[1480]: Removed session 10. Nov 1 00:22:26.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.16.10:60720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:28.649174 systemd[1]: run-containerd-runc-k8s.io-3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005-runc.GLsOCH.mount: Deactivated successfully. Nov 1 00:22:31.120737 update_engine[1483]: I1101 00:22:31.120685 1483 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:22:31.121086 update_engine[1483]: I1101 00:22:31.120904 1483 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:22:31.121118 update_engine[1483]: I1101 00:22:31.121102 1483 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:22:31.224277 update_engine[1483]: E1101 00:22:31.224236 1483 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:22:31.224443 update_engine[1483]: I1101 00:22:31.224346 1483 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Nov 1 00:22:31.224443 update_engine[1483]: I1101 00:22:31.224354 1483 omaha_request_action.cc:621] Omaha request response: Nov 1 00:22:31.224443 update_engine[1483]: E1101 00:22:31.224436 1483 omaha_request_action.cc:640] Omaha request network transfer failed. Nov 1 00:22:31.224518 update_engine[1483]: I1101 00:22:31.224448 1483 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Nov 1 00:22:31.224518 update_engine[1483]: I1101 00:22:31.224452 1483 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Nov 1 00:22:31.224518 update_engine[1483]: I1101 00:22:31.224454 1483 update_attempter.cc:306] Processing Done. Nov 1 00:22:31.224518 update_engine[1483]: E1101 00:22:31.224467 1483 update_attempter.cc:619] Update failed. Nov 1 00:22:31.224518 update_engine[1483]: I1101 00:22:31.224469 1483 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Nov 1 00:22:31.224518 update_engine[1483]: I1101 00:22:31.224472 1483 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Nov 1 00:22:31.224518 update_engine[1483]: I1101 00:22:31.224476 1483 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Nov 1 00:22:31.224743 update_engine[1483]: I1101 00:22:31.224560 1483 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Nov 1 00:22:31.224743 update_engine[1483]: I1101 00:22:31.224579 1483 omaha_request_action.cc:270] Posting an Omaha request to disabled Nov 1 00:22:31.224743 update_engine[1483]: I1101 00:22:31.224582 1483 omaha_request_action.cc:271] Request: Nov 1 00:22:31.224743 update_engine[1483]: Nov 1 00:22:31.224743 update_engine[1483]: Nov 1 00:22:31.224743 update_engine[1483]: Nov 1 00:22:31.224743 update_engine[1483]: Nov 1 00:22:31.224743 update_engine[1483]: Nov 1 00:22:31.224743 update_engine[1483]: Nov 1 00:22:31.224743 update_engine[1483]: I1101 00:22:31.224586 1483 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Nov 1 00:22:31.224743 update_engine[1483]: I1101 00:22:31.224731 1483 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Nov 1 00:22:31.224968 update_engine[1483]: I1101 00:22:31.224906 1483 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Nov 1 00:22:31.225317 locksmithd[1563]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Nov 1 00:22:31.268634 update_engine[1483]: E1101 00:22:31.268581 1483 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Nov 1 00:22:31.268799 update_engine[1483]: I1101 00:22:31.268705 1483 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Nov 1 00:22:31.268799 update_engine[1483]: I1101 00:22:31.268713 1483 omaha_request_action.cc:621] Omaha request response: Nov 1 00:22:31.268799 update_engine[1483]: I1101 00:22:31.268719 1483 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Nov 1 00:22:31.268799 update_engine[1483]: I1101 00:22:31.268723 1483 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Nov 1 00:22:31.268799 update_engine[1483]: I1101 00:22:31.268724 1483 update_attempter.cc:306] Processing Done. Nov 1 00:22:31.268799 update_engine[1483]: I1101 00:22:31.268728 1483 update_attempter.cc:310] Error event sent. Nov 1 00:22:31.268799 update_engine[1483]: I1101 00:22:31.268738 1483 update_check_scheduler.cc:74] Next update check in 44m20s Nov 1 00:22:31.269313 locksmithd[1563]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Nov 1 00:22:31.858602 systemd[1]: Started sshd@8-10.200.20.19:22-10.200.16.10:57324.service. Nov 1 00:22:31.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.16.10:57324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:31.865964 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:22:31.866054 kernel: audit: type=1130 audit(1761956551.857:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.16.10:57324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:32.301555 sshd[5272]: Accepted publickey for core from 10.200.16.10 port 57324 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:22:32.299000 audit[5272]: USER_ACCT pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.328545 sshd[5272]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:22:32.326000 audit[5272]: CRED_ACQ pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.334186 systemd-logind[1480]: New session 11 of user core. Nov 1 00:22:32.352869 kernel: audit: type=1101 audit(1761956552.299:1324): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.352990 kernel: audit: type=1103 audit(1761956552.326:1325): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.362192 systemd[1]: Started session-11.scope. Nov 1 00:22:32.367273 kernel: audit: type=1006 audit(1761956552.326:1326): pid=5272 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Nov 1 00:22:32.326000 audit[5272]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeeff36c0 a2=3 a3=1 items=0 ppid=1 pid=5272 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:32.396516 kernel: audit: type=1300 audit(1761956552.326:1326): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeeff36c0 a2=3 a3=1 items=0 ppid=1 pid=5272 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:32.326000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:32.409284 kernel: audit: type=1327 audit(1761956552.326:1326): proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:32.368000 audit[5272]: USER_START pid=5272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.435178 kernel: audit: type=1105 audit(1761956552.368:1327): pid=5272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.369000 audit[5274]: CRED_ACQ pid=5274 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.457430 kernel: audit: type=1103 audit(1761956552.369:1328): pid=5274 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.464130 kubelet[2483]: E1101 00:22:32.464076 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:22:32.740848 sshd[5272]: pam_unix(sshd:session): session closed for user core Nov 1 00:22:32.740000 audit[5272]: USER_END pid=5272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.743814 systemd-logind[1480]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:22:32.740000 audit[5272]: CRED_DISP pid=5272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.772441 systemd[1]: sshd@8-10.200.20.19:22-10.200.16.10:57324.service: Deactivated successfully. Nov 1 00:22:32.773313 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:22:32.774851 systemd-logind[1480]: Removed session 11. Nov 1 00:22:32.793666 kernel: audit: type=1106 audit(1761956552.740:1329): pid=5272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.793854 kernel: audit: type=1104 audit(1761956552.740:1330): pid=5272 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:32.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.16.10:57324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:33.133000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:33.133000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:33.133000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002bb82d0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:22:33.133000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:33.133000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002fd6280 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:22:33.133000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:33.446191 kubelet[2483]: E1101 00:22:33.446084 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:22:33.544000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:33.544000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=40057c65a0 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:22:33.544000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:33.544000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:33.544000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=40076f7dd0 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:22:33.544000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:33.546000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:33.546000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=40088ac680 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:22:33.546000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:33.558000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:33.558000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=40057c6600 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:22:33.558000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:33.641000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:33.641000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=4006c51a70 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:22:33.641000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:33.642000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:33.642000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=4008be2780 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:22:33.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:35.445931 kubelet[2483]: E1101 00:22:35.445884 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:22:37.810773 systemd[1]: Started sshd@9-10.200.20.19:22-10.200.16.10:57328.service. Nov 1 00:22:37.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.16.10:57328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:37.817245 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 00:22:37.817350 kernel: audit: type=1130 audit(1761956557.810:1340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.16.10:57328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:38.258000 audit[5287]: USER_ACCT pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.261876 sshd[5287]: Accepted publickey for core from 10.200.16.10 port 57328 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:22:38.285669 sshd[5287]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:22:38.283000 audit[5287]: CRED_ACQ pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.310833 kernel: audit: type=1101 audit(1761956558.258:1341): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.310941 kernel: audit: type=1103 audit(1761956558.283:1342): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.324599 kernel: audit: type=1006 audit(1761956558.283:1343): pid=5287 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Nov 1 00:22:38.327931 systemd-logind[1480]: New session 12 of user core. Nov 1 00:22:38.328636 systemd[1]: Started session-12.scope. Nov 1 00:22:38.283000 audit[5287]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbf12a30 a2=3 a3=1 items=0 ppid=1 pid=5287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:38.353428 kernel: audit: type=1300 audit(1761956558.283:1343): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbf12a30 a2=3 a3=1 items=0 ppid=1 pid=5287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:38.283000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:38.362259 kernel: audit: type=1327 audit(1761956558.283:1343): proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:38.364000 audit[5287]: USER_START pid=5287 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.391000 audit[5289]: CRED_ACQ pid=5289 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.420646 kernel: audit: type=1105 audit(1761956558.364:1344): pid=5287 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.420786 kernel: audit: type=1103 audit(1761956558.391:1345): pid=5289 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.448992 kubelet[2483]: E1101 00:22:38.448930 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:22:38.729856 sshd[5287]: pam_unix(sshd:session): session closed for user core Nov 1 00:22:38.729000 audit[5287]: USER_END pid=5287 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.733068 systemd-logind[1480]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:22:38.734372 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:22:38.735500 systemd-logind[1480]: Removed session 12. Nov 1 00:22:38.736282 systemd[1]: sshd@9-10.200.20.19:22-10.200.16.10:57328.service: Deactivated successfully. Nov 1 00:22:38.729000 audit[5287]: CRED_DISP pid=5287 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.789637 kernel: audit: type=1106 audit(1761956558.729:1346): pid=5287 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.789749 kernel: audit: type=1104 audit(1761956558.729:1347): pid=5287 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:38.734000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.16.10:57328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:39.446448 kubelet[2483]: E1101 00:22:39.446410 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:22:40.448423 kubelet[2483]: E1101 00:22:40.448363 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:22:40.772000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:40.772000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:40.772000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002fd7b40 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:22:40.772000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:40.772000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40031776c0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:22:40.772000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:40.773000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:40.773000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003177860 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:22:40.773000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:40.773000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:40.773000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003177880 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:22:40.773000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:43.800312 systemd[1]: Started sshd@10-10.200.20.19:22-10.200.16.10:39042.service. Nov 1 00:22:43.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.19:22-10.200.16.10:39042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:43.811652 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:22:43.811792 kernel: audit: type=1130 audit(1761956563.798:1353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.19:22-10.200.16.10:39042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:44.241000 audit[5300]: USER_ACCT pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.246071 sshd[5300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:22:44.248110 sshd[5300]: Accepted publickey for core from 10.200.16.10 port 39042 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:22:44.241000 audit[5300]: CRED_ACQ pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.270340 systemd[1]: Started session-13.scope. Nov 1 00:22:44.271667 systemd-logind[1480]: New session 13 of user core. Nov 1 00:22:44.289438 kernel: audit: type=1101 audit(1761956564.241:1354): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.289542 kernel: audit: type=1103 audit(1761956564.241:1355): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.310362 kernel: audit: type=1006 audit(1761956564.241:1356): pid=5300 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Nov 1 00:22:44.310645 kernel: audit: type=1300 audit(1761956564.241:1356): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6176ea0 a2=3 a3=1 items=0 ppid=1 pid=5300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:44.241000 audit[5300]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6176ea0 a2=3 a3=1 items=0 ppid=1 pid=5300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:44.241000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:44.344411 kernel: audit: type=1327 audit(1761956564.241:1356): proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:44.289000 audit[5300]: USER_START pid=5300 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.372647 kernel: audit: type=1105 audit(1761956564.289:1357): pid=5300 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.290000 audit[5304]: CRED_ACQ pid=5304 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.394213 kernel: audit: type=1103 audit(1761956564.290:1358): pid=5304 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.448253 kubelet[2483]: E1101 00:22:44.448204 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:22:44.448679 kubelet[2483]: E1101 00:22:44.448310 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:22:44.636865 sshd[5300]: pam_unix(sshd:session): session closed for user core Nov 1 00:22:44.636000 audit[5300]: USER_END pid=5300 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.640172 systemd-logind[1480]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:22:44.641225 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:22:44.642311 systemd-logind[1480]: Removed session 13. Nov 1 00:22:44.642861 systemd[1]: sshd@10-10.200.20.19:22-10.200.16.10:39042.service: Deactivated successfully. Nov 1 00:22:44.636000 audit[5300]: CRED_DISP pid=5300 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.685538 kernel: audit: type=1106 audit(1761956564.636:1359): pid=5300 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.685665 kernel: audit: type=1104 audit(1761956564.636:1360): pid=5300 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:44.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.19:22-10.200.16.10:39042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:44.705395 systemd[1]: Started sshd@11-10.200.20.19:22-10.200.16.10:39052.service. Nov 1 00:22:44.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.19:22-10.200.16.10:39052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:45.115000 audit[5315]: USER_ACCT pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:45.117740 sshd[5315]: Accepted publickey for core from 10.200.16.10 port 39052 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:22:45.117000 audit[5315]: CRED_ACQ pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:45.117000 audit[5315]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfd0eda0 a2=3 a3=1 items=0 ppid=1 pid=5315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:45.117000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:45.119512 sshd[5315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:22:45.124187 systemd[1]: Started session-14.scope. Nov 1 00:22:45.125588 systemd-logind[1480]: New session 14 of user core. Nov 1 00:22:45.128000 audit[5315]: USER_START pid=5315 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:45.129000 audit[5317]: CRED_ACQ pid=5317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:45.582086 sshd[5315]: pam_unix(sshd:session): session closed for user core Nov 1 00:22:45.582000 audit[5315]: USER_END pid=5315 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:45.582000 audit[5315]: CRED_DISP pid=5315 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:45.585449 systemd[1]: sshd@11-10.200.20.19:22-10.200.16.10:39052.service: Deactivated successfully. Nov 1 00:22:45.586326 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:22:45.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.19:22-10.200.16.10:39052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:45.587334 systemd-logind[1480]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:22:45.588325 systemd-logind[1480]: Removed session 14. Nov 1 00:22:45.651715 systemd[1]: Started sshd@12-10.200.20.19:22-10.200.16.10:39064.service. Nov 1 00:22:45.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.19:22-10.200.16.10:39064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:46.062000 audit[5325]: USER_ACCT pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:46.064258 sshd[5325]: Accepted publickey for core from 10.200.16.10 port 39064 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:22:46.063000 audit[5325]: CRED_ACQ pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:46.063000 audit[5325]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6aa5d40 a2=3 a3=1 items=0 ppid=1 pid=5325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:46.063000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:46.066081 sshd[5325]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:22:46.071235 systemd-logind[1480]: New session 15 of user core. Nov 1 00:22:46.071902 systemd[1]: Started session-15.scope. Nov 1 00:22:46.075000 audit[5325]: USER_START pid=5325 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:46.076000 audit[5327]: CRED_ACQ pid=5327 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:46.448166 sshd[5325]: pam_unix(sshd:session): session closed for user core Nov 1 00:22:46.449795 kubelet[2483]: E1101 00:22:46.449757 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:22:46.450000 audit[5325]: USER_END pid=5325 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:46.450000 audit[5325]: CRED_DISP pid=5325 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:46.454062 systemd[1]: sshd@12-10.200.20.19:22-10.200.16.10:39064.service: Deactivated successfully. Nov 1 00:22:46.454897 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:22:46.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.19:22-10.200.16.10:39064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:46.455826 systemd-logind[1480]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:22:46.456692 systemd-logind[1480]: Removed session 15. Nov 1 00:22:50.447547 kubelet[2483]: E1101 00:22:50.447494 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:22:51.446410 kubelet[2483]: E1101 00:22:51.446362 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:22:51.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.16.10:58840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:51.517103 systemd[1]: Started sshd@13-10.200.20.19:22-10.200.16.10:58840.service. Nov 1 00:22:51.522226 kernel: kauditd_printk_skb: 23 callbacks suppressed Nov 1 00:22:51.522347 kernel: audit: type=1130 audit(1761956571.515:1380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.16.10:58840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:51.958844 sshd[5337]: Accepted publickey for core from 10.200.16.10 port 58840 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:22:51.957000 audit[5337]: USER_ACCT pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:51.963409 sshd[5337]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:22:51.958000 audit[5337]: CRED_ACQ pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.007849 kernel: audit: type=1101 audit(1761956571.957:1381): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.007998 kernel: audit: type=1103 audit(1761956571.958:1382): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.022681 kernel: audit: type=1006 audit(1761956571.958:1383): pid=5337 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:22:51.958000 audit[5337]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdebb0840 a2=3 a3=1 items=0 ppid=1 pid=5337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:52.050089 kernel: audit: type=1300 audit(1761956571.958:1383): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdebb0840 a2=3 a3=1 items=0 ppid=1 pid=5337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:52.026460 systemd-logind[1480]: New session 16 of user core. Nov 1 00:22:52.058381 kernel: audit: type=1327 audit(1761956571.958:1383): proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:51.958000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:52.051601 systemd[1]: Started session-16.scope. Nov 1 00:22:52.060000 audit[5337]: USER_START pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.062000 audit[5339]: CRED_ACQ pid=5339 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.113204 kernel: audit: type=1105 audit(1761956572.060:1384): pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.113312 kernel: audit: type=1103 audit(1761956572.062:1385): pid=5339 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.398898 sshd[5337]: pam_unix(sshd:session): session closed for user core Nov 1 00:22:52.398000 audit[5337]: USER_END pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.403313 systemd-logind[1480]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:22:52.404235 systemd[1]: sshd@13-10.200.20.19:22-10.200.16.10:58840.service: Deactivated successfully. Nov 1 00:22:52.405109 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:22:52.406222 systemd-logind[1480]: Removed session 16. Nov 1 00:22:52.398000 audit[5337]: CRED_DISP pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.448175 kernel: audit: type=1106 audit(1761956572.398:1386): pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.448338 kernel: audit: type=1104 audit(1761956572.398:1387): pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:52.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.16.10:58840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:53.447386 kubelet[2483]: E1101 00:22:53.447344 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:22:57.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.16.10:58852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:57.477867 systemd[1]: Started sshd@14-10.200.20.19:22-10.200.16.10:58852.service. Nov 1 00:22:57.482949 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:22:57.483075 kernel: audit: type=1130 audit(1761956577.476:1389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.16.10:58852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:57.931649 sshd[5349]: Accepted publickey for core from 10.200.16.10 port 58852 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:22:57.929000 audit[5349]: USER_ACCT pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:57.957043 sshd[5349]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:22:57.955000 audit[5349]: CRED_ACQ pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:57.962730 systemd-logind[1480]: New session 17 of user core. Nov 1 00:22:57.994906 kernel: audit: type=1101 audit(1761956577.929:1390): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:57.994955 kernel: audit: type=1103 audit(1761956577.955:1391): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:57.994977 kernel: audit: type=1006 audit(1761956577.955:1392): pid=5349 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Nov 1 00:22:57.995464 systemd[1]: Started session-17.scope. Nov 1 00:22:57.955000 audit[5349]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd71d6d20 a2=3 a3=1 items=0 ppid=1 pid=5349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:58.027489 kernel: audit: type=1300 audit(1761956577.955:1392): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd71d6d20 a2=3 a3=1 items=0 ppid=1 pid=5349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:22:57.955000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:58.038626 kernel: audit: type=1327 audit(1761956577.955:1392): proctitle=737368643A20636F7265205B707269765D Nov 1 00:22:57.999000 audit[5349]: USER_START pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:58.065382 kernel: audit: type=1105 audit(1761956577.999:1393): pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:58.000000 audit[5351]: CRED_ACQ pid=5351 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:58.087578 kernel: audit: type=1103 audit(1761956578.000:1394): pid=5351 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:58.373508 sshd[5349]: pam_unix(sshd:session): session closed for user core Nov 1 00:22:58.373000 audit[5349]: USER_END pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:58.373000 audit[5349]: CRED_DISP pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:58.402534 systemd[1]: sshd@14-10.200.20.19:22-10.200.16.10:58852.service: Deactivated successfully. Nov 1 00:22:58.403387 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:22:58.425312 kernel: audit: type=1106 audit(1761956578.373:1395): pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:58.425450 kernel: audit: type=1104 audit(1761956578.373:1396): pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:22:58.426188 systemd-logind[1480]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:22:58.427102 systemd-logind[1480]: Removed session 17. Nov 1 00:22:58.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.16.10:58852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:22:58.447801 kubelet[2483]: E1101 00:22:58.447756 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:22:58.658493 systemd[1]: run-containerd-runc-k8s.io-3148a4561d38dc3dab560220e5f8d16a32130e9a6dc2c852e81659e28377c005-runc.Rvd9hp.mount: Deactivated successfully. Nov 1 00:22:59.446879 kubelet[2483]: E1101 00:22:59.446834 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:23:00.446474 kubelet[2483]: E1101 00:23:00.446433 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:23:03.444125 systemd[1]: Started sshd@15-10.200.20.19:22-10.200.16.10:47122.service. Nov 1 00:23:03.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.16.10:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:03.450282 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:23:03.450423 kernel: audit: type=1130 audit(1761956583.442:1398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.16.10:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:03.451374 kubelet[2483]: E1101 00:23:03.451339 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:23:03.889100 sshd[5386]: Accepted publickey for core from 10.200.16.10 port 47122 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:03.887000 audit[5386]: USER_ACCT pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:03.915252 sshd[5386]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:03.913000 audit[5386]: CRED_ACQ pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:03.940271 kernel: audit: type=1101 audit(1761956583.887:1399): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:03.940416 kernel: audit: type=1103 audit(1761956583.913:1400): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:03.913000 audit[5386]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda7d7720 a2=3 a3=1 items=0 ppid=1 pid=5386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:03.959024 systemd[1]: Started session-18.scope. Nov 1 00:23:03.979249 kernel: audit: type=1006 audit(1761956583.913:1401): pid=5386 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Nov 1 00:23:03.979364 kernel: audit: type=1300 audit(1761956583.913:1401): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda7d7720 a2=3 a3=1 items=0 ppid=1 pid=5386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:03.979340 systemd-logind[1480]: New session 18 of user core. Nov 1 00:23:03.913000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:03.987804 kernel: audit: type=1327 audit(1761956583.913:1401): proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:03.991000 audit[5386]: USER_START pid=5386 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:03.991000 audit[5388]: CRED_ACQ pid=5388 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:04.041369 kernel: audit: type=1105 audit(1761956583.991:1402): pid=5386 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:04.041510 kernel: audit: type=1103 audit(1761956583.991:1403): pid=5388 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:04.338878 sshd[5386]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:04.338000 audit[5386]: USER_END pid=5386 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:04.343093 systemd-logind[1480]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:23:04.344091 systemd[1]: sshd@15-10.200.20.19:22-10.200.16.10:47122.service: Deactivated successfully. Nov 1 00:23:04.344978 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:23:04.346388 systemd-logind[1480]: Removed session 18. Nov 1 00:23:04.338000 audit[5386]: CRED_DISP pid=5386 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:04.391940 kernel: audit: type=1106 audit(1761956584.338:1404): pid=5386 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:04.392094 kernel: audit: type=1104 audit(1761956584.338:1405): pid=5386 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:04.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.16.10:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:06.447728 kubelet[2483]: E1101 00:23:06.447607 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:23:06.473370 kubelet[2483]: E1101 00:23:06.448495 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:23:09.408152 systemd[1]: Started sshd@16-10.200.20.19:22-10.200.16.10:47136.service. Nov 1 00:23:09.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.16.10:47136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:09.414648 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:23:09.414803 kernel: audit: type=1130 audit(1761956589.406:1407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.16.10:47136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:09.851000 audit[5399]: USER_ACCT pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:09.854513 sshd[5399]: Accepted publickey for core from 10.200.16.10 port 47136 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:09.875000 audit[5399]: CRED_ACQ pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:09.877800 sshd[5399]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:09.899689 kernel: audit: type=1101 audit(1761956589.851:1408): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:09.899883 kernel: audit: type=1103 audit(1761956589.875:1409): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:09.904987 systemd[1]: Started session-19.scope. Nov 1 00:23:09.906184 systemd-logind[1480]: New session 19 of user core. Nov 1 00:23:09.918501 kernel: audit: type=1006 audit(1761956589.875:1410): pid=5399 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Nov 1 00:23:09.875000 audit[5399]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb2c4370 a2=3 a3=1 items=0 ppid=1 pid=5399 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:09.945830 kernel: audit: type=1300 audit(1761956589.875:1410): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb2c4370 a2=3 a3=1 items=0 ppid=1 pid=5399 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:09.875000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:09.954165 kernel: audit: type=1327 audit(1761956589.875:1410): proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:09.954310 kernel: audit: type=1105 audit(1761956589.919:1411): pid=5399 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:09.919000 audit[5399]: USER_START pid=5399 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:09.920000 audit[5404]: CRED_ACQ pid=5404 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:10.001295 kernel: audit: type=1103 audit(1761956589.920:1412): pid=5404 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:10.276660 sshd[5399]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:10.276000 audit[5399]: USER_END pid=5399 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:10.280300 systemd-logind[1480]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:23:10.281489 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:23:10.282479 systemd-logind[1480]: Removed session 19. Nov 1 00:23:10.283381 systemd[1]: sshd@16-10.200.20.19:22-10.200.16.10:47136.service: Deactivated successfully. Nov 1 00:23:10.276000 audit[5399]: CRED_DISP pid=5399 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:10.325306 kernel: audit: type=1106 audit(1761956590.276:1413): pid=5399 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:10.325496 kernel: audit: type=1104 audit(1761956590.276:1414): pid=5399 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:10.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.16.10:47136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:11.446350 kubelet[2483]: E1101 00:23:11.445970 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:23:12.448014 kubelet[2483]: E1101 00:23:12.447892 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:23:13.446988 kubelet[2483]: E1101 00:23:13.446932 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:23:15.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.19:22-10.200.16.10:51078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:15.357745 systemd[1]: Started sshd@17-10.200.20.19:22-10.200.16.10:51078.service. Nov 1 00:23:15.362841 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:23:15.362962 kernel: audit: type=1130 audit(1761956595.356:1416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.19:22-10.200.16.10:51078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:15.446917 kubelet[2483]: E1101 00:23:15.446875 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:23:15.773775 sshd[5424]: Accepted publickey for core from 10.200.16.10 port 51078 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:15.772000 audit[5424]: USER_ACCT pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:15.799681 sshd[5424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:15.797000 audit[5424]: CRED_ACQ pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:15.824549 kernel: audit: type=1101 audit(1761956595.772:1417): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:15.824699 kernel: audit: type=1103 audit(1761956595.797:1418): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:15.829276 systemd-logind[1480]: New session 20 of user core. Nov 1 00:23:15.829918 systemd[1]: Started session-20.scope. Nov 1 00:23:15.848695 kernel: audit: type=1006 audit(1761956595.797:1419): pid=5424 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Nov 1 00:23:15.797000 audit[5424]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdcf16e0 a2=3 a3=1 items=0 ppid=1 pid=5424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:15.875154 kernel: audit: type=1300 audit(1761956595.797:1419): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdcf16e0 a2=3 a3=1 items=0 ppid=1 pid=5424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:15.797000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:15.884662 kernel: audit: type=1327 audit(1761956595.797:1419): proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:15.847000 audit[5424]: USER_START pid=5424 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:15.913688 kernel: audit: type=1105 audit(1761956595.847:1420): pid=5424 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:15.874000 audit[5426]: CRED_ACQ pid=5426 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:15.938433 kernel: audit: type=1103 audit(1761956595.874:1421): pid=5426 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:16.218878 sshd[5424]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:16.219000 audit[5424]: USER_END pid=5424 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:16.247761 systemd[1]: sshd@17-10.200.20.19:22-10.200.16.10:51078.service: Deactivated successfully. Nov 1 00:23:16.248586 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:23:16.249876 systemd-logind[1480]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:23:16.250769 systemd-logind[1480]: Removed session 20. Nov 1 00:23:16.219000 audit[5424]: CRED_DISP pid=5424 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:16.285526 kernel: audit: type=1106 audit(1761956596.219:1422): pid=5424 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:16.285682 kernel: audit: type=1104 audit(1761956596.219:1423): pid=5424 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:16.290400 systemd[1]: Started sshd@18-10.200.20.19:22-10.200.16.10:51094.service. Nov 1 00:23:16.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.19:22-10.200.16.10:51078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:16.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.19:22-10.200.16.10:51094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:16.706000 audit[5435]: USER_ACCT pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:16.708307 sshd[5435]: Accepted publickey for core from 10.200.16.10 port 51094 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:16.708000 audit[5435]: CRED_ACQ pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:16.708000 audit[5435]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe298aad0 a2=3 a3=1 items=0 ppid=1 pid=5435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:16.708000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:16.710519 sshd[5435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:16.715363 systemd-logind[1480]: New session 21 of user core. Nov 1 00:23:16.715824 systemd[1]: Started session-21.scope. Nov 1 00:23:16.719000 audit[5435]: USER_START pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:16.720000 audit[5437]: CRED_ACQ pid=5437 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:17.391299 sshd[5435]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:17.391000 audit[5435]: USER_END pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:17.391000 audit[5435]: CRED_DISP pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:17.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.19:22-10.200.16.10:51094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:17.394591 systemd[1]: sshd@18-10.200.20.19:22-10.200.16.10:51094.service: Deactivated successfully. Nov 1 00:23:17.395441 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:23:17.396034 systemd-logind[1480]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:23:17.397307 systemd-logind[1480]: Removed session 21. Nov 1 00:23:17.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.19:22-10.200.16.10:51108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:17.460564 systemd[1]: Started sshd@19-10.200.20.19:22-10.200.16.10:51108.service. Nov 1 00:23:17.877224 sshd[5444]: Accepted publickey for core from 10.200.16.10 port 51108 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:17.875000 audit[5444]: USER_ACCT pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:17.876000 audit[5444]: CRED_ACQ pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:17.876000 audit[5444]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc5bc420 a2=3 a3=1 items=0 ppid=1 pid=5444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:17.876000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:17.878921 sshd[5444]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:17.883820 systemd[1]: Started session-22.scope. Nov 1 00:23:17.884468 systemd-logind[1480]: New session 22 of user core. Nov 1 00:23:17.888000 audit[5444]: USER_START pid=5444 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:17.889000 audit[5446]: CRED_ACQ pid=5446 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:18.756467 sshd[5444]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:18.755000 audit[5444]: USER_END pid=5444 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:18.756000 audit[5444]: CRED_DISP pid=5444 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:18.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.19:22-10.200.16.10:51108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:18.759845 systemd[1]: sshd@19-10.200.20.19:22-10.200.16.10:51108.service: Deactivated successfully. Nov 1 00:23:18.760678 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:23:18.761656 systemd-logind[1480]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:23:18.762775 systemd-logind[1480]: Removed session 22. Nov 1 00:23:18.774000 audit[5459]: NETFILTER_CFG table=filter:133 family=2 entries=14 op=nft_register_rule pid=5459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:23:18.774000 audit[5459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcc8eb570 a2=0 a3=1 items=0 ppid=2587 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:18.774000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:23:18.781000 audit[5459]: NETFILTER_CFG table=nat:134 family=2 entries=20 op=nft_register_rule pid=5459 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:23:18.781000 audit[5459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffcc8eb570 a2=0 a3=1 items=0 ppid=2587 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:18.781000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:23:18.810000 audit[5461]: NETFILTER_CFG table=filter:135 family=2 entries=26 op=nft_register_rule pid=5461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:23:18.810000 audit[5461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffcf73e0c0 a2=0 a3=1 items=0 ppid=2587 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:18.810000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:23:18.818000 audit[5461]: NETFILTER_CFG table=nat:136 family=2 entries=20 op=nft_register_rule pid=5461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:23:18.818000 audit[5461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffcf73e0c0 a2=0 a3=1 items=0 ppid=2587 pid=5461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:18.818000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:23:18.824704 systemd[1]: Started sshd@20-10.200.20.19:22-10.200.16.10:51114.service. Nov 1 00:23:18.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.19:22-10.200.16.10:51114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:19.244000 audit[5463]: USER_ACCT pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:19.246613 sshd[5463]: Accepted publickey for core from 10.200.16.10 port 51114 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:19.246000 audit[5463]: CRED_ACQ pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:19.246000 audit[5463]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbf862a0 a2=3 a3=1 items=0 ppid=1 pid=5463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:19.246000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:19.248438 sshd[5463]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:19.254278 systemd[1]: Started session-23.scope. Nov 1 00:23:19.254956 systemd-logind[1480]: New session 23 of user core. Nov 1 00:23:19.259000 audit[5463]: USER_START pid=5463 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:19.261000 audit[5465]: CRED_ACQ pid=5465 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:19.820706 sshd[5463]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:19.820000 audit[5463]: USER_END pid=5463 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:19.821000 audit[5463]: CRED_DISP pid=5463 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:19.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.19:22-10.200.16.10:51114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:19.824490 systemd[1]: sshd@20-10.200.20.19:22-10.200.16.10:51114.service: Deactivated successfully. Nov 1 00:23:19.825364 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:23:19.826953 systemd-logind[1480]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:23:19.828127 systemd-logind[1480]: Removed session 23. Nov 1 00:23:19.895922 systemd[1]: Started sshd@21-10.200.20.19:22-10.200.16.10:42402.service. Nov 1 00:23:19.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.16.10:42402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:20.349756 sshd[5472]: Accepted publickey for core from 10.200.16.10 port 42402 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:20.348000 audit[5472]: USER_ACCT pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.349000 audit[5472]: CRED_ACQ pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.349000 audit[5472]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe30e0ca0 a2=3 a3=1 items=0 ppid=1 pid=5472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:20.349000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:20.351825 sshd[5472]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:20.356561 systemd[1]: Started session-24.scope. Nov 1 00:23:20.357178 systemd-logind[1480]: New session 24 of user core. Nov 1 00:23:20.360000 audit[5472]: USER_START pid=5472 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.368671 kernel: kauditd_printk_skb: 52 callbacks suppressed Nov 1 00:23:20.368819 kernel: audit: type=1105 audit(1761956600.360:1460): pid=5472 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.395000 audit[5474]: CRED_ACQ pid=5474 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.418666 kernel: audit: type=1103 audit(1761956600.395:1461): pid=5474 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.448806 kubelet[2483]: E1101 00:23:20.448755 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:23:20.775820 sshd[5472]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:20.775000 audit[5472]: USER_END pid=5472 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.803495 systemd[1]: sshd@21-10.200.20.19:22-10.200.16.10:42402.service: Deactivated successfully. Nov 1 00:23:20.804325 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:23:20.805271 systemd-logind[1480]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:23:20.806200 systemd-logind[1480]: Removed session 24. Nov 1 00:23:20.775000 audit[5472]: CRED_DISP pid=5472 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.835308 kernel: audit: type=1106 audit(1761956600.775:1462): pid=5472 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.835442 kernel: audit: type=1104 audit(1761956600.775:1463): pid=5472 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:20.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.16.10:42402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:20.861191 kernel: audit: type=1131 audit(1761956600.802:1464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.16.10:42402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:21.446187 kubelet[2483]: E1101 00:23:21.446152 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:23:24.510000 audit[5484]: NETFILTER_CFG table=filter:137 family=2 entries=26 op=nft_register_rule pid=5484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:23:24.510000 audit[5484]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdc25a6f0 a2=0 a3=1 items=0 ppid=2587 pid=5484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:24.559204 kernel: audit: type=1325 audit(1761956604.510:1465): table=filter:137 family=2 entries=26 op=nft_register_rule pid=5484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:23:24.559340 kernel: audit: type=1300 audit(1761956604.510:1465): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdc25a6f0 a2=0 a3=1 items=0 ppid=2587 pid=5484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:24.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:23:24.574690 kernel: audit: type=1327 audit(1761956604.510:1465): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:23:24.530000 audit[5484]: NETFILTER_CFG table=nat:138 family=2 entries=104 op=nft_register_chain pid=5484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:23:24.590368 kernel: audit: type=1325 audit(1761956604.530:1466): table=nat:138 family=2 entries=104 op=nft_register_chain pid=5484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:23:24.530000 audit[5484]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffdc25a6f0 a2=0 a3=1 items=0 ppid=2587 pid=5484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:24.618887 kernel: audit: type=1300 audit(1761956604.530:1466): arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffdc25a6f0 a2=0 a3=1 items=0 ppid=2587 pid=5484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:24.530000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:23:25.446981 kubelet[2483]: E1101 00:23:25.446917 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:23:25.447650 env[1493]: time="2025-11-01T00:23:25.447594247Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:23:25.825592 env[1493]: time="2025-11-01T00:23:25.825536645Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:25.830323 env[1493]: time="2025-11-01T00:23:25.830236046Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:23:25.830583 kubelet[2483]: E1101 00:23:25.830532 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:23:25.830677 kubelet[2483]: E1101 00:23:25.830588 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:23:25.830768 kubelet[2483]: E1101 00:23:25.830728 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:23ceceeffe7f468b9e31b12311d593ed,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:25.833763 env[1493]: time="2025-11-01T00:23:25.833521566Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:23:25.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.19:22-10.200.16.10:42408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:25.854117 systemd[1]: Started sshd@22-10.200.20.19:22-10.200.16.10:42408.service. Nov 1 00:23:25.859270 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:23:25.859328 kernel: audit: type=1130 audit(1761956605.852:1467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.19:22-10.200.16.10:42408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:26.078667 env[1493]: time="2025-11-01T00:23:26.078358631Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:26.082295 env[1493]: time="2025-11-01T00:23:26.082138991Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:23:26.082674 kubelet[2483]: E1101 00:23:26.082606 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:23:26.082812 kubelet[2483]: E1101 00:23:26.082794 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:23:26.083059 kubelet[2483]: E1101 00:23:26.083011 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-v47g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6f68476947-5gd4l_calico-system(97a994ab-2ddd-40e4-9a61-19b37b9bbf5a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:26.084403 kubelet[2483]: E1101 00:23:26.084354 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:23:26.310000 audit[5486]: USER_ACCT pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.312181 sshd[5486]: Accepted publickey for core from 10.200.16.10 port 42408 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:26.334000 audit[5486]: CRED_ACQ pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.337141 sshd[5486]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:26.358149 kernel: audit: type=1101 audit(1761956606.310:1468): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.358282 kernel: audit: type=1103 audit(1761956606.334:1469): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.373220 kernel: audit: type=1006 audit(1761956606.335:1470): pid=5486 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:23:26.335000 audit[5486]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2a98290 a2=3 a3=1 items=0 ppid=1 pid=5486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:26.398390 kernel: audit: type=1300 audit(1761956606.335:1470): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2a98290 a2=3 a3=1 items=0 ppid=1 pid=5486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:26.335000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:26.409403 kernel: audit: type=1327 audit(1761956606.335:1470): proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:26.410356 systemd-logind[1480]: New session 25 of user core. Nov 1 00:23:26.410876 systemd[1]: Started session-25.scope. Nov 1 00:23:26.414000 audit[5486]: USER_START pid=5486 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.441000 audit[5488]: CRED_ACQ pid=5488 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.448603 env[1493]: time="2025-11-01T00:23:26.448566548Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:23:26.464826 kernel: audit: type=1105 audit(1761956606.414:1471): pid=5486 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.464975 kernel: audit: type=1103 audit(1761956606.441:1472): pid=5488 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.772884 sshd[5486]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:26.772000 audit[5486]: USER_END pid=5486 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.778985 systemd-logind[1480]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:23:26.780153 systemd[1]: sshd@22-10.200.20.19:22-10.200.16.10:42408.service: Deactivated successfully. Nov 1 00:23:26.780950 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:23:26.782407 systemd-logind[1480]: Removed session 25. Nov 1 00:23:26.772000 audit[5486]: CRED_DISP pid=5486 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.824497 kernel: audit: type=1106 audit(1761956606.772:1473): pid=5486 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.824635 kernel: audit: type=1104 audit(1761956606.772:1474): pid=5486 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:26.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.19:22-10.200.16.10:42408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:26.827175 env[1493]: time="2025-11-01T00:23:26.827126826Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:26.831141 env[1493]: time="2025-11-01T00:23:26.831063226Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:23:26.831448 kubelet[2483]: E1101 00:23:26.831416 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:26.831793 kubelet[2483]: E1101 00:23:26.831772 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:26.832055 kubelet[2483]: E1101 00:23:26.832004 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j52db,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-gh77j_calico-apiserver(142cddeb-2de3-4f33-b2e2-51c515867ae1): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:26.833736 kubelet[2483]: E1101 00:23:26.833661 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:23:28.448546 env[1493]: time="2025-11-01T00:23:28.448234948Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:23:28.686872 env[1493]: time="2025-11-01T00:23:28.686822652Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:28.690842 env[1493]: time="2025-11-01T00:23:28.690769413Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:23:28.691560 kubelet[2483]: E1101 00:23:28.691261 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:23:28.691560 kubelet[2483]: E1101 00:23:28.691319 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:23:28.691560 kubelet[2483]: E1101 00:23:28.691489 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k7frb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hc9wn_calico-system(cd0e393b-2cb9-479a-a6d3-1d4da4894369): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:28.692734 kubelet[2483]: E1101 00:23:28.692666 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:23:31.446463 env[1493]: time="2025-11-01T00:23:31.446427966Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:23:31.696283 env[1493]: time="2025-11-01T00:23:31.696231631Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:31.699572 env[1493]: time="2025-11-01T00:23:31.699461992Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:23:31.700392 kubelet[2483]: E1101 00:23:31.699908 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:23:31.700392 kubelet[2483]: E1101 00:23:31.699952 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:23:31.700392 kubelet[2483]: E1101 00:23:31.700095 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:31.702309 env[1493]: time="2025-11-01T00:23:31.702281872Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:23:31.841880 systemd[1]: Started sshd@23-10.200.20.19:22-10.200.16.10:59048.service. Nov 1 00:23:31.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.16.10:59048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:31.850688 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:23:31.850766 kernel: audit: type=1130 audit(1761956611.840:1476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.16.10:59048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:31.954959 env[1493]: time="2025-11-01T00:23:31.954329377Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:31.958814 env[1493]: time="2025-11-01T00:23:31.958751937Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:23:31.963326 kubelet[2483]: E1101 00:23:31.962829 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:23:31.963326 kubelet[2483]: E1101 00:23:31.962893 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:23:31.963326 kubelet[2483]: E1101 00:23:31.963043 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-g5gsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-9mw49_calico-system(d1bae2b3-184b-4fab-8bf3-245332cdbb4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:31.964421 kubelet[2483]: E1101 00:23:31.964352 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:23:32.280000 audit[5520]: USER_ACCT pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.283968 sshd[5520]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:32.305670 sshd[5520]: Accepted publickey for core from 10.200.16.10 port 59048 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:32.311061 systemd[1]: Started session-26.scope. Nov 1 00:23:32.312136 systemd-logind[1480]: New session 26 of user core. Nov 1 00:23:32.281000 audit[5520]: CRED_ACQ pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.346846 kernel: audit: type=1101 audit(1761956612.280:1477): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.346945 kernel: audit: type=1103 audit(1761956612.281:1478): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.366655 kernel: audit: type=1006 audit(1761956612.282:1479): pid=5520 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 00:23:32.282000 audit[5520]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc17e1ea0 a2=3 a3=1 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:32.391642 kernel: audit: type=1300 audit(1761956612.282:1479): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc17e1ea0 a2=3 a3=1 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:32.282000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:32.404772 kernel: audit: type=1327 audit(1761956612.282:1479): proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:32.315000 audit[5520]: USER_START pid=5520 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.435325 kernel: audit: type=1105 audit(1761956612.315:1480): pid=5520 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.435465 kernel: audit: type=1103 audit(1761956612.316:1481): pid=5522 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.316000 audit[5522]: CRED_ACQ pid=5522 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.657379 sshd[5520]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:32.656000 audit[5520]: USER_END pid=5520 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.660246 systemd-logind[1480]: Session 26 logged out. Waiting for processes to exit. Nov 1 00:23:32.661560 systemd[1]: sshd@23-10.200.20.19:22-10.200.16.10:59048.service: Deactivated successfully. Nov 1 00:23:32.662330 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 00:23:32.663782 systemd-logind[1480]: Removed session 26. Nov 1 00:23:32.656000 audit[5520]: CRED_DISP pid=5520 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.707121 kernel: audit: type=1106 audit(1761956612.656:1482): pid=5520 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.707248 kernel: audit: type=1104 audit(1761956612.656:1483): pid=5520 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:32.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.16.10:59048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:33.135000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:33.135000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001fd09a0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:23:33.135000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:33.135000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:33.135000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000b77590 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:23:33.135000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:33.545000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:33.545000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=400e259a70 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:23:33.545000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:33.546000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:33.546000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40115b5180 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:23:33.546000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:33.546000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:33.546000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=400e259b30 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:23:33.546000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:33.558000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:33.558000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=400e259c20 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:23:33.558000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:33.642000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:33.642000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4007e2d560 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:23:33.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:33.642000 audit[2359]: AVC avc: denied { watch } for pid=2359 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:33.642000 audit[2359]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=40067c45e0 a2=fc6 a3=0 items=0 ppid=2222 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c224,c567 key=(null) Nov 1 00:23:33.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:36.449104 env[1493]: time="2025-11-01T00:23:36.449050218Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:23:36.688222 env[1493]: time="2025-11-01T00:23:36.688168401Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:36.695456 env[1493]: time="2025-11-01T00:23:36.695385322Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:23:36.695702 kubelet[2483]: E1101 00:23:36.695655 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:36.695973 kubelet[2483]: E1101 00:23:36.695709 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:36.695973 kubelet[2483]: E1101 00:23:36.695834 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ncpzr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cddcf5574-mwskz_calico-apiserver(8fc92f66-851e-47b9-a145-ba988de2a931): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:36.697364 kubelet[2483]: E1101 00:23:36.697315 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:23:37.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.16.10:59058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:37.730746 systemd[1]: Started sshd@24-10.200.20.19:22-10.200.16.10:59058.service. Nov 1 00:23:37.735991 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 00:23:37.736108 kernel: audit: type=1130 audit(1761956617.729:1493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.16.10:59058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:38.143000 audit[5559]: USER_ACCT pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.145304 sshd[5559]: Accepted publickey for core from 10.200.16.10 port 59058 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:38.168000 audit[5559]: CRED_ACQ pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.171101 sshd[5559]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:38.192735 kernel: audit: type=1101 audit(1761956618.143:1494): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.192843 kernel: audit: type=1103 audit(1761956618.168:1495): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.207509 kernel: audit: type=1006 audit(1761956618.168:1496): pid=5559 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Nov 1 00:23:38.168000 audit[5559]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0c0f960 a2=3 a3=1 items=0 ppid=1 pid=5559 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:38.213017 systemd-logind[1480]: New session 27 of user core. Nov 1 00:23:38.218843 systemd[1]: Started session-27.scope. Nov 1 00:23:38.232124 kernel: audit: type=1300 audit(1761956618.168:1496): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0c0f960 a2=3 a3=1 items=0 ppid=1 pid=5559 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:38.168000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:38.243416 kernel: audit: type=1327 audit(1761956618.168:1496): proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:38.231000 audit[5559]: USER_START pid=5559 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.268910 kernel: audit: type=1105 audit(1761956618.231:1497): pid=5559 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.233000 audit[5561]: CRED_ACQ pid=5561 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.294787 kernel: audit: type=1103 audit(1761956618.233:1498): pid=5561 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.447209 env[1493]: time="2025-11-01T00:23:38.447100652Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:23:38.574922 sshd[5559]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:38.574000 audit[5559]: USER_END pid=5559 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.578216 systemd-logind[1480]: Session 27 logged out. Waiting for processes to exit. Nov 1 00:23:38.579291 systemd[1]: sshd@24-10.200.20.19:22-10.200.16.10:59058.service: Deactivated successfully. Nov 1 00:23:38.580146 systemd[1]: session-27.scope: Deactivated successfully. Nov 1 00:23:38.581510 systemd-logind[1480]: Removed session 27. Nov 1 00:23:38.574000 audit[5559]: CRED_DISP pid=5559 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.626091 kernel: audit: type=1106 audit(1761956618.574:1499): pid=5559 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.626224 kernel: audit: type=1104 audit(1761956618.574:1500): pid=5559 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:38.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.16.10:59058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:38.709192 env[1493]: time="2025-11-01T00:23:38.709074118Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:38.713331 env[1493]: time="2025-11-01T00:23:38.713269358Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:23:38.713724 kubelet[2483]: E1101 00:23:38.713674 2483 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:23:38.714059 kubelet[2483]: E1101 00:23:38.713729 2483 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:23:38.714059 kubelet[2483]: E1101 00:23:38.713859 2483 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbqd9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-6546b95b7c-fzns4_calico-system(61cf4df3-9495-4ec5-bf84-8b16f6220291): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:38.715031 kubelet[2483]: E1101 00:23:38.715001 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:23:39.446661 kubelet[2483]: E1101 00:23:39.446596 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a" Nov 1 00:23:40.774000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:40.774000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:40.774000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001fd1300 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:23:40.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:40.775000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:40.774000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b1a240 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:23:40.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:40.775000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001fd14a0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:23:40.775000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:40.776000 audit[2306]: AVC avc: denied { watch } for pid=2306 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:40.776000 audit[2306]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001fd14c0 a2=fc6 a3=0 items=0 ppid=2166 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c760 key=(null) Nov 1 00:23:40.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:41.446120 kubelet[2483]: E1101 00:23:41.446050 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-gh77j" podUID="142cddeb-2de3-4f33-b2e2-51c515867ae1" Nov 1 00:23:42.448953 kubelet[2483]: E1101 00:23:42.448913 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hc9wn" podUID="cd0e393b-2cb9-479a-a6d3-1d4da4894369" Nov 1 00:23:43.645664 systemd[1]: Started sshd@25-10.200.20.19:22-10.200.16.10:57442.service. Nov 1 00:23:43.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.16.10:57442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:43.651829 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:23:43.651925 kernel: audit: type=1130 audit(1761956623.644:1506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.16.10:57442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:44.090212 sshd[5570]: Accepted publickey for core from 10.200.16.10 port 57442 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:44.088000 audit[5570]: USER_ACCT pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.118099 sshd[5570]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:44.116000 audit[5570]: CRED_ACQ pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.144456 kernel: audit: type=1101 audit(1761956624.088:1507): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.144616 kernel: audit: type=1103 audit(1761956624.116:1508): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.148536 systemd-logind[1480]: New session 28 of user core. Nov 1 00:23:44.160209 kernel: audit: type=1006 audit(1761956624.116:1509): pid=5570 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Nov 1 00:23:44.160737 systemd[1]: Started session-28.scope. Nov 1 00:23:44.116000 audit[5570]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe06f2e20 a2=3 a3=1 items=0 ppid=1 pid=5570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:44.186882 kernel: audit: type=1300 audit(1761956624.116:1509): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe06f2e20 a2=3 a3=1 items=0 ppid=1 pid=5570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:44.116000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:44.196494 kernel: audit: type=1327 audit(1761956624.116:1509): proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:44.196000 audit[5570]: USER_START pid=5570 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.224198 kernel: audit: type=1105 audit(1761956624.196:1510): pid=5570 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.223000 audit[5574]: CRED_ACQ pid=5574 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.248501 kernel: audit: type=1103 audit(1761956624.223:1511): pid=5574 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.568918 sshd[5570]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:44.569000 audit[5570]: USER_END pid=5570 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.572773 systemd-logind[1480]: Session 28 logged out. Waiting for processes to exit. Nov 1 00:23:44.587080 systemd[1]: sshd@25-10.200.20.19:22-10.200.16.10:57442.service: Deactivated successfully. Nov 1 00:23:44.587923 systemd[1]: session-28.scope: Deactivated successfully. Nov 1 00:23:44.589709 systemd-logind[1480]: Removed session 28. Nov 1 00:23:44.569000 audit[5570]: CRED_DISP pid=5570 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.621920 kernel: audit: type=1106 audit(1761956624.569:1512): pid=5570 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.622080 kernel: audit: type=1104 audit(1761956624.569:1513): pid=5570 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:44.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.16.10:57442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:45.446683 kubelet[2483]: E1101 00:23:45.446640 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-9mw49" podUID="d1bae2b3-184b-4fab-8bf3-245332cdbb4f" Nov 1 00:23:49.645414 systemd[1]: Started sshd@26-10.200.20.19:22-10.200.16.10:57454.service. Nov 1 00:23:49.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.16.10:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:49.652727 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:23:49.652804 kernel: audit: type=1130 audit(1761956629.643:1515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.16.10:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:50.100000 audit[5584]: USER_ACCT pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.104123 sshd[5584]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:23:50.105047 sshd[5584]: Accepted publickey for core from 10.200.16.10 port 57454 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:23:50.102000 audit[5584]: CRED_ACQ pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.149013 kernel: audit: type=1101 audit(1761956630.100:1516): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.149150 kernel: audit: type=1103 audit(1761956630.102:1517): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.163925 kernel: audit: type=1006 audit(1761956630.102:1518): pid=5584 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Nov 1 00:23:50.102000 audit[5584]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1c6b840 a2=3 a3=1 items=0 ppid=1 pid=5584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:50.189752 kernel: audit: type=1300 audit(1761956630.102:1518): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1c6b840 a2=3 a3=1 items=0 ppid=1 pid=5584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:23:50.168701 systemd-logind[1480]: New session 29 of user core. Nov 1 00:23:50.170151 systemd[1]: Started session-29.scope. Nov 1 00:23:50.102000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:50.199436 kernel: audit: type=1327 audit(1761956630.102:1518): proctitle=737368643A20636F7265205B707269765D Nov 1 00:23:50.189000 audit[5584]: USER_START pid=5584 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.225781 kernel: audit: type=1105 audit(1761956630.189:1519): pid=5584 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.191000 audit[5586]: CRED_ACQ pid=5586 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.248516 kernel: audit: type=1103 audit(1761956630.191:1520): pid=5586 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.446749 kubelet[2483]: E1101 00:23:50.446635 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6546b95b7c-fzns4" podUID="61cf4df3-9495-4ec5-bf84-8b16f6220291" Nov 1 00:23:50.447136 kubelet[2483]: E1101 00:23:50.447087 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cddcf5574-mwskz" podUID="8fc92f66-851e-47b9-a145-ba988de2a931" Nov 1 00:23:50.544480 sshd[5584]: pam_unix(sshd:session): session closed for user core Nov 1 00:23:50.543000 audit[5584]: USER_END pid=5584 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.547234 systemd-logind[1480]: Session 29 logged out. Waiting for processes to exit. Nov 1 00:23:50.548294 systemd[1]: session-29.scope: Deactivated successfully. Nov 1 00:23:50.549410 systemd-logind[1480]: Removed session 29. Nov 1 00:23:50.549970 systemd[1]: sshd@26-10.200.20.19:22-10.200.16.10:57454.service: Deactivated successfully. Nov 1 00:23:50.543000 audit[5584]: CRED_DISP pid=5584 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.600890 kernel: audit: type=1106 audit(1761956630.543:1521): pid=5584 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.601026 kernel: audit: type=1104 audit(1761956630.543:1522): pid=5584 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:23:50.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.16.10:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:23:52.447924 kubelet[2483]: E1101 00:23:52.447683 2483 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6f68476947-5gd4l" podUID="97a994ab-2ddd-40e4-9a61-19b37b9bbf5a"