Nov 1 00:14:49.692562 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Nov 1 00:14:49.692582 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Oct 31 23:12:38 -00 2025 Nov 1 00:14:49.692589 kernel: efi: EFI v2.70 by EDK II Nov 1 00:14:49.692595 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Nov 1 00:14:49.692600 kernel: random: crng init done Nov 1 00:14:49.692606 kernel: ACPI: Early table checksum verification disabled Nov 1 00:14:49.692612 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Nov 1 00:14:49.692619 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Nov 1 00:14:49.692624 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692629 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692635 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692640 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692646 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692651 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692659 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692665 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692685 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:14:49.692694 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Nov 1 00:14:49.692702 kernel: NUMA: Failed to initialise from firmware Nov 1 00:14:49.692708 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Nov 1 00:14:49.692714 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Nov 1 00:14:49.692721 kernel: Zone ranges: Nov 1 00:14:49.692728 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Nov 1 00:14:49.692737 kernel: DMA32 empty Nov 1 00:14:49.692743 kernel: Normal empty Nov 1 00:14:49.692748 kernel: Movable zone start for each node Nov 1 00:14:49.692754 kernel: Early memory node ranges Nov 1 00:14:49.692760 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Nov 1 00:14:49.692766 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Nov 1 00:14:49.692772 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Nov 1 00:14:49.692778 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Nov 1 00:14:49.692784 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Nov 1 00:14:49.692790 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Nov 1 00:14:49.692796 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Nov 1 00:14:49.692802 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Nov 1 00:14:49.692809 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Nov 1 00:14:49.692816 kernel: psci: probing for conduit method from ACPI. Nov 1 00:14:49.692821 kernel: psci: PSCIv1.1 detected in firmware. Nov 1 00:14:49.692827 kernel: psci: Using standard PSCI v0.2 function IDs Nov 1 00:14:49.692833 kernel: psci: Trusted OS migration not required Nov 1 00:14:49.692841 kernel: psci: SMC Calling Convention v1.1 Nov 1 00:14:49.692847 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Nov 1 00:14:49.692854 kernel: ACPI: SRAT not present Nov 1 00:14:49.692860 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Nov 1 00:14:49.692866 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Nov 1 00:14:49.692873 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Nov 1 00:14:49.692878 kernel: Detected PIPT I-cache on CPU0 Nov 1 00:14:49.692885 kernel: CPU features: detected: GIC system register CPU interface Nov 1 00:14:49.692891 kernel: CPU features: detected: Hardware dirty bit management Nov 1 00:14:49.692897 kernel: CPU features: detected: Spectre-v4 Nov 1 00:14:49.692903 kernel: CPU features: detected: Spectre-BHB Nov 1 00:14:49.692910 kernel: CPU features: kernel page table isolation forced ON by KASLR Nov 1 00:14:49.692916 kernel: CPU features: detected: Kernel page table isolation (KPTI) Nov 1 00:14:49.692922 kernel: CPU features: detected: ARM erratum 1418040 Nov 1 00:14:49.692928 kernel: CPU features: detected: SSBS not fully self-synchronizing Nov 1 00:14:49.692934 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Nov 1 00:14:49.692940 kernel: Policy zone: DMA Nov 1 00:14:49.692948 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:14:49.692961 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:14:49.692967 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:14:49.692974 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:14:49.692981 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:14:49.692996 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Nov 1 00:14:49.693003 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Nov 1 00:14:49.693009 kernel: trace event string verifier disabled Nov 1 00:14:49.693015 kernel: rcu: Preemptible hierarchical RCU implementation. Nov 1 00:14:49.693022 kernel: rcu: RCU event tracing is enabled. Nov 1 00:14:49.693028 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Nov 1 00:14:49.693034 kernel: Trampoline variant of Tasks RCU enabled. Nov 1 00:14:49.693050 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:14:49.693056 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:14:49.693062 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Nov 1 00:14:49.693068 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Nov 1 00:14:49.693075 kernel: GICv3: 256 SPIs implemented Nov 1 00:14:49.693081 kernel: GICv3: 0 Extended SPIs implemented Nov 1 00:14:49.693087 kernel: GICv3: Distributor has no Range Selector support Nov 1 00:14:49.693093 kernel: Root IRQ handler: gic_handle_irq Nov 1 00:14:49.693099 kernel: GICv3: 16 PPIs implemented Nov 1 00:14:49.693105 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Nov 1 00:14:49.693111 kernel: ACPI: SRAT not present Nov 1 00:14:49.693117 kernel: ITS [mem 0x08080000-0x0809ffff] Nov 1 00:14:49.693123 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Nov 1 00:14:49.693130 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Nov 1 00:14:49.693136 kernel: GICv3: using LPI property table @0x00000000400d0000 Nov 1 00:14:49.693142 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Nov 1 00:14:49.693149 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:14:49.693155 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Nov 1 00:14:49.693161 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Nov 1 00:14:49.693167 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Nov 1 00:14:49.693173 kernel: arm-pv: using stolen time PV Nov 1 00:14:49.693180 kernel: Console: colour dummy device 80x25 Nov 1 00:14:49.693186 kernel: ACPI: Core revision 20210730 Nov 1 00:14:49.693192 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Nov 1 00:14:49.693199 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:14:49.693205 kernel: LSM: Security Framework initializing Nov 1 00:14:49.693212 kernel: SELinux: Initializing. Nov 1 00:14:49.693218 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:14:49.693225 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:14:49.693231 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:14:49.693237 kernel: Platform MSI: ITS@0x8080000 domain created Nov 1 00:14:49.693243 kernel: PCI/MSI: ITS@0x8080000 domain created Nov 1 00:14:49.693249 kernel: Remapping and enabling EFI services. Nov 1 00:14:49.693255 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:14:49.693262 kernel: Detected PIPT I-cache on CPU1 Nov 1 00:14:49.693269 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Nov 1 00:14:49.693276 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Nov 1 00:14:49.693282 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:14:49.693288 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Nov 1 00:14:49.693294 kernel: Detected PIPT I-cache on CPU2 Nov 1 00:14:49.693301 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Nov 1 00:14:49.693307 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Nov 1 00:14:49.693314 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:14:49.693320 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Nov 1 00:14:49.693326 kernel: Detected PIPT I-cache on CPU3 Nov 1 00:14:49.693333 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Nov 1 00:14:49.693339 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Nov 1 00:14:49.693345 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:14:49.693351 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Nov 1 00:14:49.693361 kernel: smp: Brought up 1 node, 4 CPUs Nov 1 00:14:49.693369 kernel: SMP: Total of 4 processors activated. Nov 1 00:14:49.693375 kernel: CPU features: detected: 32-bit EL0 Support Nov 1 00:14:49.693382 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Nov 1 00:14:49.693388 kernel: CPU features: detected: Common not Private translations Nov 1 00:14:49.693395 kernel: CPU features: detected: CRC32 instructions Nov 1 00:14:49.693401 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Nov 1 00:14:49.693408 kernel: CPU features: detected: LSE atomic instructions Nov 1 00:14:49.693415 kernel: CPU features: detected: Privileged Access Never Nov 1 00:14:49.693422 kernel: CPU features: detected: RAS Extension Support Nov 1 00:14:49.693429 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Nov 1 00:14:49.693435 kernel: CPU: All CPU(s) started at EL1 Nov 1 00:14:49.693442 kernel: alternatives: patching kernel code Nov 1 00:14:49.693449 kernel: devtmpfs: initialized Nov 1 00:14:49.693456 kernel: KASLR enabled Nov 1 00:14:49.693463 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:14:49.693469 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Nov 1 00:14:49.693476 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:14:49.693482 kernel: SMBIOS 3.0.0 present. Nov 1 00:14:49.693489 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Nov 1 00:14:49.693496 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:14:49.693502 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Nov 1 00:14:49.693510 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Nov 1 00:14:49.693517 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Nov 1 00:14:49.693523 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:14:49.693530 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Nov 1 00:14:49.693542 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:14:49.693549 kernel: cpuidle: using governor menu Nov 1 00:14:49.693556 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Nov 1 00:14:49.693562 kernel: ASID allocator initialised with 32768 entries Nov 1 00:14:49.693569 kernel: ACPI: bus type PCI registered Nov 1 00:14:49.693578 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:14:49.693584 kernel: Serial: AMBA PL011 UART driver Nov 1 00:14:49.693591 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:14:49.693598 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Nov 1 00:14:49.693604 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:14:49.693611 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Nov 1 00:14:49.693618 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:14:49.693624 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Nov 1 00:14:49.693631 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:14:49.693638 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:14:49.693645 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:14:49.693651 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:14:49.693658 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:14:49.693665 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:14:49.693671 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:14:49.693678 kernel: ACPI: Interpreter enabled Nov 1 00:14:49.693684 kernel: ACPI: Using GIC for interrupt routing Nov 1 00:14:49.693691 kernel: ACPI: MCFG table detected, 1 entries Nov 1 00:14:49.693698 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Nov 1 00:14:49.693705 kernel: printk: console [ttyAMA0] enabled Nov 1 00:14:49.693711 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Nov 1 00:14:49.694254 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Nov 1 00:14:49.694326 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Nov 1 00:14:49.694385 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Nov 1 00:14:49.694442 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Nov 1 00:14:49.694539 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Nov 1 00:14:49.694552 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Nov 1 00:14:49.694559 kernel: PCI host bridge to bus 0000:00 Nov 1 00:14:49.694633 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Nov 1 00:14:49.694688 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Nov 1 00:14:49.694741 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Nov 1 00:14:49.694793 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Nov 1 00:14:49.694873 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Nov 1 00:14:49.694946 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Nov 1 00:14:49.695019 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Nov 1 00:14:49.695078 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Nov 1 00:14:49.695137 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Nov 1 00:14:49.695195 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Nov 1 00:14:49.695254 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Nov 1 00:14:49.695314 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Nov 1 00:14:49.695366 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Nov 1 00:14:49.695418 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Nov 1 00:14:49.695480 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Nov 1 00:14:49.695489 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Nov 1 00:14:49.695496 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Nov 1 00:14:49.695503 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Nov 1 00:14:49.695512 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Nov 1 00:14:49.695519 kernel: iommu: Default domain type: Translated Nov 1 00:14:49.695525 kernel: iommu: DMA domain TLB invalidation policy: strict mode Nov 1 00:14:49.695532 kernel: vgaarb: loaded Nov 1 00:14:49.695545 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:14:49.695552 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:14:49.695559 kernel: PTP clock support registered Nov 1 00:14:49.695565 kernel: Registered efivars operations Nov 1 00:14:49.695572 kernel: clocksource: Switched to clocksource arch_sys_counter Nov 1 00:14:49.695579 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:14:49.695588 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:14:49.695594 kernel: pnp: PnP ACPI init Nov 1 00:14:49.695688 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Nov 1 00:14:49.695698 kernel: pnp: PnP ACPI: found 1 devices Nov 1 00:14:49.695705 kernel: NET: Registered PF_INET protocol family Nov 1 00:14:49.695712 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:14:49.695719 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Nov 1 00:14:49.695725 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:14:49.695734 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:14:49.695741 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Nov 1 00:14:49.695747 kernel: TCP: Hash tables configured (established 32768 bind 32768) Nov 1 00:14:49.695754 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:14:49.695761 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:14:49.695768 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:14:49.695774 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:14:49.695781 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Nov 1 00:14:49.695787 kernel: kvm [1]: HYP mode not available Nov 1 00:14:49.695795 kernel: Initialise system trusted keyrings Nov 1 00:14:49.695801 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Nov 1 00:14:49.695808 kernel: Key type asymmetric registered Nov 1 00:14:49.695814 kernel: Asymmetric key parser 'x509' registered Nov 1 00:14:49.695821 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:14:49.695827 kernel: io scheduler mq-deadline registered Nov 1 00:14:49.695834 kernel: io scheduler kyber registered Nov 1 00:14:49.695840 kernel: io scheduler bfq registered Nov 1 00:14:49.695847 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Nov 1 00:14:49.695855 kernel: ACPI: button: Power Button [PWRB] Nov 1 00:14:49.695862 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Nov 1 00:14:49.695924 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Nov 1 00:14:49.695934 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:14:49.695940 kernel: thunder_xcv, ver 1.0 Nov 1 00:14:49.695946 kernel: thunder_bgx, ver 1.0 Nov 1 00:14:49.695953 kernel: nicpf, ver 1.0 Nov 1 00:14:49.695959 kernel: nicvf, ver 1.0 Nov 1 00:14:49.696039 kernel: rtc-efi rtc-efi.0: registered as rtc0 Nov 1 00:14:49.696100 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-11-01T00:14:49 UTC (1761956089) Nov 1 00:14:49.696109 kernel: hid: raw HID events driver (C) Jiri Kosina Nov 1 00:14:49.696115 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:14:49.696122 kernel: Segment Routing with IPv6 Nov 1 00:14:49.696128 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:14:49.696135 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:14:49.696141 kernel: Key type dns_resolver registered Nov 1 00:14:49.696148 kernel: registered taskstats version 1 Nov 1 00:14:49.696156 kernel: Loading compiled-in X.509 certificates Nov 1 00:14:49.696162 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 4aa5071b9a6f96878595e36d4bd5862a671c915d' Nov 1 00:14:49.696169 kernel: Key type .fscrypt registered Nov 1 00:14:49.696175 kernel: Key type fscrypt-provisioning registered Nov 1 00:14:49.696182 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:14:49.696189 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:14:49.696195 kernel: ima: No architecture policies found Nov 1 00:14:49.696202 kernel: clk: Disabling unused clocks Nov 1 00:14:49.696208 kernel: Freeing unused kernel memory: 36416K Nov 1 00:14:49.696216 kernel: Run /init as init process Nov 1 00:14:49.696222 kernel: with arguments: Nov 1 00:14:49.696229 kernel: /init Nov 1 00:14:49.696235 kernel: with environment: Nov 1 00:14:49.696241 kernel: HOME=/ Nov 1 00:14:49.696248 kernel: TERM=linux Nov 1 00:14:49.696254 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:14:49.696262 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:14:49.696272 systemd[1]: Detected virtualization kvm. Nov 1 00:14:49.696280 systemd[1]: Detected architecture arm64. Nov 1 00:14:49.696286 systemd[1]: Running in initrd. Nov 1 00:14:49.696293 systemd[1]: No hostname configured, using default hostname. Nov 1 00:14:49.696300 systemd[1]: Hostname set to . Nov 1 00:14:49.696308 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:14:49.696315 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:14:49.696321 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:14:49.696329 systemd[1]: Reached target cryptsetup.target. Nov 1 00:14:49.696336 systemd[1]: Reached target paths.target. Nov 1 00:14:49.696343 systemd[1]: Reached target slices.target. Nov 1 00:14:49.696350 systemd[1]: Reached target swap.target. Nov 1 00:14:49.696357 systemd[1]: Reached target timers.target. Nov 1 00:14:49.696365 systemd[1]: Listening on iscsid.socket. Nov 1 00:14:49.696371 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:14:49.696379 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:14:49.696386 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:14:49.696393 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:14:49.696400 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:14:49.696407 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:14:49.696414 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:14:49.696421 systemd[1]: Reached target sockets.target. Nov 1 00:14:49.696428 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:14:49.696435 systemd[1]: Finished network-cleanup.service. Nov 1 00:14:49.696443 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:14:49.696450 systemd[1]: Starting systemd-journald.service... Nov 1 00:14:49.696471 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:14:49.696480 systemd[1]: Starting systemd-resolved.service... Nov 1 00:14:49.696487 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:14:49.696494 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:14:49.696501 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:14:49.696508 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:14:49.696515 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:14:49.696526 systemd-journald[289]: Journal started Nov 1 00:14:49.696571 systemd-journald[289]: Runtime Journal (/run/log/journal/f7929935463349fab020d54f62ff107e) is 6.0M, max 48.7M, 42.6M free. Nov 1 00:14:49.693027 systemd-modules-load[290]: Inserted module 'overlay' Nov 1 00:14:49.705812 kernel: audit: type=1130 audit(1761956089.691:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.705831 kernel: audit: type=1130 audit(1761956089.693:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.710000 kernel: audit: type=1130 audit(1761956089.707:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.710021 systemd[1]: Started systemd-journald.service. Nov 1 00:14:49.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.712009 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:14:49.720068 kernel: audit: type=1130 audit(1761956089.711:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.720085 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:14:49.720094 kernel: audit: type=1130 audit(1761956089.715:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.715755 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:14:49.722020 kernel: Bridge firewalling registered Nov 1 00:14:49.722269 systemd-modules-load[290]: Inserted module 'br_netfilter' Nov 1 00:14:49.724484 systemd-resolved[291]: Positive Trust Anchors: Nov 1 00:14:49.724500 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:14:49.724527 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:14:49.729196 systemd-resolved[291]: Defaulting to hostname 'linux'. Nov 1 00:14:49.730510 systemd[1]: Started systemd-resolved.service. Nov 1 00:14:49.744691 kernel: SCSI subsystem initialized Nov 1 00:14:49.744708 kernel: audit: type=1130 audit(1761956089.735:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.744717 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:14:49.744731 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:14:49.744762 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:14:49.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.735615 systemd[1]: Reached target nss-lookup.target. Nov 1 00:14:49.747144 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:14:49.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.751486 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:14:49.752956 kernel: audit: type=1130 audit(1761956089.747:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.752085 systemd-modules-load[290]: Inserted module 'dm_multipath' Nov 1 00:14:49.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.752812 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:14:49.759012 kernel: audit: type=1130 audit(1761956089.753:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.754741 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:14:49.761173 dracut-cmdline[307]: dracut-dracut-053 Nov 1 00:14:49.762998 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:14:49.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.767257 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:14:49.772065 kernel: audit: type=1130 audit(1761956089.762:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.817025 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:14:49.829015 kernel: iscsi: registered transport (tcp) Nov 1 00:14:49.844012 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:14:49.844029 kernel: QLogic iSCSI HBA Driver Nov 1 00:14:49.876337 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:14:49.877925 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:14:49.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:49.920015 kernel: raid6: neonx8 gen() 13747 MB/s Nov 1 00:14:49.937013 kernel: raid6: neonx8 xor() 10785 MB/s Nov 1 00:14:49.954006 kernel: raid6: neonx4 gen() 13494 MB/s Nov 1 00:14:49.971008 kernel: raid6: neonx4 xor() 11085 MB/s Nov 1 00:14:49.988003 kernel: raid6: neonx2 gen() 12937 MB/s Nov 1 00:14:50.005006 kernel: raid6: neonx2 xor() 10329 MB/s Nov 1 00:14:50.022009 kernel: raid6: neonx1 gen() 10524 MB/s Nov 1 00:14:50.039006 kernel: raid6: neonx1 xor() 8768 MB/s Nov 1 00:14:50.056008 kernel: raid6: int64x8 gen() 6259 MB/s Nov 1 00:14:50.073013 kernel: raid6: int64x8 xor() 3540 MB/s Nov 1 00:14:50.090013 kernel: raid6: int64x4 gen() 7164 MB/s Nov 1 00:14:50.107012 kernel: raid6: int64x4 xor() 3841 MB/s Nov 1 00:14:50.124021 kernel: raid6: int64x2 gen() 6134 MB/s Nov 1 00:14:50.141012 kernel: raid6: int64x2 xor() 3309 MB/s Nov 1 00:14:50.158012 kernel: raid6: int64x1 gen() 4995 MB/s Nov 1 00:14:50.175179 kernel: raid6: int64x1 xor() 2642 MB/s Nov 1 00:14:50.175194 kernel: raid6: using algorithm neonx8 gen() 13747 MB/s Nov 1 00:14:50.175207 kernel: raid6: .... xor() 10785 MB/s, rmw enabled Nov 1 00:14:50.176365 kernel: raid6: using neon recovery algorithm Nov 1 00:14:50.187161 kernel: xor: measuring software checksum speed Nov 1 00:14:50.187193 kernel: 8regs : 16586 MB/sec Nov 1 00:14:50.188495 kernel: 32regs : 20681 MB/sec Nov 1 00:14:50.188509 kernel: arm64_neon : 27552 MB/sec Nov 1 00:14:50.188518 kernel: xor: using function: arm64_neon (27552 MB/sec) Nov 1 00:14:50.242016 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Nov 1 00:14:50.252879 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:14:50.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:50.253000 audit: BPF prog-id=7 op=LOAD Nov 1 00:14:50.253000 audit: BPF prog-id=8 op=LOAD Nov 1 00:14:50.254896 systemd[1]: Starting systemd-udevd.service... Nov 1 00:14:50.267293 systemd-udevd[490]: Using default interface naming scheme 'v252'. Nov 1 00:14:50.270605 systemd[1]: Started systemd-udevd.service. Nov 1 00:14:50.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:50.275366 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:14:50.285621 dracut-pre-trigger[506]: rd.md=0: removing MD RAID activation Nov 1 00:14:50.313448 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:14:50.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:50.315585 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:14:50.349452 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:14:50.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:50.375137 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Nov 1 00:14:50.383178 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Nov 1 00:14:50.383193 kernel: GPT:9289727 != 19775487 Nov 1 00:14:50.383201 kernel: GPT:Alternate GPT header not at the end of the disk. Nov 1 00:14:50.383210 kernel: GPT:9289727 != 19775487 Nov 1 00:14:50.383223 kernel: GPT: Use GNU Parted to correct GPT errors. Nov 1 00:14:50.383232 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:14:50.394017 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (549) Nov 1 00:14:50.394159 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:14:50.395314 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:14:50.402589 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:14:50.406168 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:14:50.412482 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:14:50.416280 systemd[1]: Starting disk-uuid.service... Nov 1 00:14:50.422522 disk-uuid[563]: Primary Header is updated. Nov 1 00:14:50.422522 disk-uuid[563]: Secondary Entries is updated. Nov 1 00:14:50.422522 disk-uuid[563]: Secondary Header is updated. Nov 1 00:14:50.426011 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:14:50.429001 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:14:50.432007 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:14:51.432005 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:14:51.432130 disk-uuid[564]: The operation has completed successfully. Nov 1 00:14:51.457783 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:14:51.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.457875 systemd[1]: Finished disk-uuid.service. Nov 1 00:14:51.464552 systemd[1]: Starting verity-setup.service... Nov 1 00:14:51.477005 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Nov 1 00:14:51.495939 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:14:51.498260 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:14:51.500332 systemd[1]: Finished verity-setup.service. Nov 1 00:14:51.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.544786 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:14:51.546217 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:14:51.545716 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:14:51.546433 systemd[1]: Starting ignition-setup.service... Nov 1 00:14:51.548853 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:14:51.555487 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:14:51.555528 kernel: BTRFS info (device vda6): using free space tree Nov 1 00:14:51.555540 kernel: BTRFS info (device vda6): has skinny extents Nov 1 00:14:51.562747 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:14:51.567931 systemd[1]: Finished ignition-setup.service. Nov 1 00:14:51.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.569574 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:14:51.614217 ignition[648]: Ignition 2.14.0 Nov 1 00:14:51.614226 ignition[648]: Stage: fetch-offline Nov 1 00:14:51.614262 ignition[648]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:14:51.614271 ignition[648]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:14:51.614398 ignition[648]: parsed url from cmdline: "" Nov 1 00:14:51.614402 ignition[648]: no config URL provided Nov 1 00:14:51.614406 ignition[648]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:14:51.614413 ignition[648]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:14:51.614430 ignition[648]: op(1): [started] loading QEMU firmware config module Nov 1 00:14:51.614434 ignition[648]: op(1): executing: "modprobe" "qemu_fw_cfg" Nov 1 00:14:51.619014 ignition[648]: op(1): [finished] loading QEMU firmware config module Nov 1 00:14:51.641114 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:14:51.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.642000 audit: BPF prog-id=9 op=LOAD Nov 1 00:14:51.643441 systemd[1]: Starting systemd-networkd.service... Nov 1 00:14:51.662550 systemd-networkd[741]: lo: Link UP Nov 1 00:14:51.662562 systemd-networkd[741]: lo: Gained carrier Nov 1 00:14:51.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.662957 systemd-networkd[741]: Enumeration completed Nov 1 00:14:51.663059 systemd[1]: Started systemd-networkd.service. Nov 1 00:14:51.663154 systemd-networkd[741]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:14:51.664364 systemd-networkd[741]: eth0: Link UP Nov 1 00:14:51.664368 systemd-networkd[741]: eth0: Gained carrier Nov 1 00:14:51.664722 systemd[1]: Reached target network.target. Nov 1 00:14:51.666929 systemd[1]: Starting iscsiuio.service... Nov 1 00:14:51.673804 systemd[1]: Started iscsiuio.service. Nov 1 00:14:51.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.675631 systemd[1]: Starting iscsid.service... Nov 1 00:14:51.678782 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:14:51.678782 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:14:51.678782 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:14:51.678782 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:14:51.678782 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:14:51.678782 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:14:51.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.679417 ignition[648]: parsing config with SHA512: dcf521a5b117b672c4a94dd62e10541afe55e30626654002360a707a41162ddb9baaef4611d193f5315bc03bc6f343132ce9b5a86f280396b84d7d9fd9cd5f95 Nov 1 00:14:51.681661 systemd[1]: Started iscsid.service. Nov 1 00:14:51.692739 ignition[648]: fetch-offline: fetch-offline passed Nov 1 00:14:51.686459 systemd-networkd[741]: eth0: DHCPv4 address 10.0.0.59/16, gateway 10.0.0.1 acquired from 10.0.0.1 Nov 1 00:14:51.692789 ignition[648]: Ignition finished successfully Nov 1 00:14:51.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.688615 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:14:51.692332 unknown[648]: fetched base config from "system" Nov 1 00:14:51.692339 unknown[648]: fetched user config from "qemu" Nov 1 00:14:51.695412 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:14:51.697596 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Nov 1 00:14:51.698276 systemd[1]: Starting ignition-kargs.service... Nov 1 00:14:51.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.702647 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:14:51.704438 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:14:51.706449 ignition[753]: Ignition 2.14.0 Nov 1 00:14:51.705770 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:14:51.706455 ignition[753]: Stage: kargs Nov 1 00:14:51.707249 systemd[1]: Reached target remote-fs.target. Nov 1 00:14:51.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.706552 ignition[753]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:14:51.709370 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:14:51.706562 ignition[753]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:14:51.710859 systemd[1]: Finished ignition-kargs.service. Nov 1 00:14:51.707395 ignition[753]: kargs: kargs passed Nov 1 00:14:51.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.712630 systemd[1]: Starting ignition-disks.service... Nov 1 00:14:51.707432 ignition[753]: Ignition finished successfully Nov 1 00:14:51.716861 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:14:51.718665 ignition[762]: Ignition 2.14.0 Nov 1 00:14:51.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.720329 systemd[1]: Finished ignition-disks.service. Nov 1 00:14:51.718671 ignition[762]: Stage: disks Nov 1 00:14:51.721632 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:14:51.718751 ignition[762]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:14:51.722864 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:14:51.718760 ignition[762]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:14:51.724268 systemd[1]: Reached target local-fs.target. Nov 1 00:14:51.719539 ignition[762]: disks: disks passed Nov 1 00:14:51.725443 systemd[1]: Reached target sysinit.target. Nov 1 00:14:51.719574 ignition[762]: Ignition finished successfully Nov 1 00:14:51.726812 systemd[1]: Reached target basic.target. Nov 1 00:14:51.729016 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:14:51.739327 systemd-fsck[774]: ROOT: clean, 637/553520 files, 56031/553472 blocks Nov 1 00:14:51.743104 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:14:51.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.746700 systemd[1]: Mounting sysroot.mount... Nov 1 00:14:51.753637 systemd[1]: Mounted sysroot.mount. Nov 1 00:14:51.754943 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:14:51.754464 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:14:51.756779 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:14:51.757725 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Nov 1 00:14:51.757764 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:14:51.757788 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:14:51.759618 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:14:51.761538 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:14:51.766147 initrd-setup-root[784]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:14:51.770491 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:14:51.773776 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:14:51.777914 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:14:51.802939 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:14:51.804585 systemd[1]: Starting ignition-mount.service... Nov 1 00:14:51.805954 systemd[1]: Starting sysroot-boot.service... Nov 1 00:14:51.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.809736 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Nov 1 00:14:51.818032 ignition[828]: INFO : Ignition 2.14.0 Nov 1 00:14:51.818032 ignition[828]: INFO : Stage: mount Nov 1 00:14:51.820203 ignition[828]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:14:51.820203 ignition[828]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:14:51.820203 ignition[828]: INFO : mount: mount passed Nov 1 00:14:51.820203 ignition[828]: INFO : Ignition finished successfully Nov 1 00:14:51.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.821282 systemd[1]: Finished ignition-mount.service. Nov 1 00:14:51.822483 systemd[1]: Finished sysroot-boot.service. Nov 1 00:14:52.507330 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:14:52.513012 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (837) Nov 1 00:14:52.515649 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:14:52.515732 kernel: BTRFS info (device vda6): using free space tree Nov 1 00:14:52.515745 kernel: BTRFS info (device vda6): has skinny extents Nov 1 00:14:52.518498 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:14:52.520088 systemd[1]: Starting ignition-files.service... Nov 1 00:14:52.533334 ignition[857]: INFO : Ignition 2.14.0 Nov 1 00:14:52.533334 ignition[857]: INFO : Stage: files Nov 1 00:14:52.535082 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:14:52.535082 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:14:52.535082 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:14:52.538705 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:14:52.538705 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:14:52.541861 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:14:52.543301 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:14:52.544797 unknown[857]: wrote ssh authorized keys file for user: core Nov 1 00:14:52.546020 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:14:52.546020 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Nov 1 00:14:52.546020 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Nov 1 00:14:52.623046 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Nov 1 00:14:52.861074 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Nov 1 00:14:52.861074 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:14:52.864999 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Nov 1 00:14:53.204743 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Nov 1 00:14:53.435820 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:14:53.435820 ignition[857]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(f): [started] setting preset to disabled for "coreos-metadata.service" Nov 1 00:14:53.439506 ignition[857]: INFO : files: op(f): op(10): [started] removing enablement symlink(s) for "coreos-metadata.service" Nov 1 00:14:53.474386 ignition[857]: INFO : files: op(f): op(10): [finished] removing enablement symlink(s) for "coreos-metadata.service" Nov 1 00:14:53.476963 ignition[857]: INFO : files: op(f): [finished] setting preset to disabled for "coreos-metadata.service" Nov 1 00:14:53.476963 ignition[857]: INFO : files: op(11): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:14:53.476963 ignition[857]: INFO : files: op(11): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:14:53.476963 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:14:53.476963 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:14:53.476963 ignition[857]: INFO : files: files passed Nov 1 00:14:53.476963 ignition[857]: INFO : Ignition finished successfully Nov 1 00:14:53.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.476912 systemd[1]: Finished ignition-files.service. Nov 1 00:14:53.478733 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:14:53.480207 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:14:53.495325 initrd-setup-root-after-ignition[882]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Nov 1 00:14:53.480838 systemd[1]: Starting ignition-quench.service... Nov 1 00:14:53.497791 initrd-setup-root-after-ignition[885]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:14:53.486129 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:14:53.486209 systemd[1]: Finished ignition-quench.service. Nov 1 00:14:53.488373 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:14:53.489432 systemd[1]: Reached target ignition-complete.target. Nov 1 00:14:53.491552 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:14:53.503140 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:14:53.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.503220 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:14:53.504753 systemd[1]: Reached target initrd-fs.target. Nov 1 00:14:53.506179 systemd[1]: Reached target initrd.target. Nov 1 00:14:53.507564 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:14:53.508269 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:14:53.512145 systemd-networkd[741]: eth0: Gained IPv6LL Nov 1 00:14:53.518708 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:14:53.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.520292 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:14:53.527900 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:14:53.528903 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:14:53.530571 systemd[1]: Stopped target timers.target. Nov 1 00:14:53.531921 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:14:53.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.532048 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:14:53.533418 systemd[1]: Stopped target initrd.target. Nov 1 00:14:53.534861 systemd[1]: Stopped target basic.target. Nov 1 00:14:53.536253 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:14:53.537747 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:14:53.539128 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:14:53.540828 systemd[1]: Stopped target remote-fs.target. Nov 1 00:14:53.542324 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:14:53.543893 systemd[1]: Stopped target sysinit.target. Nov 1 00:14:53.545350 systemd[1]: Stopped target local-fs.target. Nov 1 00:14:53.546728 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:14:53.548074 systemd[1]: Stopped target swap.target. Nov 1 00:14:53.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.549453 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:14:53.549582 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:14:53.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.550944 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:14:53.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.552161 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:14:53.552275 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:14:53.553839 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:14:53.553941 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:14:53.555293 systemd[1]: Stopped target paths.target. Nov 1 00:14:53.556517 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:14:53.561035 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:14:53.562648 systemd[1]: Stopped target slices.target. Nov 1 00:14:53.564099 systemd[1]: Stopped target sockets.target. Nov 1 00:14:53.565432 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:14:53.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.565564 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:14:53.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.567072 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:14:53.567172 systemd[1]: Stopped ignition-files.service. Nov 1 00:14:53.569733 systemd[1]: Stopping ignition-mount.service... Nov 1 00:14:53.571482 systemd[1]: Stopping iscsid.service... Nov 1 00:14:53.574671 iscsid[746]: iscsid shutting down. Nov 1 00:14:53.573265 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:14:53.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.573976 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:14:53.574128 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:14:53.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.575779 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:14:53.582758 ignition[898]: INFO : Ignition 2.14.0 Nov 1 00:14:53.582758 ignition[898]: INFO : Stage: umount Nov 1 00:14:53.582758 ignition[898]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:14:53.582758 ignition[898]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:14:53.582758 ignition[898]: INFO : umount: umount passed Nov 1 00:14:53.582758 ignition[898]: INFO : Ignition finished successfully Nov 1 00:14:53.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.589000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.575877 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:14:53.578695 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:14:53.578791 systemd[1]: Stopped iscsid.service. Nov 1 00:14:53.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.580119 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:14:53.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.580184 systemd[1]: Closed iscsid.socket. Nov 1 00:14:53.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.581800 systemd[1]: Stopping iscsiuio.service... Nov 1 00:14:53.584170 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:14:53.584593 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:14:53.584675 systemd[1]: Stopped iscsiuio.service. Nov 1 00:14:53.585861 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:14:53.585937 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:14:53.587734 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:14:53.587810 systemd[1]: Stopped ignition-mount.service. Nov 1 00:14:53.590088 systemd[1]: Stopped target network.target. Nov 1 00:14:53.591703 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:14:53.591741 systemd[1]: Closed iscsiuio.socket. Nov 1 00:14:53.593017 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:14:53.593068 systemd[1]: Stopped ignition-disks.service. Nov 1 00:14:53.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.594565 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:14:53.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.594606 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:14:53.595770 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:14:53.595809 systemd[1]: Stopped ignition-setup.service. Nov 1 00:14:53.618000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:14:53.597656 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:14:53.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.598843 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:14:53.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.608051 systemd-networkd[741]: eth0: DHCPv6 lease lost Nov 1 00:14:53.622000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:14:53.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.609914 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:14:53.610023 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:14:53.612212 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:14:53.612300 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:14:53.613710 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:14:53.613739 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:14:53.616593 systemd[1]: Stopping network-cleanup.service... Nov 1 00:14:53.618432 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:14:53.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.618489 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:14:53.619934 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:14:53.619977 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:14:53.622181 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:14:53.622222 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:14:53.623253 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:14:53.627982 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:14:53.630910 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:14:53.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.631078 systemd[1]: Stopped network-cleanup.service. Nov 1 00:14:53.632737 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:14:53.632816 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:14:53.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.633876 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:14:53.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.633915 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:14:53.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.641552 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:14:53.641665 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:14:53.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.643621 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:14:53.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.643653 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:14:53.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.645089 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:14:53.645130 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:14:53.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:53.646431 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:14:53.646471 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:14:53.647971 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:14:53.648027 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:14:53.649353 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:14:53.649393 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:14:53.651611 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:14:53.652446 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Nov 1 00:14:53.652502 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Nov 1 00:14:53.654843 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:14:53.654884 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:14:53.655818 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:14:53.655860 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:14:53.658373 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Nov 1 00:14:53.658775 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:14:53.658854 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:14:53.660403 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:14:53.662570 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:14:53.668791 systemd[1]: Switching root. Nov 1 00:14:53.687408 systemd-journald[289]: Journal stopped Nov 1 00:14:55.657378 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Nov 1 00:14:55.657435 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:14:55.657447 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:14:55.657457 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:14:55.657466 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:14:55.657479 kernel: SELinux: policy capability open_perms=1 Nov 1 00:14:55.657488 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:14:55.657510 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:14:55.657521 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:14:55.657531 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:14:55.657542 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:14:55.657552 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:14:55.657562 systemd[1]: Successfully loaded SELinux policy in 32.664ms. Nov 1 00:14:55.657580 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.084ms. Nov 1 00:14:55.657592 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:14:55.657602 systemd[1]: Detected virtualization kvm. Nov 1 00:14:55.657612 systemd[1]: Detected architecture arm64. Nov 1 00:14:55.657624 systemd[1]: Detected first boot. Nov 1 00:14:55.657634 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:14:55.657644 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:14:55.657654 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:14:55.657665 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:14:55.657679 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:14:55.657690 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:14:55.657700 kernel: kauditd_printk_skb: 83 callbacks suppressed Nov 1 00:14:55.657710 kernel: audit: type=1334 audit(1761956095.519:87): prog-id=12 op=LOAD Nov 1 00:14:55.657719 kernel: audit: type=1334 audit(1761956095.519:88): prog-id=3 op=UNLOAD Nov 1 00:14:55.657729 kernel: audit: type=1334 audit(1761956095.520:89): prog-id=13 op=LOAD Nov 1 00:14:55.657739 kernel: audit: type=1334 audit(1761956095.520:90): prog-id=14 op=LOAD Nov 1 00:14:55.657749 kernel: audit: type=1334 audit(1761956095.520:91): prog-id=4 op=UNLOAD Nov 1 00:14:55.657758 kernel: audit: type=1334 audit(1761956095.520:92): prog-id=5 op=UNLOAD Nov 1 00:14:55.657769 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:14:55.657779 kernel: audit: type=1334 audit(1761956095.521:93): prog-id=15 op=LOAD Nov 1 00:14:55.657789 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:14:55.657800 kernel: audit: type=1334 audit(1761956095.521:94): prog-id=12 op=UNLOAD Nov 1 00:14:55.657809 kernel: audit: type=1334 audit(1761956095.522:95): prog-id=16 op=LOAD Nov 1 00:14:55.657820 kernel: audit: type=1334 audit(1761956095.523:96): prog-id=17 op=LOAD Nov 1 00:14:55.657831 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:14:55.657842 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:14:55.657852 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:14:55.657863 systemd[1]: Created slice system-getty.slice. Nov 1 00:14:55.657874 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:14:55.657884 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:14:55.657895 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:14:55.657905 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:14:55.657915 systemd[1]: Created slice user.slice. Nov 1 00:14:55.657925 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:14:55.657937 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:14:55.657948 systemd[1]: Set up automount boot.automount. Nov 1 00:14:55.657959 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:14:55.657970 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:14:55.657980 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:14:55.658000 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:14:55.658014 systemd[1]: Reached target integritysetup.target. Nov 1 00:14:55.658024 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:14:55.658034 systemd[1]: Reached target remote-fs.target. Nov 1 00:14:55.658044 systemd[1]: Reached target slices.target. Nov 1 00:14:55.658057 systemd[1]: Reached target swap.target. Nov 1 00:14:55.658067 systemd[1]: Reached target torcx.target. Nov 1 00:14:55.658078 systemd[1]: Reached target veritysetup.target. Nov 1 00:14:55.658088 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:14:55.658145 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:14:55.658163 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:14:55.658173 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:14:55.658185 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:14:55.658195 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:14:55.658206 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:14:55.658218 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:14:55.658231 systemd[1]: Mounting media.mount... Nov 1 00:14:55.658241 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:14:55.658253 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:14:55.658263 systemd[1]: Mounting tmp.mount... Nov 1 00:14:55.658274 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:14:55.658284 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:14:55.658294 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:14:55.658304 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:14:55.658315 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:14:55.658325 systemd[1]: Starting modprobe@drm.service... Nov 1 00:14:55.658335 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:14:55.658346 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:14:55.658356 systemd[1]: Starting modprobe@loop.service... Nov 1 00:14:55.658367 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:14:55.658378 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:14:55.658388 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:14:55.658399 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:14:55.658411 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:14:55.658421 systemd[1]: Stopped systemd-journald.service. Nov 1 00:14:55.658432 kernel: loop: module loaded Nov 1 00:14:55.658441 kernel: fuse: init (API version 7.34) Nov 1 00:14:55.658451 systemd[1]: Starting systemd-journald.service... Nov 1 00:14:55.658462 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:14:55.658473 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:14:55.658484 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:14:55.658494 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:14:55.658511 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:14:55.658523 systemd[1]: Stopped verity-setup.service. Nov 1 00:14:55.658533 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:14:55.658543 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:14:55.658553 systemd[1]: Mounted media.mount. Nov 1 00:14:55.658563 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:14:55.658576 systemd-journald[1002]: Journal started Nov 1 00:14:55.658619 systemd-journald[1002]: Runtime Journal (/run/log/journal/f7929935463349fab020d54f62ff107e) is 6.0M, max 48.7M, 42.6M free. Nov 1 00:14:53.741000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:14:53.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:14:53.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:14:53.817000 audit: BPF prog-id=10 op=LOAD Nov 1 00:14:53.817000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:14:53.817000 audit: BPF prog-id=11 op=LOAD Nov 1 00:14:53.817000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:14:53.854000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:14:53.854000 audit[932]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001cd89c a1=4000150de0 a2=40001570c0 a3=32 items=0 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:53.854000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:14:53.855000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:14:53.855000 audit[932]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001cd979 a2=1ed a3=0 items=2 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:53.855000 audit: CWD cwd="/" Nov 1 00:14:53.855000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:53.855000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:53.855000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:14:55.519000 audit: BPF prog-id=12 op=LOAD Nov 1 00:14:55.519000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:14:55.520000 audit: BPF prog-id=13 op=LOAD Nov 1 00:14:55.520000 audit: BPF prog-id=14 op=LOAD Nov 1 00:14:55.520000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:14:55.520000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:14:55.521000 audit: BPF prog-id=15 op=LOAD Nov 1 00:14:55.521000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:14:55.522000 audit: BPF prog-id=16 op=LOAD Nov 1 00:14:55.523000 audit: BPF prog-id=17 op=LOAD Nov 1 00:14:55.523000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:14:55.523000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:14:55.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.541000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:14:55.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.632000 audit: BPF prog-id=18 op=LOAD Nov 1 00:14:55.633000 audit: BPF prog-id=19 op=LOAD Nov 1 00:14:55.634000 audit: BPF prog-id=20 op=LOAD Nov 1 00:14:55.634000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:14:55.634000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:14:55.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.655000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:14:55.655000 audit[1002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=fffff64d5480 a2=4000 a3=1 items=0 ppid=1 pid=1002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:55.655000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:14:55.519148 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:14:53.853459 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:14:55.519159 systemd[1]: Unnecessary job was removed for dev-vda6.device. Nov 1 00:14:53.853721 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:14:55.525108 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:14:53.853740 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:14:53.853770 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:14:53.853779 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:14:53.853805 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:14:53.853816 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:14:53.854023 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:14:53.854060 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:14:53.854072 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:14:53.854456 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:14:53.854487 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:14:53.854504 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:14:53.854527 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:14:53.854544 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:14:53.854556 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:53Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:14:55.281029 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:55Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:14:55.281291 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:55Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:14:55.281383 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:55Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:14:55.281550 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:55Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:14:55.281599 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:55Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:14:55.281658 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-11-01T00:14:55Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:14:55.661349 systemd[1]: Started systemd-journald.service. Nov 1 00:14:55.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.661948 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:14:55.662947 systemd[1]: Mounted tmp.mount. Nov 1 00:14:55.663954 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:14:55.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.665192 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:14:55.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.666287 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:14:55.666446 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:14:55.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.667569 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:14:55.667718 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:14:55.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.668823 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:14:55.668970 systemd[1]: Finished modprobe@drm.service. Nov 1 00:14:55.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.670137 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:14:55.670318 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:14:55.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.671430 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:14:55.671591 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:14:55.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.672663 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:14:55.672796 systemd[1]: Finished modprobe@loop.service. Nov 1 00:14:55.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.673978 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:14:55.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.675134 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:14:55.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.676440 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:14:55.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.677764 systemd[1]: Reached target network-pre.target. Nov 1 00:14:55.679792 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:14:55.681744 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:14:55.682696 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:14:55.683974 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:14:55.685818 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:14:55.686913 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:14:55.690643 systemd-journald[1002]: Time spent on flushing to /var/log/journal/f7929935463349fab020d54f62ff107e is 18.450ms for 996 entries. Nov 1 00:14:55.690643 systemd-journald[1002]: System Journal (/var/log/journal/f7929935463349fab020d54f62ff107e) is 8.0M, max 195.6M, 187.6M free. Nov 1 00:14:55.713244 systemd-journald[1002]: Received client request to flush runtime journal. Nov 1 00:14:55.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.687882 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:14:55.688929 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:14:55.689896 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:14:55.692903 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:14:55.713827 udevadm[1033]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Nov 1 00:14:55.696452 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:14:55.697559 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:14:55.698605 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:14:55.700908 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:14:55.702370 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:14:55.703649 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:14:55.707692 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:14:55.709619 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:14:55.711531 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:14:55.714943 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:14:55.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:55.727362 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:14:55.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.038297 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:14:56.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.039000 audit: BPF prog-id=21 op=LOAD Nov 1 00:14:56.039000 audit: BPF prog-id=22 op=LOAD Nov 1 00:14:56.039000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:14:56.039000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:14:56.040689 systemd[1]: Starting systemd-udevd.service... Nov 1 00:14:56.056036 systemd-udevd[1037]: Using default interface naming scheme 'v252'. Nov 1 00:14:56.068913 systemd[1]: Started systemd-udevd.service. Nov 1 00:14:56.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.069000 audit: BPF prog-id=23 op=LOAD Nov 1 00:14:56.072093 systemd[1]: Starting systemd-networkd.service... Nov 1 00:14:56.077000 audit: BPF prog-id=24 op=LOAD Nov 1 00:14:56.077000 audit: BPF prog-id=25 op=LOAD Nov 1 00:14:56.077000 audit: BPF prog-id=26 op=LOAD Nov 1 00:14:56.078796 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:14:56.102333 systemd[1]: Started systemd-userdbd.service. Nov 1 00:14:56.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.116063 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Nov 1 00:14:56.118133 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:14:56.148804 systemd-networkd[1046]: lo: Link UP Nov 1 00:14:56.148816 systemd-networkd[1046]: lo: Gained carrier Nov 1 00:14:56.149250 systemd-networkd[1046]: Enumeration completed Nov 1 00:14:56.149352 systemd[1]: Started systemd-networkd.service. Nov 1 00:14:56.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.150512 systemd-networkd[1046]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:14:56.151713 systemd-networkd[1046]: eth0: Link UP Nov 1 00:14:56.151719 systemd-networkd[1046]: eth0: Gained carrier Nov 1 00:14:56.175222 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:14:56.175226 systemd-networkd[1046]: eth0: DHCPv4 address 10.0.0.59/16, gateway 10.0.0.1 acquired from 10.0.0.1 Nov 1 00:14:56.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.178036 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:14:56.186178 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:14:56.221019 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:14:56.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.222287 systemd[1]: Reached target cryptsetup.target. Nov 1 00:14:56.224246 systemd[1]: Starting lvm2-activation.service... Nov 1 00:14:56.227547 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:14:56.270770 systemd[1]: Finished lvm2-activation.service. Nov 1 00:14:56.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.272209 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:14:56.273299 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:14:56.273337 systemd[1]: Reached target local-fs.target. Nov 1 00:14:56.274329 systemd[1]: Reached target machines.target. Nov 1 00:14:56.276415 systemd[1]: Starting ldconfig.service... Nov 1 00:14:56.277563 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.277619 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:14:56.279238 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:14:56.281179 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:14:56.283807 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:14:56.286021 systemd[1]: Starting systemd-sysext.service... Nov 1 00:14:56.287133 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1073 (bootctl) Nov 1 00:14:56.289627 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:14:56.294969 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:14:56.298942 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:14:56.300469 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:14:56.300648 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:14:56.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.353909 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:14:56.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.356999 kernel: loop0: detected capacity change from 0 to 207008 Nov 1 00:14:56.367019 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:14:56.373415 systemd-fsck[1084]: fsck.fat 4.2 (2021-01-31) Nov 1 00:14:56.373415 systemd-fsck[1084]: /dev/vda1: 236 files, 117310/258078 clusters Nov 1 00:14:56.375301 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:14:56.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.382013 kernel: loop1: detected capacity change from 0 to 207008 Nov 1 00:14:56.385950 (sd-sysext)[1087]: Using extensions 'kubernetes'. Nov 1 00:14:56.386290 (sd-sysext)[1087]: Merged extensions into '/usr'. Nov 1 00:14:56.402623 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.403795 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:14:56.405852 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:14:56.407816 systemd[1]: Starting modprobe@loop.service... Nov 1 00:14:56.408796 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.408933 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:14:56.409665 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:14:56.409781 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:14:56.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.411267 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:14:56.411373 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:14:56.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.412842 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:14:56.412947 systemd[1]: Finished modprobe@loop.service. Nov 1 00:14:56.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.414435 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:14:56.414548 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.470501 ldconfig[1072]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:14:56.474211 systemd[1]: Finished ldconfig.service. Nov 1 00:14:56.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.654049 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:14:56.656238 systemd[1]: Mounting boot.mount... Nov 1 00:14:56.658370 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:14:56.664629 systemd[1]: Mounted boot.mount. Nov 1 00:14:56.665595 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:14:56.667568 systemd[1]: Finished systemd-sysext.service. Nov 1 00:14:56.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.670322 systemd[1]: Starting ensure-sysext.service... Nov 1 00:14:56.672088 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:14:56.674789 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:14:56.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.677302 systemd[1]: Reloading. Nov 1 00:14:56.681326 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:14:56.682688 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:14:56.684175 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:14:56.720115 /usr/lib/systemd/system-generators/torcx-generator[1115]: time="2025-11-01T00:14:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:14:56.720804 /usr/lib/systemd/system-generators/torcx-generator[1115]: time="2025-11-01T00:14:56Z" level=info msg="torcx already run" Nov 1 00:14:56.773917 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:14:56.773933 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:14:56.789174 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:14:56.828000 audit: BPF prog-id=27 op=LOAD Nov 1 00:14:56.828000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:14:56.828000 audit: BPF prog-id=28 op=LOAD Nov 1 00:14:56.828000 audit: BPF prog-id=29 op=LOAD Nov 1 00:14:56.828000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:14:56.828000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:14:56.829000 audit: BPF prog-id=30 op=LOAD Nov 1 00:14:56.829000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:14:56.830000 audit: BPF prog-id=31 op=LOAD Nov 1 00:14:56.830000 audit: BPF prog-id=32 op=LOAD Nov 1 00:14:56.830000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:14:56.830000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:14:56.831000 audit: BPF prog-id=33 op=LOAD Nov 1 00:14:56.831000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:14:56.832000 audit: BPF prog-id=34 op=LOAD Nov 1 00:14:56.832000 audit: BPF prog-id=35 op=LOAD Nov 1 00:14:56.832000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:14:56.832000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:14:56.835681 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:14:56.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.840779 systemd[1]: Starting audit-rules.service... Nov 1 00:14:56.842718 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:14:56.845014 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:14:56.845000 audit: BPF prog-id=36 op=LOAD Nov 1 00:14:56.847392 systemd[1]: Starting systemd-resolved.service... Nov 1 00:14:56.848000 audit: BPF prog-id=37 op=LOAD Nov 1 00:14:56.849634 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:14:56.851513 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:14:56.853105 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:14:56.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.855973 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:14:56.855000 audit[1165]: SYSTEM_BOOT pid=1165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.860320 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:14:56.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.861751 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.862890 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:14:56.865073 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:14:56.866916 systemd[1]: Starting modprobe@loop.service... Nov 1 00:14:56.867748 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.867882 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:14:56.867975 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:14:56.868836 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:14:56.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.870304 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:14:56.870412 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:14:56.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.871662 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:14:56.871773 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:14:56.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.873193 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:14:56.873298 systemd[1]: Finished modprobe@loop.service. Nov 1 00:14:56.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.874731 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:14:56.874822 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.876170 systemd[1]: Starting systemd-update-done.service... Nov 1 00:14:56.878775 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.880028 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:14:56.881948 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:14:56.883982 systemd[1]: Starting modprobe@loop.service... Nov 1 00:14:56.884788 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.884914 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:14:56.885020 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:14:56.885787 systemd[1]: Finished systemd-update-done.service. Nov 1 00:14:56.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.888000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:14:56.888000 audit[1180]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff3b86de0 a2=420 a3=0 items=0 ppid=1154 pid=1180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:56.888000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:14:56.889354 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:14:56.889460 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:14:56.889624 augenrules[1180]: No rules Nov 1 00:14:56.890787 systemd[1]: Finished audit-rules.service. Nov 1 00:14:56.891966 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:14:56.892101 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:14:56.893349 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:14:56.893461 systemd[1]: Finished modprobe@loop.service. Nov 1 00:14:56.894713 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:14:56.894805 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.897069 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.898323 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:14:56.900129 systemd[1]: Starting modprobe@drm.service... Nov 1 00:14:56.902085 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:14:56.902711 systemd-resolved[1158]: Positive Trust Anchors: Nov 1 00:14:56.902723 systemd-resolved[1158]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:14:56.902749 systemd-resolved[1158]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:14:56.903966 systemd[1]: Starting modprobe@loop.service... Nov 1 00:14:56.904870 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.905014 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:14:56.906179 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:14:56.907346 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:14:56.908277 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:14:56.909745 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:14:56.909858 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:14:56.911146 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:14:56.911254 systemd[1]: Finished modprobe@drm.service. Nov 1 00:14:56.912172 systemd-timesyncd[1164]: Contacted time server 10.0.0.1:123 (10.0.0.1). Nov 1 00:14:56.912219 systemd-timesyncd[1164]: Initial clock synchronization to Sat 2025-11-01 00:14:57.058111 UTC. Nov 1 00:14:56.912771 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:14:56.912877 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:14:56.913378 systemd-resolved[1158]: Defaulting to hostname 'linux'. Nov 1 00:14:56.914282 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:14:56.914390 systemd[1]: Finished modprobe@loop.service. Nov 1 00:14:56.915524 systemd[1]: Started systemd-resolved.service. Nov 1 00:14:56.916856 systemd[1]: Reached target network.target. Nov 1 00:14:56.917708 systemd[1]: Reached target nss-lookup.target. Nov 1 00:14:56.918603 systemd[1]: Reached target time-set.target. Nov 1 00:14:56.919455 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:14:56.919486 systemd[1]: Reached target sysinit.target. Nov 1 00:14:56.920354 systemd[1]: Started motdgen.path. Nov 1 00:14:56.921085 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:14:56.922314 systemd[1]: Started logrotate.timer. Nov 1 00:14:56.923129 systemd[1]: Started mdadm.timer. Nov 1 00:14:56.923822 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:14:56.924797 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:14:56.924831 systemd[1]: Reached target paths.target. Nov 1 00:14:56.925634 systemd[1]: Reached target timers.target. Nov 1 00:14:56.926708 systemd[1]: Listening on dbus.socket. Nov 1 00:14:56.928369 systemd[1]: Starting docker.socket... Nov 1 00:14:56.931258 systemd[1]: Listening on sshd.socket. Nov 1 00:14:56.932117 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:14:56.932172 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.932729 systemd[1]: Finished ensure-sysext.service. Nov 1 00:14:56.933715 systemd[1]: Listening on docker.socket. Nov 1 00:14:56.935284 systemd[1]: Reached target sockets.target. Nov 1 00:14:56.936102 systemd[1]: Reached target basic.target. Nov 1 00:14:56.936892 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.936925 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:14:56.937848 systemd[1]: Starting containerd.service... Nov 1 00:14:56.939577 systemd[1]: Starting dbus.service... Nov 1 00:14:56.941258 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:14:56.943233 systemd[1]: Starting extend-filesystems.service... Nov 1 00:14:56.944212 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:14:56.945350 systemd[1]: Starting motdgen.service... Nov 1 00:14:56.947625 jq[1196]: false Nov 1 00:14:56.947423 systemd[1]: Starting prepare-helm.service... Nov 1 00:14:56.950074 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:14:56.951946 systemd[1]: Starting sshd-keygen.service... Nov 1 00:14:56.954603 systemd[1]: Starting systemd-logind.service... Nov 1 00:14:56.955405 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:14:56.955479 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:14:56.955878 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:14:56.956533 systemd[1]: Starting update-engine.service... Nov 1 00:14:56.958504 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:14:56.959638 extend-filesystems[1197]: Found loop1 Nov 1 00:14:56.960693 extend-filesystems[1197]: Found vda Nov 1 00:14:56.960693 extend-filesystems[1197]: Found vda1 Nov 1 00:14:56.960693 extend-filesystems[1197]: Found vda2 Nov 1 00:14:56.960693 extend-filesystems[1197]: Found vda3 Nov 1 00:14:56.960693 extend-filesystems[1197]: Found usr Nov 1 00:14:56.960693 extend-filesystems[1197]: Found vda4 Nov 1 00:14:56.960693 extend-filesystems[1197]: Found vda6 Nov 1 00:14:56.960693 extend-filesystems[1197]: Found vda7 Nov 1 00:14:56.960693 extend-filesystems[1197]: Found vda9 Nov 1 00:14:56.960693 extend-filesystems[1197]: Checking size of /dev/vda9 Nov 1 00:14:56.978249 jq[1211]: true Nov 1 00:14:56.963450 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:14:56.963629 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:14:56.965106 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:14:56.979348 tar[1215]: linux-arm64/LICENSE Nov 1 00:14:56.979348 tar[1215]: linux-arm64/helm Nov 1 00:14:56.965262 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:14:56.980196 jq[1219]: true Nov 1 00:14:56.986634 dbus-daemon[1195]: [system] SELinux support is enabled Nov 1 00:14:56.986797 systemd[1]: Started dbus.service. Nov 1 00:14:56.989628 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:14:56.989775 systemd[1]: Finished motdgen.service. Nov 1 00:14:56.990867 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:14:56.990895 systemd[1]: Reached target system-config.target. Nov 1 00:14:56.991902 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:14:56.991926 systemd[1]: Reached target user-config.target. Nov 1 00:14:56.992437 extend-filesystems[1197]: Resized partition /dev/vda9 Nov 1 00:14:56.995101 extend-filesystems[1240]: resize2fs 1.46.5 (30-Dec-2021) Nov 1 00:14:57.005233 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Nov 1 00:14:57.022851 update_engine[1210]: I1101 00:14:57.022532 1210 main.cc:92] Flatcar Update Engine starting Nov 1 00:14:57.025054 systemd[1]: Started update-engine.service. Nov 1 00:14:57.031172 update_engine[1210]: I1101 00:14:57.025091 1210 update_check_scheduler.cc:74] Next update check in 11m21s Nov 1 00:14:57.027785 systemd[1]: Started locksmithd.service. Nov 1 00:14:57.030947 systemd-logind[1206]: Watching system buttons on /dev/input/event0 (Power Button) Nov 1 00:14:57.031147 systemd-logind[1206]: New seat seat0. Nov 1 00:14:57.032875 systemd[1]: Started systemd-logind.service. Nov 1 00:14:57.043032 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Nov 1 00:14:57.044770 bash[1239]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:14:57.045186 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:14:57.061770 extend-filesystems[1240]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Nov 1 00:14:57.061770 extend-filesystems[1240]: old_desc_blocks = 1, new_desc_blocks = 1 Nov 1 00:14:57.061770 extend-filesystems[1240]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Nov 1 00:14:57.066554 extend-filesystems[1197]: Resized filesystem in /dev/vda9 Nov 1 00:14:57.067503 env[1220]: time="2025-11-01T00:14:57.064525395Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:14:57.062526 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:14:57.062691 systemd[1]: Finished extend-filesystems.service. Nov 1 00:14:57.085433 env[1220]: time="2025-11-01T00:14:57.085394095Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:14:57.085644 env[1220]: time="2025-11-01T00:14:57.085624302Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:14:57.086920 env[1220]: time="2025-11-01T00:14:57.086889092Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:14:57.087090 env[1220]: time="2025-11-01T00:14:57.087070585Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:14:57.087423 env[1220]: time="2025-11-01T00:14:57.087397403Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:14:57.087526 env[1220]: time="2025-11-01T00:14:57.087509778Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:14:57.087590 env[1220]: time="2025-11-01T00:14:57.087575597Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:14:57.087646 env[1220]: time="2025-11-01T00:14:57.087632375Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:14:57.087787 env[1220]: time="2025-11-01T00:14:57.087767925Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:14:57.088187 env[1220]: time="2025-11-01T00:14:57.088162884Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:14:57.088389 env[1220]: time="2025-11-01T00:14:57.088367145Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:14:57.088457 env[1220]: time="2025-11-01T00:14:57.088442578Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:14:57.088714 env[1220]: time="2025-11-01T00:14:57.088690868Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:14:57.088767 locksmithd[1247]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:14:57.088995 env[1220]: time="2025-11-01T00:14:57.088975612Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:14:57.092073 env[1220]: time="2025-11-01T00:14:57.092050039Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:14:57.092187 env[1220]: time="2025-11-01T00:14:57.092170478Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:14:57.092246 env[1220]: time="2025-11-01T00:14:57.092233976Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:14:57.092329 env[1220]: time="2025-11-01T00:14:57.092314174Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.092390 env[1220]: time="2025-11-01T00:14:57.092376124Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.092467 env[1220]: time="2025-11-01T00:14:57.092452534Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.092527 env[1220]: time="2025-11-01T00:14:57.092514525Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.092924 env[1220]: time="2025-11-01T00:14:57.092896532Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.093056 env[1220]: time="2025-11-01T00:14:57.093037743Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.093203 env[1220]: time="2025-11-01T00:14:57.093185186Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.093275 env[1220]: time="2025-11-01T00:14:57.093262003Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.093335 env[1220]: time="2025-11-01T00:14:57.093321673Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:14:57.093498 env[1220]: time="2025-11-01T00:14:57.093479420Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:14:57.093652 env[1220]: time="2025-11-01T00:14:57.093632850Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:14:57.093915 env[1220]: time="2025-11-01T00:14:57.093895111Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:14:57.093996 env[1220]: time="2025-11-01T00:14:57.093980400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094095 env[1220]: time="2025-11-01T00:14:57.094079781Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:14:57.094278 env[1220]: time="2025-11-01T00:14:57.094259075Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094343 env[1220]: time="2025-11-01T00:14:57.094329049Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094400 env[1220]: time="2025-11-01T00:14:57.094387375Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094457 env[1220]: time="2025-11-01T00:14:57.094443460Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094514 env[1220]: time="2025-11-01T00:14:57.094501419Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094576 env[1220]: time="2025-11-01T00:14:57.094562066Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094654 env[1220]: time="2025-11-01T00:14:57.094637335Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094715 env[1220]: time="2025-11-01T00:14:57.094701404Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.094783 env[1220]: time="2025-11-01T00:14:57.094769871Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:14:57.094961 env[1220]: time="2025-11-01T00:14:57.094941629Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.095064 env[1220]: time="2025-11-01T00:14:57.095049238Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.095128 env[1220]: time="2025-11-01T00:14:57.095114936Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.095199 env[1220]: time="2025-11-01T00:14:57.095173465Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:14:57.095265 env[1220]: time="2025-11-01T00:14:57.095248653Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:14:57.095317 env[1220]: time="2025-11-01T00:14:57.095304494Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:14:57.095377 env[1220]: time="2025-11-01T00:14:57.095363267Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:14:57.095469 env[1220]: time="2025-11-01T00:14:57.095453566Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:14:57.095752 env[1220]: time="2025-11-01T00:14:57.095694769Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:14:57.096376 env[1220]: time="2025-11-01T00:14:57.096093435Z" level=info msg="Connect containerd service" Nov 1 00:14:57.096376 env[1220]: time="2025-11-01T00:14:57.096135916Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:14:57.096961 env[1220]: time="2025-11-01T00:14:57.096931660Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:14:57.097402 env[1220]: time="2025-11-01T00:14:57.097377898Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:14:57.097633 env[1220]: time="2025-11-01T00:14:57.097616699Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:14:57.097747 env[1220]: time="2025-11-01T00:14:57.097732779Z" level=info msg="containerd successfully booted in 0.040022s" Nov 1 00:14:57.097802 systemd[1]: Started containerd.service. Nov 1 00:14:57.098896 env[1220]: time="2025-11-01T00:14:57.097564523Z" level=info msg="Start subscribing containerd event" Nov 1 00:14:57.098952 env[1220]: time="2025-11-01T00:14:57.098909552Z" level=info msg="Start recovering state" Nov 1 00:14:57.100290 env[1220]: time="2025-11-01T00:14:57.100252667Z" level=info msg="Start event monitor" Nov 1 00:14:57.101889 env[1220]: time="2025-11-01T00:14:57.101861504Z" level=info msg="Start snapshots syncer" Nov 1 00:14:57.101999 env[1220]: time="2025-11-01T00:14:57.101969806Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:14:57.102075 env[1220]: time="2025-11-01T00:14:57.102062426Z" level=info msg="Start streaming server" Nov 1 00:14:57.393477 tar[1215]: linux-arm64/README.md Nov 1 00:14:57.398059 systemd[1]: Finished prepare-helm.service. Nov 1 00:14:57.671203 systemd-networkd[1046]: eth0: Gained IPv6LL Nov 1 00:14:57.672850 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:14:57.674151 systemd[1]: Reached target network-online.target. Nov 1 00:14:57.676380 systemd[1]: Starting kubelet.service... Nov 1 00:14:58.234380 sshd_keygen[1214]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:14:58.251565 systemd[1]: Finished sshd-keygen.service. Nov 1 00:14:58.253949 systemd[1]: Starting issuegen.service... Nov 1 00:14:58.258566 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:14:58.258711 systemd[1]: Finished issuegen.service. Nov 1 00:14:58.260993 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:14:58.267403 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:14:58.269805 systemd[1]: Started getty@tty1.service. Nov 1 00:14:58.271962 systemd[1]: Started serial-getty@ttyAMA0.service. Nov 1 00:14:58.273206 systemd[1]: Reached target getty.target. Nov 1 00:14:58.297817 systemd[1]: Started kubelet.service. Nov 1 00:14:58.299292 systemd[1]: Reached target multi-user.target. Nov 1 00:14:58.301439 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:14:58.308075 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:14:58.308253 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:14:58.309589 systemd[1]: Startup finished in 555ms (kernel) + 4.152s (initrd) + 4.601s (userspace) = 9.309s. Nov 1 00:14:58.667323 kubelet[1277]: E1101 00:14:58.667215 1277 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:14:58.669321 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:14:58.669447 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:15:02.528182 systemd[1]: Created slice system-sshd.slice. Nov 1 00:15:02.529248 systemd[1]: Started sshd@0-10.0.0.59:22-10.0.0.1:37800.service. Nov 1 00:15:02.567753 sshd[1286]: Accepted publickey for core from 10.0.0.1 port 37800 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:15:02.569675 sshd[1286]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:02.577753 systemd[1]: Created slice user-500.slice. Nov 1 00:15:02.578767 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:15:02.580645 systemd-logind[1206]: New session 1 of user core. Nov 1 00:15:02.586628 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:15:02.587829 systemd[1]: Starting user@500.service... Nov 1 00:15:02.590553 (systemd)[1289]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:02.649328 systemd[1289]: Queued start job for default target default.target. Nov 1 00:15:02.649735 systemd[1289]: Reached target paths.target. Nov 1 00:15:02.649769 systemd[1289]: Reached target sockets.target. Nov 1 00:15:02.649781 systemd[1289]: Reached target timers.target. Nov 1 00:15:02.649790 systemd[1289]: Reached target basic.target. Nov 1 00:15:02.649826 systemd[1289]: Reached target default.target. Nov 1 00:15:02.649849 systemd[1289]: Startup finished in 54ms. Nov 1 00:15:02.650027 systemd[1]: Started user@500.service. Nov 1 00:15:02.650868 systemd[1]: Started session-1.scope. Nov 1 00:15:02.701582 systemd[1]: Started sshd@1-10.0.0.59:22-10.0.0.1:37806.service. Nov 1 00:15:02.741952 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 37806 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:15:02.743255 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:02.746923 systemd-logind[1206]: New session 2 of user core. Nov 1 00:15:02.747676 systemd[1]: Started session-2.scope. Nov 1 00:15:02.803353 sshd[1298]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:02.807446 systemd[1]: sshd@1-10.0.0.59:22-10.0.0.1:37806.service: Deactivated successfully. Nov 1 00:15:02.808063 systemd[1]: session-2.scope: Deactivated successfully. Nov 1 00:15:02.809076 systemd-logind[1206]: Session 2 logged out. Waiting for processes to exit. Nov 1 00:15:02.809658 systemd[1]: Started sshd@2-10.0.0.59:22-10.0.0.1:37820.service. Nov 1 00:15:02.810618 systemd-logind[1206]: Removed session 2. Nov 1 00:15:02.847173 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 37820 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:15:02.848330 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:02.852072 systemd-logind[1206]: New session 3 of user core. Nov 1 00:15:02.852452 systemd[1]: Started session-3.scope. Nov 1 00:15:02.902487 sshd[1304]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:02.905052 systemd[1]: sshd@2-10.0.0.59:22-10.0.0.1:37820.service: Deactivated successfully. Nov 1 00:15:02.905574 systemd[1]: session-3.scope: Deactivated successfully. Nov 1 00:15:02.906123 systemd-logind[1206]: Session 3 logged out. Waiting for processes to exit. Nov 1 00:15:02.907153 systemd[1]: Started sshd@3-10.0.0.59:22-10.0.0.1:37832.service. Nov 1 00:15:02.907815 systemd-logind[1206]: Removed session 3. Nov 1 00:15:02.940656 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 37832 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:15:02.941783 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:02.945609 systemd[1]: Started session-4.scope. Nov 1 00:15:02.945890 systemd-logind[1206]: New session 4 of user core. Nov 1 00:15:02.998412 sshd[1311]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:03.001698 systemd[1]: sshd@3-10.0.0.59:22-10.0.0.1:37832.service: Deactivated successfully. Nov 1 00:15:03.002264 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:15:03.002732 systemd-logind[1206]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:15:03.003758 systemd[1]: Started sshd@4-10.0.0.59:22-10.0.0.1:37848.service. Nov 1 00:15:03.004442 systemd-logind[1206]: Removed session 4. Nov 1 00:15:03.037138 sshd[1317]: Accepted publickey for core from 10.0.0.1 port 37848 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:15:03.038325 sshd[1317]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:03.041582 systemd-logind[1206]: New session 5 of user core. Nov 1 00:15:03.042389 systemd[1]: Started session-5.scope. Nov 1 00:15:03.098856 sudo[1320]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:15:03.099123 sudo[1320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:15:03.112224 dbus-daemon[1195]: avc: received setenforce notice (enforcing=1) Nov 1 00:15:03.114060 sudo[1320]: pam_unix(sudo:session): session closed for user root Nov 1 00:15:03.115940 sshd[1317]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:03.118718 systemd[1]: sshd@4-10.0.0.59:22-10.0.0.1:37848.service: Deactivated successfully. Nov 1 00:15:03.119299 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:15:03.119808 systemd-logind[1206]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:15:03.120906 systemd[1]: Started sshd@5-10.0.0.59:22-10.0.0.1:37862.service. Nov 1 00:15:03.121582 systemd-logind[1206]: Removed session 5. Nov 1 00:15:03.154904 sshd[1324]: Accepted publickey for core from 10.0.0.1 port 37862 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:15:03.156497 sshd[1324]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:03.159700 systemd-logind[1206]: New session 6 of user core. Nov 1 00:15:03.161112 systemd[1]: Started session-6.scope. Nov 1 00:15:03.213466 sudo[1328]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:15:03.213710 sudo[1328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:15:03.216435 sudo[1328]: pam_unix(sudo:session): session closed for user root Nov 1 00:15:03.221070 sudo[1327]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:15:03.221285 sudo[1327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:15:03.229798 systemd[1]: Stopping audit-rules.service... Nov 1 00:15:03.230000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:15:03.231109 auditctl[1331]: No rules Nov 1 00:15:03.233232 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:15:03.233404 systemd[1]: Stopped audit-rules.service. Nov 1 00:15:03.233631 kernel: kauditd_printk_skb: 105 callbacks suppressed Nov 1 00:15:03.233670 kernel: audit: type=1305 audit(1761956103.230:198): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:15:03.233688 kernel: audit: type=1300 audit(1761956103.230:198): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe71305e0 a2=420 a3=0 items=0 ppid=1 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.230000 audit[1331]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe71305e0 a2=420 a3=0 items=0 ppid=1 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.234934 systemd[1]: Starting audit-rules.service... Nov 1 00:15:03.230000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:15:03.238729 kernel: audit: type=1327 audit(1761956103.230:198): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:15:03.238772 kernel: audit: type=1131 audit(1761956103.232:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.252140 augenrules[1348]: No rules Nov 1 00:15:03.252812 systemd[1]: Finished audit-rules.service. Nov 1 00:15:03.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.254140 sudo[1327]: pam_unix(sudo:session): session closed for user root Nov 1 00:15:03.255707 sshd[1324]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:03.253000 audit[1327]: USER_END pid=1327 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.258891 systemd[1]: Started sshd@6-10.0.0.59:22-10.0.0.1:37878.service. Nov 1 00:15:03.259404 kernel: audit: type=1130 audit(1761956103.252:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.259444 kernel: audit: type=1106 audit(1761956103.253:201): pid=1327 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.259474 kernel: audit: type=1104 audit(1761956103.253:202): pid=1327 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.253000 audit[1327]: CRED_DISP pid=1327 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.259374 systemd[1]: sshd@5-10.0.0.59:22-10.0.0.1:37862.service: Deactivated successfully. Nov 1 00:15:03.259985 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:15:03.260510 systemd-logind[1206]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:15:03.261492 systemd-logind[1206]: Removed session 6. Nov 1 00:15:03.255000 audit[1324]: USER_END pid=1324 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:03.266185 kernel: audit: type=1106 audit(1761956103.255:203): pid=1324 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:03.266218 kernel: audit: type=1104 audit(1761956103.255:204): pid=1324 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:03.255000 audit[1324]: CRED_DISP pid=1324 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:03.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.59:22-10.0.0.1:37878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.272793 kernel: audit: type=1130 audit(1761956103.258:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.59:22-10.0.0.1:37878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.59:22-10.0.0.1:37862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.292000 audit[1353]: USER_ACCT pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:03.293811 sshd[1353]: Accepted publickey for core from 10.0.0.1 port 37878 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:15:03.293000 audit[1353]: CRED_ACQ pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:03.294000 audit[1353]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe86f8100 a2=3 a3=1 items=0 ppid=1 pid=1353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.294000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:03.295368 sshd[1353]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:03.299025 systemd-logind[1206]: New session 7 of user core. Nov 1 00:15:03.299439 systemd[1]: Started session-7.scope. Nov 1 00:15:03.302000 audit[1353]: USER_START pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:03.303000 audit[1356]: CRED_ACQ pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:03.350000 audit[1357]: USER_ACCT pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.352030 sudo[1357]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:15:03.352261 sudo[1357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:15:03.351000 audit[1357]: CRED_REFR pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.353000 audit[1357]: USER_START pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.391514 systemd[1]: Starting docker.service... Nov 1 00:15:03.448782 env[1369]: time="2025-11-01T00:15:03.448731503Z" level=info msg="Starting up" Nov 1 00:15:03.450305 env[1369]: time="2025-11-01T00:15:03.450282787Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:15:03.450305 env[1369]: time="2025-11-01T00:15:03.450302911Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:15:03.450394 env[1369]: time="2025-11-01T00:15:03.450321381Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:15:03.450394 env[1369]: time="2025-11-01T00:15:03.450331543Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:15:03.452042 env[1369]: time="2025-11-01T00:15:03.452018287Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:15:03.452042 env[1369]: time="2025-11-01T00:15:03.452038209Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:15:03.452151 env[1369]: time="2025-11-01T00:15:03.452053856Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:15:03.452151 env[1369]: time="2025-11-01T00:15:03.452063132Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:15:03.556223 env[1369]: time="2025-11-01T00:15:03.556188840Z" level=info msg="Loading containers: start." Nov 1 00:15:03.599000 audit[1403]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.599000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc37b85f0 a2=0 a3=1 items=0 ppid=1369 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.599000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:15:03.601000 audit[1405]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.601000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc2f6ad30 a2=0 a3=1 items=0 ppid=1369 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.601000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:15:03.603000 audit[1407]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.603000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd37ee7d0 a2=0 a3=1 items=0 ppid=1369 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.603000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:15:03.605000 audit[1409]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.605000 audit[1409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffeda604a0 a2=0 a3=1 items=0 ppid=1369 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.605000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:15:03.607000 audit[1411]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.607000 audit[1411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe774a4c0 a2=0 a3=1 items=0 ppid=1369 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.607000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:15:03.632000 audit[1416]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.632000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe549a030 a2=0 a3=1 items=0 ppid=1369 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.632000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:15:03.639000 audit[1418]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.639000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcbd66940 a2=0 a3=1 items=0 ppid=1369 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.639000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:15:03.641000 audit[1420]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.641000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffed3923d0 a2=0 a3=1 items=0 ppid=1369 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.641000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:15:03.643000 audit[1422]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.643000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd89bc230 a2=0 a3=1 items=0 ppid=1369 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.643000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:15:03.650000 audit[1426]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.650000 audit[1426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc7cf5140 a2=0 a3=1 items=0 ppid=1369 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.650000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:15:03.660000 audit[1427]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.660000 audit[1427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe5656bd0 a2=0 a3=1 items=0 ppid=1369 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:15:03.671014 kernel: Initializing XFRM netlink socket Nov 1 00:15:03.693625 env[1369]: time="2025-11-01T00:15:03.693582358Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:15:03.707000 audit[1435]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.707000 audit[1435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc3a010e0 a2=0 a3=1 items=0 ppid=1369 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.707000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:15:03.721000 audit[1438]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.721000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc6d811f0 a2=0 a3=1 items=0 ppid=1369 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.721000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:15:03.724000 audit[1441]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.724000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffde1b8950 a2=0 a3=1 items=0 ppid=1369 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.724000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:15:03.726000 audit[1443]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.726000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff1367ee0 a2=0 a3=1 items=0 ppid=1369 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.726000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:15:03.728000 audit[1445]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.728000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff0d60470 a2=0 a3=1 items=0 ppid=1369 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.728000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:15:03.729000 audit[1447]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.729000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff2843390 a2=0 a3=1 items=0 ppid=1369 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.729000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:15:03.731000 audit[1449]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.731000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd075ee20 a2=0 a3=1 items=0 ppid=1369 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.731000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:15:03.737000 audit[1452]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.737000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff23a0430 a2=0 a3=1 items=0 ppid=1369 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.737000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:15:03.739000 audit[1454]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.739000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffcb3290b0 a2=0 a3=1 items=0 ppid=1369 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.739000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:15:03.741000 audit[1456]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.741000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffed29afa0 a2=0 a3=1 items=0 ppid=1369 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.741000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:15:03.743000 audit[1458]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.743000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe91aded0 a2=0 a3=1 items=0 ppid=1369 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.743000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:15:03.744745 systemd-networkd[1046]: docker0: Link UP Nov 1 00:15:03.750000 audit[1462]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1462 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.750000 audit[1462]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd978dad0 a2=0 a3=1 items=0 ppid=1369 pid=1462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.750000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:15:03.762000 audit[1463]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1463 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:03.762000 audit[1463]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffea34a670 a2=0 a3=1 items=0 ppid=1369 pid=1463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.762000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:15:03.763357 env[1369]: time="2025-11-01T00:15:03.763311888Z" level=info msg="Loading containers: done." Nov 1 00:15:03.776723 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2267816271-merged.mount: Deactivated successfully. Nov 1 00:15:03.783346 env[1369]: time="2025-11-01T00:15:03.783307023Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:15:03.783492 env[1369]: time="2025-11-01T00:15:03.783473213Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:15:03.783589 env[1369]: time="2025-11-01T00:15:03.783573427Z" level=info msg="Daemon has completed initialization" Nov 1 00:15:03.796555 systemd[1]: Started docker.service. Nov 1 00:15:03.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.803854 env[1369]: time="2025-11-01T00:15:03.803737292Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:15:04.537803 env[1220]: time="2025-11-01T00:15:04.537753087Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Nov 1 00:15:05.104894 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount368936165.mount: Deactivated successfully. Nov 1 00:15:06.450229 env[1220]: time="2025-11-01T00:15:06.450184070Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:06.451560 env[1220]: time="2025-11-01T00:15:06.451525149Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:06.453330 env[1220]: time="2025-11-01T00:15:06.453303213Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:06.455153 env[1220]: time="2025-11-01T00:15:06.455128937Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:06.455938 env[1220]: time="2025-11-01T00:15:06.455911407Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002\"" Nov 1 00:15:06.456642 env[1220]: time="2025-11-01T00:15:06.456616214Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Nov 1 00:15:08.083298 env[1220]: time="2025-11-01T00:15:08.083251595Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:08.084654 env[1220]: time="2025-11-01T00:15:08.084606423Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:08.086382 env[1220]: time="2025-11-01T00:15:08.086355260Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:08.088023 env[1220]: time="2025-11-01T00:15:08.087987690Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:08.088865 env[1220]: time="2025-11-01T00:15:08.088841903Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b\"" Nov 1 00:15:08.089329 env[1220]: time="2025-11-01T00:15:08.089306045Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Nov 1 00:15:08.920282 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:15:08.922269 kernel: kauditd_printk_skb: 84 callbacks suppressed Nov 1 00:15:08.922308 kernel: audit: type=1130 audit(1761956108.919:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:08.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:08.920473 systemd[1]: Stopped kubelet.service. Nov 1 00:15:08.921920 systemd[1]: Starting kubelet.service... Nov 1 00:15:08.924042 kernel: audit: type=1131 audit(1761956108.919:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:08.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:09.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:09.022500 systemd[1]: Started kubelet.service. Nov 1 00:15:09.026010 kernel: audit: type=1130 audit(1761956109.021:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:09.090284 kubelet[1504]: E1101 00:15:09.090222 1504 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:15:09.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:15:09.092490 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:15:09.092623 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:15:09.096013 kernel: audit: type=1131 audit(1761956109.091:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:15:09.687452 env[1220]: time="2025-11-01T00:15:09.687394641Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:09.689225 env[1220]: time="2025-11-01T00:15:09.689184838Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:09.691683 env[1220]: time="2025-11-01T00:15:09.691652838Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:09.693240 env[1220]: time="2025-11-01T00:15:09.693206890Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:09.694795 env[1220]: time="2025-11-01T00:15:09.694753756Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27\"" Nov 1 00:15:09.695281 env[1220]: time="2025-11-01T00:15:09.695239134Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Nov 1 00:15:10.812967 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3832413122.mount: Deactivated successfully. Nov 1 00:15:11.269970 env[1220]: time="2025-11-01T00:15:11.269864670Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:11.271734 env[1220]: time="2025-11-01T00:15:11.271706921Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:11.273014 env[1220]: time="2025-11-01T00:15:11.272964249Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:11.274310 env[1220]: time="2025-11-01T00:15:11.274282790Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:11.274672 env[1220]: time="2025-11-01T00:15:11.274650262Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4\"" Nov 1 00:15:11.275108 env[1220]: time="2025-11-01T00:15:11.275079827Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Nov 1 00:15:11.756221 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3564813350.mount: Deactivated successfully. Nov 1 00:15:12.724039 env[1220]: time="2025-11-01T00:15:12.723976408Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:12.725535 env[1220]: time="2025-11-01T00:15:12.725507449Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:12.727603 env[1220]: time="2025-11-01T00:15:12.727571520Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:12.730081 env[1220]: time="2025-11-01T00:15:12.730056304Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:12.730895 env[1220]: time="2025-11-01T00:15:12.730867978Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Nov 1 00:15:12.731360 env[1220]: time="2025-11-01T00:15:12.731331597Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:15:13.193432 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3631054287.mount: Deactivated successfully. Nov 1 00:15:13.197737 env[1220]: time="2025-11-01T00:15:13.197693514Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:13.198943 env[1220]: time="2025-11-01T00:15:13.198912695Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:13.200438 env[1220]: time="2025-11-01T00:15:13.200410917Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:13.202109 env[1220]: time="2025-11-01T00:15:13.202088965Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:13.202596 env[1220]: time="2025-11-01T00:15:13.202573687Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Nov 1 00:15:13.203050 env[1220]: time="2025-11-01T00:15:13.202961481Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Nov 1 00:15:13.706426 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1433634680.mount: Deactivated successfully. Nov 1 00:15:16.130046 env[1220]: time="2025-11-01T00:15:16.129991714Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:16.131540 env[1220]: time="2025-11-01T00:15:16.131510584Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:16.133357 env[1220]: time="2025-11-01T00:15:16.133332490Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:16.136244 env[1220]: time="2025-11-01T00:15:16.136219011Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:16.137086 env[1220]: time="2025-11-01T00:15:16.137055537Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Nov 1 00:15:19.343423 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:15:19.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:19.343601 systemd[1]: Stopped kubelet.service. Nov 1 00:15:19.344960 systemd[1]: Starting kubelet.service... Nov 1 00:15:19.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:19.348950 kernel: audit: type=1130 audit(1761956119.342:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:19.349022 kernel: audit: type=1131 audit(1761956119.342:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:19.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:19.438566 systemd[1]: Started kubelet.service. Nov 1 00:15:19.442010 kernel: audit: type=1130 audit(1761956119.437:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:19.473666 kubelet[1536]: E1101 00:15:19.473619 1536 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:15:19.475686 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:15:19.475816 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:15:19.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:15:19.479008 kernel: audit: type=1131 audit(1761956119.475:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:15:22.388114 systemd[1]: Stopped kubelet.service. Nov 1 00:15:22.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:22.390104 systemd[1]: Starting kubelet.service... Nov 1 00:15:22.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:22.393630 kernel: audit: type=1130 audit(1761956122.387:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:22.393700 kernel: audit: type=1131 audit(1761956122.387:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:22.414526 systemd[1]: Reloading. Nov 1 00:15:22.469334 /usr/lib/systemd/system-generators/torcx-generator[1572]: time="2025-11-01T00:15:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:15:22.469665 /usr/lib/systemd/system-generators/torcx-generator[1572]: time="2025-11-01T00:15:22Z" level=info msg="torcx already run" Nov 1 00:15:22.617282 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:15:22.617301 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:15:22.632535 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:15:22.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.687221 kernel: audit: type=1400 audit(1761956122.680:250): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.687282 kernel: audit: type=1400 audit(1761956122.680:251): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.687304 kernel: audit: type=1400 audit(1761956122.680:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692095 kernel: audit: type=1400 audit(1761956122.680:253): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit: BPF prog-id=43 op=LOAD Nov 1 00:15:22.683000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit: BPF prog-id=44 op=LOAD Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.688000 audit: BPF prog-id=45 op=LOAD Nov 1 00:15:22.688000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:15:22.688000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.691000 audit: BPF prog-id=46 op=LOAD Nov 1 00:15:22.691000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.692000 audit: BPF prog-id=47 op=LOAD Nov 1 00:15:22.693000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit: BPF prog-id=48 op=LOAD Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit: BPF prog-id=49 op=LOAD Nov 1 00:15:22.693000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:15:22.693000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.693000 audit: BPF prog-id=50 op=LOAD Nov 1 00:15:22.693000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit: BPF prog-id=51 op=LOAD Nov 1 00:15:22.694000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit: BPF prog-id=52 op=LOAD Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.694000 audit: BPF prog-id=53 op=LOAD Nov 1 00:15:22.694000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:15:22.694000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit: BPF prog-id=54 op=LOAD Nov 1 00:15:22.696000 audit: BPF prog-id=33 op=UNLOAD Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit: BPF prog-id=55 op=LOAD Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.696000 audit: BPF prog-id=56 op=LOAD Nov 1 00:15:22.696000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:15:22.696000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:22.697000 audit: BPF prog-id=57 op=LOAD Nov 1 00:15:22.697000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:15:22.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:22.707814 systemd[1]: Started kubelet.service. Nov 1 00:15:22.709302 systemd[1]: Stopping kubelet.service... Nov 1 00:15:22.709678 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:15:22.709842 systemd[1]: Stopped kubelet.service. Nov 1 00:15:22.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:22.711449 systemd[1]: Starting kubelet.service... Nov 1 00:15:22.803005 systemd[1]: Started kubelet.service. Nov 1 00:15:22.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:22.836942 kubelet[1615]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:15:22.837445 kubelet[1615]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:15:22.837507 kubelet[1615]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:15:22.837645 kubelet[1615]: I1101 00:15:22.837613 1615 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:15:23.441280 kubelet[1615]: I1101 00:15:23.441234 1615 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:15:23.441280 kubelet[1615]: I1101 00:15:23.441268 1615 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:15:23.441554 kubelet[1615]: I1101 00:15:23.441537 1615 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:15:23.461219 kubelet[1615]: E1101 00:15:23.461182 1615 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.59:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.59:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:15:23.462137 kubelet[1615]: I1101 00:15:23.462113 1615 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:15:23.469374 kubelet[1615]: E1101 00:15:23.469347 1615 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:15:23.469374 kubelet[1615]: I1101 00:15:23.469376 1615 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:15:23.472016 kubelet[1615]: I1101 00:15:23.471980 1615 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:15:23.473296 kubelet[1615]: I1101 00:15:23.473253 1615 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:15:23.473460 kubelet[1615]: I1101 00:15:23.473291 1615 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:15:23.473547 kubelet[1615]: I1101 00:15:23.473520 1615 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:15:23.473547 kubelet[1615]: I1101 00:15:23.473530 1615 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:15:23.473731 kubelet[1615]: I1101 00:15:23.473701 1615 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:15:23.476766 kubelet[1615]: I1101 00:15:23.476741 1615 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:15:23.476766 kubelet[1615]: I1101 00:15:23.476766 1615 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:15:23.476822 kubelet[1615]: I1101 00:15:23.476783 1615 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:15:23.476822 kubelet[1615]: I1101 00:15:23.476793 1615 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:15:23.498246 kubelet[1615]: I1101 00:15:23.498229 1615 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:15:23.498805 kubelet[1615]: I1101 00:15:23.498785 1615 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:15:23.498922 kubelet[1615]: W1101 00:15:23.498908 1615 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:15:23.499675 kubelet[1615]: I1101 00:15:23.499653 1615 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:15:23.499723 kubelet[1615]: I1101 00:15:23.499689 1615 server.go:1287] "Started kubelet" Nov 1 00:15:23.514992 kubelet[1615]: I1101 00:15:23.514958 1615 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:15:23.515748 kubelet[1615]: I1101 00:15:23.515731 1615 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:15:23.516000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:23.516000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:15:23.516000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ae92f0 a1=4000c9c420 a2=4000ae92c0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.516000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:15:23.516000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:23.516000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:15:23.516000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400094f400 a1=4000c9c438 a2=4000ae9380 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.516000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:15:23.518262 kubelet[1615]: I1101 00:15:23.517947 1615 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:15:23.518262 kubelet[1615]: I1101 00:15:23.518000 1615 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:15:23.518262 kubelet[1615]: I1101 00:15:23.518078 1615 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:15:23.519198 kubelet[1615]: W1101 00:15:23.519131 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.59:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.59:6443: connect: connection refused Nov 1 00:15:23.519336 kubelet[1615]: E1101 00:15:23.519310 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.59:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.59:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:15:23.519619 kubelet[1615]: W1101 00:15:23.519564 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.59:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.59:6443: connect: connection refused Nov 1 00:15:23.519677 kubelet[1615]: E1101 00:15:23.519621 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.59:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.59:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:15:23.520295 kubelet[1615]: I1101 00:15:23.520277 1615 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:15:23.521734 kubelet[1615]: I1101 00:15:23.521607 1615 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:15:23.521953 kubelet[1615]: I1101 00:15:23.521932 1615 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:15:23.522445 kubelet[1615]: I1101 00:15:23.522359 1615 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:15:23.522574 kubelet[1615]: E1101 00:15:23.522552 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:15:23.522645 kubelet[1615]: I1101 00:15:23.522612 1615 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:15:23.522714 kubelet[1615]: I1101 00:15:23.522652 1615 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:15:23.523109 kubelet[1615]: W1101 00:15:23.523037 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.59:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.59:6443: connect: connection refused Nov 1 00:15:23.523178 kubelet[1615]: E1101 00:15:23.523116 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.59:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.59:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:15:23.522000 audit[1628]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:23.522000 audit[1628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff295c6b0 a2=0 a3=1 items=0 ppid=1615 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.522000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:15:23.523522 kubelet[1615]: E1101 00:15:23.523491 1615 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:15:23.523788 kubelet[1615]: I1101 00:15:23.523766 1615 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:15:23.524107 kubelet[1615]: E1101 00:15:23.523727 1615 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.59:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.59:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1873b9c25305ad69 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-11-01 00:15:23.499670889 +0000 UTC m=+0.692669467,LastTimestamp:2025-11-01 00:15:23.499670889 +0000 UTC m=+0.692669467,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Nov 1 00:15:23.523000 audit[1629]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:23.523000 audit[1629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc865b0d0 a2=0 a3=1 items=0 ppid=1615 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.523000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:15:23.524334 kubelet[1615]: E1101 00:15:23.524288 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.59:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.59:6443: connect: connection refused" interval="200ms" Nov 1 00:15:23.525420 kubelet[1615]: I1101 00:15:23.525403 1615 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:15:23.525529 kubelet[1615]: I1101 00:15:23.525517 1615 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:15:23.526000 audit[1631]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:23.526000 audit[1631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc01e61c0 a2=0 a3=1 items=0 ppid=1615 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.526000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:15:23.527000 audit[1633]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:23.527000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffca5a4700 a2=0 a3=1 items=0 ppid=1615 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.527000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:15:23.535994 kubelet[1615]: I1101 00:15:23.535965 1615 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:15:23.535994 kubelet[1615]: I1101 00:15:23.535992 1615 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:15:23.536078 kubelet[1615]: I1101 00:15:23.536028 1615 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:15:23.537000 audit[1642]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:23.537000 audit[1642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffdd1d4d80 a2=0 a3=1 items=0 ppid=1615 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.537000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:15:23.538618 kubelet[1615]: I1101 00:15:23.538593 1615 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:15:23.538000 audit[1644]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:23.538000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdfba6d00 a2=0 a3=1 items=0 ppid=1615 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.538000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:15:23.539649 kubelet[1615]: I1101 00:15:23.539631 1615 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:15:23.539720 kubelet[1615]: I1101 00:15:23.539710 1615 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:15:23.539941 kubelet[1615]: I1101 00:15:23.539926 1615 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:15:23.540040 kubelet[1615]: I1101 00:15:23.540029 1615 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:15:23.540132 kubelet[1615]: E1101 00:15:23.540117 1615 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:15:23.539000 audit[1645]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:23.539000 audit[1645]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdbb2ceb0 a2=0 a3=1 items=0 ppid=1615 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.539000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:15:23.539000 audit[1646]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:23.539000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdf2c7230 a2=0 a3=1 items=0 ppid=1615 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.539000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:15:23.541189 kubelet[1615]: W1101 00:15:23.541155 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.59:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.59:6443: connect: connection refused Nov 1 00:15:23.540000 audit[1647]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:23.540000 audit[1647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2ff9850 a2=0 a3=1 items=0 ppid=1615 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.540000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:15:23.541442 kubelet[1615]: E1101 00:15:23.541414 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.59:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.59:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:15:23.540000 audit[1648]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:23.540000 audit[1648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffcc64fc60 a2=0 a3=1 items=0 ppid=1615 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.540000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:15:23.541000 audit[1649]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:23.541000 audit[1649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea2a4960 a2=0 a3=1 items=0 ppid=1615 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:15:23.541000 audit[1650]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:23.541000 audit[1650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe3993b30 a2=0 a3=1 items=0 ppid=1615 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.541000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:15:23.610430 kubelet[1615]: I1101 00:15:23.610380 1615 policy_none.go:49] "None policy: Start" Nov 1 00:15:23.610430 kubelet[1615]: I1101 00:15:23.610415 1615 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:15:23.610430 kubelet[1615]: I1101 00:15:23.610429 1615 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:15:23.615319 systemd[1]: Created slice kubepods.slice. Nov 1 00:15:23.619206 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:15:23.621548 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:15:23.623355 kubelet[1615]: E1101 00:15:23.623326 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:15:23.633000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:23.633000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:15:23.633000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400037aff0 a1=4000934ea0 a2=400037afc0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:23.633000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:15:23.635097 kubelet[1615]: I1101 00:15:23.634736 1615 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:15:23.635097 kubelet[1615]: I1101 00:15:23.634884 1615 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:15:23.635097 kubelet[1615]: I1101 00:15:23.635020 1615 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:15:23.635097 kubelet[1615]: I1101 00:15:23.635032 1615 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:15:23.635686 kubelet[1615]: I1101 00:15:23.635671 1615 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:15:23.636372 kubelet[1615]: E1101 00:15:23.636347 1615 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:15:23.636446 kubelet[1615]: E1101 00:15:23.636387 1615 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Nov 1 00:15:23.646575 systemd[1]: Created slice kubepods-burstable-pod4654b122dbb389158fe3c0766e603624.slice. Nov 1 00:15:23.647182 kubelet[1615]: W1101 00:15:23.647160 1615 helpers.go:245] readString: Failed to read "/sys/fs/cgroup/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4654b122dbb389158fe3c0766e603624.slice/cpu.max": read /sys/fs/cgroup/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4654b122dbb389158fe3c0766e603624.slice/cpu.max: no such device Nov 1 00:15:23.670120 kubelet[1615]: E1101 00:15:23.670089 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:15:23.672194 systemd[1]: Created slice kubepods-burstable-poda1d51be1ff02022474f2598f6e43038f.slice. Nov 1 00:15:23.683853 kubelet[1615]: E1101 00:15:23.683811 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:15:23.685690 systemd[1]: Created slice kubepods-burstable-pod0bf98c0936acfd0b34d2af273d02ba8b.slice. Nov 1 00:15:23.687109 kubelet[1615]: E1101 00:15:23.687087 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:15:23.724666 kubelet[1615]: I1101 00:15:23.723552 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0bf98c0936acfd0b34d2af273d02ba8b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"0bf98c0936acfd0b34d2af273d02ba8b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:23.724666 kubelet[1615]: I1101 00:15:23.723623 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:23.724666 kubelet[1615]: I1101 00:15:23.723681 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:23.724666 kubelet[1615]: I1101 00:15:23.723711 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:23.724666 kubelet[1615]: I1101 00:15:23.723731 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:23.724895 kubelet[1615]: I1101 00:15:23.723747 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0bf98c0936acfd0b34d2af273d02ba8b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"0bf98c0936acfd0b34d2af273d02ba8b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:23.724895 kubelet[1615]: I1101 00:15:23.723777 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:23.724895 kubelet[1615]: I1101 00:15:23.723798 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a1d51be1ff02022474f2598f6e43038f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a1d51be1ff02022474f2598f6e43038f\") " pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:23.724895 kubelet[1615]: I1101 00:15:23.723814 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0bf98c0936acfd0b34d2af273d02ba8b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"0bf98c0936acfd0b34d2af273d02ba8b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:23.725711 kubelet[1615]: E1101 00:15:23.725677 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.59:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.59:6443: connect: connection refused" interval="400ms" Nov 1 00:15:23.736863 kubelet[1615]: I1101 00:15:23.736836 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:15:23.737269 kubelet[1615]: E1101 00:15:23.737239 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.59:6443/api/v1/nodes\": dial tcp 10.0.0.59:6443: connect: connection refused" node="localhost" Nov 1 00:15:23.940183 kubelet[1615]: I1101 00:15:23.940151 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:15:23.940659 kubelet[1615]: E1101 00:15:23.940627 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.59:6443/api/v1/nodes\": dial tcp 10.0.0.59:6443: connect: connection refused" node="localhost" Nov 1 00:15:23.970813 kubelet[1615]: E1101 00:15:23.970773 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:23.971578 env[1220]: time="2025-11-01T00:15:23.971530597Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:4654b122dbb389158fe3c0766e603624,Namespace:kube-system,Attempt:0,}" Nov 1 00:15:23.984607 kubelet[1615]: E1101 00:15:23.984515 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:23.985115 env[1220]: time="2025-11-01T00:15:23.985080875Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a1d51be1ff02022474f2598f6e43038f,Namespace:kube-system,Attempt:0,}" Nov 1 00:15:23.988313 kubelet[1615]: E1101 00:15:23.988292 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:23.988683 env[1220]: time="2025-11-01T00:15:23.988655020Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:0bf98c0936acfd0b34d2af273d02ba8b,Namespace:kube-system,Attempt:0,}" Nov 1 00:15:24.035337 kubelet[1615]: E1101 00:15:24.035236 1615 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.59:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.59:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1873b9c25305ad69 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-11-01 00:15:23.499670889 +0000 UTC m=+0.692669467,LastTimestamp:2025-11-01 00:15:23.499670889 +0000 UTC m=+0.692669467,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Nov 1 00:15:24.127031 kubelet[1615]: E1101 00:15:24.126956 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.59:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.59:6443: connect: connection refused" interval="800ms" Nov 1 00:15:24.342627 kubelet[1615]: I1101 00:15:24.342551 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:15:24.342864 kubelet[1615]: E1101 00:15:24.342838 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.59:6443/api/v1/nodes\": dial tcp 10.0.0.59:6443: connect: connection refused" node="localhost" Nov 1 00:15:24.473369 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1920979403.mount: Deactivated successfully. Nov 1 00:15:24.478974 env[1220]: time="2025-11-01T00:15:24.478939934Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.480311 env[1220]: time="2025-11-01T00:15:24.480253585Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.481268 env[1220]: time="2025-11-01T00:15:24.481236273Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.482289 env[1220]: time="2025-11-01T00:15:24.482264783Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.483772 env[1220]: time="2025-11-01T00:15:24.483747358Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.485978 env[1220]: time="2025-11-01T00:15:24.485946008Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.488957 env[1220]: time="2025-11-01T00:15:24.488928967Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.490482 env[1220]: time="2025-11-01T00:15:24.490454883Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.491357 env[1220]: time="2025-11-01T00:15:24.491333159Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.493382 env[1220]: time="2025-11-01T00:15:24.493355361Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.494041 env[1220]: time="2025-11-01T00:15:24.494016329Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.494700 env[1220]: time="2025-11-01T00:15:24.494679057Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:24.512261 env[1220]: time="2025-11-01T00:15:24.512037904Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:15:24.512261 env[1220]: time="2025-11-01T00:15:24.512076643Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:15:24.512261 env[1220]: time="2025-11-01T00:15:24.512086368Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:15:24.512395 env[1220]: time="2025-11-01T00:15:24.512302155Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fbaf435090265631c80bafb375fcd36974f2673517bd31bc6c9531e7164db687 pid=1666 runtime=io.containerd.runc.v2 Nov 1 00:15:24.513707 env[1220]: time="2025-11-01T00:15:24.513637737Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:15:24.513707 env[1220]: time="2025-11-01T00:15:24.513680078Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:15:24.513707 env[1220]: time="2025-11-01T00:15:24.513691084Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:15:24.513869 env[1220]: time="2025-11-01T00:15:24.513809542Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a143f0ca9de552e7975c27b6cdff847313b1de5e930bcc770f1d93fde4929cf9 pid=1673 runtime=io.containerd.runc.v2 Nov 1 00:15:24.520586 env[1220]: time="2025-11-01T00:15:24.520376398Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:15:24.520586 env[1220]: time="2025-11-01T00:15:24.520411215Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:15:24.520586 env[1220]: time="2025-11-01T00:15:24.520421621Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:15:24.521406 env[1220]: time="2025-11-01T00:15:24.520636367Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/de89ad4fc56f07a0e6a1ddeca89366f8ef5624a91ad77013805e77d892efd197 pid=1688 runtime=io.containerd.runc.v2 Nov 1 00:15:24.525527 systemd[1]: Started cri-containerd-fbaf435090265631c80bafb375fcd36974f2673517bd31bc6c9531e7164db687.scope. Nov 1 00:15:24.533297 systemd[1]: Started cri-containerd-a143f0ca9de552e7975c27b6cdff847313b1de5e930bcc770f1d93fde4929cf9.scope. Nov 1 00:15:24.541457 systemd[1]: Started cri-containerd-de89ad4fc56f07a0e6a1ddeca89366f8ef5624a91ad77013805e77d892efd197.scope. Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.555207 kernel: kauditd_printk_skb: 219 callbacks suppressed Nov 1 00:15:24.555253 kernel: audit: type=1400 audit(1761956124.553:440): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.560129 kernel: audit: type=1400 audit(1761956124.553:441): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.560175 kernel: audit: type=1400 audit(1761956124.553:442): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.562690 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:15:24.562725 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:15:24.562749 kernel: audit: type=1400 audit(1761956124.553:443): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.562765 kernel: audit: type=1400 audit(1761956124.553:444): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.562790 kernel: audit: type=1400 audit(1761956124.553:445): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.562805 kernel: audit: type=1400 audit(1761956124.553:446): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.562819 kernel: audit: type=1400 audit(1761956124.553:447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit: BPF prog-id=58 op=LOAD Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.556000 audit: BPF prog-id=59 op=LOAD Nov 1 00:15:24.556000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.556000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1673 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131343366306361396465353532653739373563323762366364666638 Nov 1 00:15:24.556000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.556000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1673 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131343366306361396465353532653739373563323762366364666638 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.557000 audit: BPF prog-id=60 op=LOAD Nov 1 00:15:24.557000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1673 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131343366306361396465353532653739373563323762366364666638 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1666 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662616634333530393032363536333163383062616662333735666364 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1666 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662616634333530393032363536333163383062616662333735666364 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.559000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.561000 audit: BPF prog-id=62 op=LOAD Nov 1 00:15:24.561000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1666 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662616634333530393032363536333163383062616662333735666364 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.563000 audit: BPF prog-id=63 op=LOAD Nov 1 00:15:24.563000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1666 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662616634333530393032363536333163383062616662333735666364 Nov 1 00:15:24.565000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:15:24.565000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.565000 audit: BPF prog-id=64 op=LOAD Nov 1 00:15:24.565000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1666 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662616634333530393032363536333163383062616662333735666364 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit: BPF prog-id=65 op=LOAD Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1688 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465383961643466633536663037613065366131646465636138393336 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1688 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465383961643466633536663037613065366131646465636138393336 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.570000 audit: BPF prog-id=66 op=LOAD Nov 1 00:15:24.570000 audit[1717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1688 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465383961643466633536663037613065366131646465636138393336 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.573000 audit: BPF prog-id=67 op=LOAD Nov 1 00:15:24.573000 audit[1717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1688 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465383961643466633536663037613065366131646465636138393336 Nov 1 00:15:24.575000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:15:24.575000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.575000 audit: BPF prog-id=68 op=LOAD Nov 1 00:15:24.575000 audit[1717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1688 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465383961643466633536663037613065366131646465636138393336 Nov 1 00:15:24.559000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1673 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131343366306361396465353532653739373563323762366364666638 Nov 1 00:15:24.576000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:15:24.576000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.576000 audit: BPF prog-id=69 op=LOAD Nov 1 00:15:24.576000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1673 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131343366306361396465353532653739373563323762366364666638 Nov 1 00:15:24.599870 env[1220]: time="2025-11-01T00:15:24.598946113Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:0bf98c0936acfd0b34d2af273d02ba8b,Namespace:kube-system,Attempt:0,} returns sandbox id \"a143f0ca9de552e7975c27b6cdff847313b1de5e930bcc770f1d93fde4929cf9\"" Nov 1 00:15:24.602855 kubelet[1615]: E1101 00:15:24.602670 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:24.604495 env[1220]: time="2025-11-01T00:15:24.604458726Z" level=info msg="CreateContainer within sandbox \"a143f0ca9de552e7975c27b6cdff847313b1de5e930bcc770f1d93fde4929cf9\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:15:24.606055 env[1220]: time="2025-11-01T00:15:24.606015017Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a1d51be1ff02022474f2598f6e43038f,Namespace:kube-system,Attempt:0,} returns sandbox id \"fbaf435090265631c80bafb375fcd36974f2673517bd31bc6c9531e7164db687\"" Nov 1 00:15:24.606802 kubelet[1615]: E1101 00:15:24.606689 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:24.606873 env[1220]: time="2025-11-01T00:15:24.606851112Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:4654b122dbb389158fe3c0766e603624,Namespace:kube-system,Attempt:0,} returns sandbox id \"de89ad4fc56f07a0e6a1ddeca89366f8ef5624a91ad77013805e77d892efd197\"" Nov 1 00:15:24.607352 kubelet[1615]: E1101 00:15:24.607330 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:24.609600 env[1220]: time="2025-11-01T00:15:24.609568179Z" level=info msg="CreateContainer within sandbox \"fbaf435090265631c80bafb375fcd36974f2673517bd31bc6c9531e7164db687\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:15:24.610401 env[1220]: time="2025-11-01T00:15:24.610369256Z" level=info msg="CreateContainer within sandbox \"de89ad4fc56f07a0e6a1ddeca89366f8ef5624a91ad77013805e77d892efd197\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:15:24.624607 env[1220]: time="2025-11-01T00:15:24.624570017Z" level=info msg="CreateContainer within sandbox \"a143f0ca9de552e7975c27b6cdff847313b1de5e930bcc770f1d93fde4929cf9\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"2badfa0d13f936187ba813161c4092100c94bb9f89a721432f1c67b1896f8952\"" Nov 1 00:15:24.625316 env[1220]: time="2025-11-01T00:15:24.625291415Z" level=info msg="StartContainer for \"2badfa0d13f936187ba813161c4092100c94bb9f89a721432f1c67b1896f8952\"" Nov 1 00:15:24.629095 env[1220]: time="2025-11-01T00:15:24.628975161Z" level=info msg="CreateContainer within sandbox \"fbaf435090265631c80bafb375fcd36974f2673517bd31bc6c9531e7164db687\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"7f87b900f28c8c014eeaa82db9089fec82c1921ed87becf7b7778a66d2da8610\"" Nov 1 00:15:24.629543 env[1220]: time="2025-11-01T00:15:24.629513868Z" level=info msg="StartContainer for \"7f87b900f28c8c014eeaa82db9089fec82c1921ed87becf7b7778a66d2da8610\"" Nov 1 00:15:24.630669 env[1220]: time="2025-11-01T00:15:24.630633663Z" level=info msg="CreateContainer within sandbox \"de89ad4fc56f07a0e6a1ddeca89366f8ef5624a91ad77013805e77d892efd197\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0c995abc740fb625017458b20e160be99696faff82efb69d948677396240b5f6\"" Nov 1 00:15:24.631096 env[1220]: time="2025-11-01T00:15:24.631071000Z" level=info msg="StartContainer for \"0c995abc740fb625017458b20e160be99696faff82efb69d948677396240b5f6\"" Nov 1 00:15:24.643324 systemd[1]: Started cri-containerd-2badfa0d13f936187ba813161c4092100c94bb9f89a721432f1c67b1896f8952.scope. Nov 1 00:15:24.648373 systemd[1]: Started cri-containerd-7f87b900f28c8c014eeaa82db9089fec82c1921ed87becf7b7778a66d2da8610.scope. Nov 1 00:15:24.654724 systemd[1]: Started cri-containerd-0c995abc740fb625017458b20e160be99696faff82efb69d948677396240b5f6.scope. Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit: BPF prog-id=70 op=LOAD Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1666 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766383762393030663238633863303134656561613832646239303839 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1666 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766383762393030663238633863303134656561613832646239303839 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit: BPF prog-id=71 op=LOAD Nov 1 00:15:24.664000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1666 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766383762393030663238633863303134656561613832646239303839 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.664000 audit: BPF prog-id=72 op=LOAD Nov 1 00:15:24.664000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1666 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766383762393030663238633863303134656561613832646239303839 Nov 1 00:15:24.665000 audit: BPF prog-id=72 op=UNLOAD Nov 1 00:15:24.665000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.665000 audit: BPF prog-id=73 op=LOAD Nov 1 00:15:24.665000 audit[1796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1666 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766383762393030663238633863303134656561613832646239303839 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.675000 audit: BPF prog-id=74 op=LOAD Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1688 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063393935616263373430666236323530313734353862323065313630 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1688 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063393935616263373430666236323530313734353862323065313630 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit: BPF prog-id=75 op=LOAD Nov 1 00:15:24.676000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1688 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063393935616263373430666236323530313734353862323065313630 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit: BPF prog-id=76 op=LOAD Nov 1 00:15:24.676000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1688 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063393935616263373430666236323530313734353862323065313630 Nov 1 00:15:24.676000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:15:24.676000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.676000 audit: BPF prog-id=77 op=LOAD Nov 1 00:15:24.676000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1688 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063393935616263373430666236323530313734353862323065313630 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit: BPF prog-id=78 op=LOAD Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=1673 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616466613064313366393336313837626138313331363163343039 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=1673 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616466613064313366393336313837626138313331363163343039 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.680000 audit: BPF prog-id=79 op=LOAD Nov 1 00:15:24.680000 audit[1784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=1673 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616466613064313366393336313837626138313331363163343039 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.681000 audit: BPF prog-id=80 op=LOAD Nov 1 00:15:24.681000 audit[1784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=1673 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616466613064313366393336313837626138313331363163343039 Nov 1 00:15:24.682000 audit: BPF prog-id=80 op=UNLOAD Nov 1 00:15:24.682000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { perfmon } for pid=1784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit[1784]: AVC avc: denied { bpf } for pid=1784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:24.682000 audit: BPF prog-id=81 op=LOAD Nov 1 00:15:24.682000 audit[1784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=1673 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:24.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262616466613064313366393336313837626138313331363163343039 Nov 1 00:15:24.698046 env[1220]: time="2025-11-01T00:15:24.695437353Z" level=info msg="StartContainer for \"7f87b900f28c8c014eeaa82db9089fec82c1921ed87becf7b7778a66d2da8610\" returns successfully" Nov 1 00:15:24.709974 env[1220]: time="2025-11-01T00:15:24.709934940Z" level=info msg="StartContainer for \"2badfa0d13f936187ba813161c4092100c94bb9f89a721432f1c67b1896f8952\" returns successfully" Nov 1 00:15:24.715944 env[1220]: time="2025-11-01T00:15:24.715910943Z" level=info msg="StartContainer for \"0c995abc740fb625017458b20e160be99696faff82efb69d948677396240b5f6\" returns successfully" Nov 1 00:15:24.760689 kubelet[1615]: W1101 00:15:24.760638 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.59:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.59:6443: connect: connection refused Nov 1 00:15:24.760802 kubelet[1615]: E1101 00:15:24.760701 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.59:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.59:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:15:24.788585 kubelet[1615]: W1101 00:15:24.788546 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.59:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.59:6443: connect: connection refused Nov 1 00:15:24.788708 kubelet[1615]: E1101 00:15:24.788591 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.59:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.59:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:15:25.144025 kubelet[1615]: I1101 00:15:25.143914 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:15:25.548735 kubelet[1615]: E1101 00:15:25.548636 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:15:25.548914 kubelet[1615]: E1101 00:15:25.548770 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:25.550435 kubelet[1615]: E1101 00:15:25.550401 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:15:25.550526 kubelet[1615]: E1101 00:15:25.550510 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:25.551892 kubelet[1615]: E1101 00:15:25.551867 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:15:25.551983 kubelet[1615]: E1101 00:15:25.551970 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:26.114000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:26.114000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40003fd520 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:15:26.114000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:26.125000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7342 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:26.125000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ec2060 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:15:26.125000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:26.554765 kubelet[1615]: E1101 00:15:26.554677 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:15:26.555124 kubelet[1615]: E1101 00:15:26.554775 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:15:26.555124 kubelet[1615]: E1101 00:15:26.554799 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:26.555124 kubelet[1615]: E1101 00:15:26.554869 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:26.949000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:26.949000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4005b804c0 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:15:26.949000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:15:26.955000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7342 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:26.955000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400307a750 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:15:26.955000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:15:26.955000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7338 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:26.955000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004f16b70 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:15:26.955000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:15:26.955000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:26.955000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4004f16c90 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:15:26.955000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:15:26.956000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:26.956000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4005b80880 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:15:26.956000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:15:26.956000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7342 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:26.956000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4004f16f60 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:15:26.956000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:15:27.023694 kubelet[1615]: E1101 00:15:27.023653 1615 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Nov 1 00:15:27.100323 kubelet[1615]: I1101 00:15:27.100287 1615 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Nov 1 00:15:27.123724 kubelet[1615]: I1101 00:15:27.123688 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:27.178869 kubelet[1615]: E1101 00:15:27.178835 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:27.179062 kubelet[1615]: I1101 00:15:27.179048 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:27.180853 kubelet[1615]: E1101 00:15:27.180829 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:27.180853 kubelet[1615]: I1101 00:15:27.180854 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:27.182535 kubelet[1615]: E1101 00:15:27.182511 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:27.479408 kubelet[1615]: I1101 00:15:27.479378 1615 apiserver.go:52] "Watching apiserver" Nov 1 00:15:27.522814 kubelet[1615]: I1101 00:15:27.522778 1615 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:15:27.554910 kubelet[1615]: I1101 00:15:27.554890 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:27.555209 kubelet[1615]: I1101 00:15:27.554954 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:27.556905 kubelet[1615]: E1101 00:15:27.556879 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:27.557062 kubelet[1615]: E1101 00:15:27.557043 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:27.557134 kubelet[1615]: E1101 00:15:27.556880 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:27.557305 kubelet[1615]: E1101 00:15:27.557290 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:27.893433 kubelet[1615]: I1101 00:15:27.893336 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:27.895485 kubelet[1615]: E1101 00:15:27.895458 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:27.895732 kubelet[1615]: E1101 00:15:27.895714 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:29.245286 systemd[1]: Reloading. Nov 1 00:15:29.290251 /usr/lib/systemd/system-generators/torcx-generator[1904]: time="2025-11-01T00:15:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:15:29.290280 /usr/lib/systemd/system-generators/torcx-generator[1904]: time="2025-11-01T00:15:29Z" level=info msg="torcx already run" Nov 1 00:15:29.373500 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:15:29.373678 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:15:29.389110 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit: BPF prog-id=82 op=LOAD Nov 1 00:15:29.447000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.447000 audit: BPF prog-id=83 op=LOAD Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit: BPF prog-id=84 op=LOAD Nov 1 00:15:29.448000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:15:29.448000 audit: BPF prog-id=45 op=UNLOAD Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.449000 audit: BPF prog-id=85 op=LOAD Nov 1 00:15:29.449000 audit: BPF prog-id=65 op=UNLOAD Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.451000 audit: BPF prog-id=86 op=LOAD Nov 1 00:15:29.451000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:15:29.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit: BPF prog-id=87 op=LOAD Nov 1 00:15:29.453000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit: BPF prog-id=88 op=LOAD Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.454000 audit: BPF prog-id=89 op=LOAD Nov 1 00:15:29.454000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:15:29.454000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.455000 audit: BPF prog-id=90 op=LOAD Nov 1 00:15:29.455000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.456000 audit: BPF prog-id=91 op=LOAD Nov 1 00:15:29.456000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.457000 audit: BPF prog-id=92 op=LOAD Nov 1 00:15:29.457000 audit: BPF prog-id=70 op=UNLOAD Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.458000 audit: BPF prog-id=93 op=LOAD Nov 1 00:15:29.458000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit: BPF prog-id=94 op=LOAD Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.460000 audit: BPF prog-id=95 op=LOAD Nov 1 00:15:29.460000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:15:29.460000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.461000 audit: BPF prog-id=96 op=LOAD Nov 1 00:15:29.461000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.462000 audit: BPF prog-id=97 op=LOAD Nov 1 00:15:29.462000 audit: BPF prog-id=78 op=UNLOAD Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.464000 audit: BPF prog-id=98 op=LOAD Nov 1 00:15:29.464000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit: BPF prog-id=99 op=LOAD Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.466000 audit: BPF prog-id=100 op=LOAD Nov 1 00:15:29.466000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:15:29.466000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.467000 audit: BPF prog-id=101 op=LOAD Nov 1 00:15:29.468000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.468000 audit: BPF prog-id=102 op=LOAD Nov 1 00:15:29.469000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:15:29.480627 systemd[1]: Stopping kubelet.service... Nov 1 00:15:29.503344 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:15:29.504176 systemd[1]: Stopped kubelet.service. Nov 1 00:15:29.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:29.504874 systemd[1]: kubelet.service: Consumed 1.054s CPU time. Nov 1 00:15:29.508476 systemd[1]: Starting kubelet.service... Nov 1 00:15:29.599975 systemd[1]: Started kubelet.service. Nov 1 00:15:29.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:29.604947 kernel: kauditd_printk_skb: 605 callbacks suppressed Nov 1 00:15:29.605226 kernel: audit: type=1130 audit(1761956129.600:801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:29.641126 kubelet[1946]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:15:29.641655 kubelet[1946]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:15:29.641798 kubelet[1946]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:15:29.641948 kubelet[1946]: I1101 00:15:29.641917 1946 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:15:29.649376 kubelet[1946]: I1101 00:15:29.649346 1946 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:15:29.649376 kubelet[1946]: I1101 00:15:29.649372 1946 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:15:29.649632 kubelet[1946]: I1101 00:15:29.649616 1946 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:15:29.650966 kubelet[1946]: I1101 00:15:29.650937 1946 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Nov 1 00:15:29.657636 kubelet[1946]: I1101 00:15:29.657609 1946 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:15:29.660680 kubelet[1946]: E1101 00:15:29.660655 1946 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:15:29.660775 kubelet[1946]: I1101 00:15:29.660760 1946 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:15:29.663178 kubelet[1946]: I1101 00:15:29.663145 1946 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:15:29.663406 kubelet[1946]: I1101 00:15:29.663381 1946 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:15:29.663567 kubelet[1946]: I1101 00:15:29.663407 1946 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:15:29.663642 kubelet[1946]: I1101 00:15:29.663576 1946 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:15:29.663642 kubelet[1946]: I1101 00:15:29.663586 1946 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:15:29.663642 kubelet[1946]: I1101 00:15:29.663629 1946 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:15:29.663765 kubelet[1946]: I1101 00:15:29.663748 1946 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:15:29.663798 kubelet[1946]: I1101 00:15:29.663772 1946 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:15:29.663821 kubelet[1946]: I1101 00:15:29.663808 1946 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:15:29.663821 kubelet[1946]: I1101 00:15:29.663819 1946 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:15:29.665350 kubelet[1946]: I1101 00:15:29.665311 1946 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:15:29.665998 kubelet[1946]: I1101 00:15:29.665961 1946 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:15:29.666756 kubelet[1946]: I1101 00:15:29.666726 1946 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:15:29.666802 kubelet[1946]: I1101 00:15:29.666764 1946 server.go:1287] "Started kubelet" Nov 1 00:15:29.668000 audit[1946]: AVC avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.670887 kubelet[1946]: I1101 00:15:29.670853 1946 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:15:29.671926 kubelet[1946]: I1101 00:15:29.671904 1946 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:15:29.673021 kernel: audit: type=1400 audit(1761956129.668:802): avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.673303 kubelet[1946]: I1101 00:15:29.673260 1946 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:15:29.668000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:15:29.673621 kubelet[1946]: I1101 00:15:29.673604 1946 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:15:29.675004 kernel: audit: type=1401 audit(1761956129.668:802): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:15:29.668000 audit[1946]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d20120 a1=4000a58a20 a2=4000d200f0 a3=25 items=0 ppid=1 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:29.686458 kubelet[1946]: I1101 00:15:29.686413 1946 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:15:29.668000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:15:29.687462 kubelet[1946]: E1101 00:15:29.687407 1946 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:15:29.688695 kubelet[1946]: I1101 00:15:29.688673 1946 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:15:29.688978 kubelet[1946]: I1101 00:15:29.688888 1946 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:15:29.689069 kubelet[1946]: I1101 00:15:29.688811 1946 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:15:29.689606 kubelet[1946]: I1101 00:15:29.689564 1946 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:15:29.690861 kernel: audit: type=1300 audit(1761956129.668:802): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d20120 a1=4000a58a20 a2=4000d200f0 a3=25 items=0 ppid=1 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:29.690930 kernel: audit: type=1327 audit(1761956129.668:802): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:15:29.690951 kernel: audit: type=1400 audit(1761956129.685:803): avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.685000 audit[1946]: AVC avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.691034 kubelet[1946]: I1101 00:15:29.690040 1946 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:15:29.691034 kubelet[1946]: I1101 00:15:29.690965 1946 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:15:29.685000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:15:29.695611 kernel: audit: type=1401 audit(1761956129.685:803): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:15:29.695665 kernel: audit: type=1300 audit(1761956129.685:803): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000165240 a1=4000750b88 a2=400072f890 a3=25 items=0 ppid=1 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:29.685000 audit[1946]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000165240 a1=4000750b88 a2=400072f890 a3=25 items=0 ppid=1 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:29.699379 kubelet[1946]: I1101 00:15:29.699346 1946 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:15:29.685000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:15:29.700303 kubelet[1946]: I1101 00:15:29.700286 1946 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:15:29.700501 kubelet[1946]: I1101 00:15:29.700473 1946 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:15:29.701267 kubelet[1946]: I1101 00:15:29.701120 1946 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:15:29.701267 kubelet[1946]: I1101 00:15:29.701152 1946 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:15:29.701267 kubelet[1946]: I1101 00:15:29.701171 1946 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:15:29.701267 kubelet[1946]: I1101 00:15:29.701178 1946 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:15:29.701267 kubelet[1946]: E1101 00:15:29.701220 1946 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:15:29.703918 kernel: audit: type=1327 audit(1761956129.685:803): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:15:29.703993 kubelet[1946]: I1101 00:15:29.703894 1946 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:15:29.731780 kubelet[1946]: I1101 00:15:29.731751 1946 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:15:29.731780 kubelet[1946]: I1101 00:15:29.731776 1946 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:15:29.731906 kubelet[1946]: I1101 00:15:29.731799 1946 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:15:29.731971 kubelet[1946]: I1101 00:15:29.731954 1946 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:15:29.732010 kubelet[1946]: I1101 00:15:29.731971 1946 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:15:29.732037 kubelet[1946]: I1101 00:15:29.732012 1946 policy_none.go:49] "None policy: Start" Nov 1 00:15:29.732037 kubelet[1946]: I1101 00:15:29.732021 1946 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:15:29.732037 kubelet[1946]: I1101 00:15:29.732032 1946 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:15:29.732153 kubelet[1946]: I1101 00:15:29.732138 1946 state_mem.go:75] "Updated machine memory state" Nov 1 00:15:29.735878 kubelet[1946]: I1101 00:15:29.735844 1946 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:15:29.734000 audit[1946]: AVC avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.736064 kubelet[1946]: I1101 00:15:29.735910 1946 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:15:29.736161 kubelet[1946]: I1101 00:15:29.736067 1946 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:15:29.736161 kubelet[1946]: I1101 00:15:29.736079 1946 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:15:29.736835 kubelet[1946]: I1101 00:15:29.736718 1946 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:15:29.737370 kubelet[1946]: E1101 00:15:29.737348 1946 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:15:29.734000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:15:29.734000 audit[1946]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e72f30 a1=40012be450 a2=4000e72f00 a3=25 items=0 ppid=1 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:29.734000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:15:29.739002 kernel: audit: type=1400 audit(1761956129.734:804): avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:29.802011 kubelet[1946]: I1101 00:15:29.801885 1946 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:29.802159 kubelet[1946]: I1101 00:15:29.801896 1946 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:29.802972 kubelet[1946]: I1101 00:15:29.802875 1946 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:29.844544 kubelet[1946]: I1101 00:15:29.844511 1946 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:15:29.851283 kubelet[1946]: I1101 00:15:29.851258 1946 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Nov 1 00:15:29.851526 kubelet[1946]: I1101 00:15:29.851509 1946 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Nov 1 00:15:29.891447 kubelet[1946]: I1101 00:15:29.891420 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0bf98c0936acfd0b34d2af273d02ba8b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"0bf98c0936acfd0b34d2af273d02ba8b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:29.992020 kubelet[1946]: I1101 00:15:29.991974 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a1d51be1ff02022474f2598f6e43038f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a1d51be1ff02022474f2598f6e43038f\") " pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:29.992129 kubelet[1946]: I1101 00:15:29.992071 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0bf98c0936acfd0b34d2af273d02ba8b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"0bf98c0936acfd0b34d2af273d02ba8b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:29.992129 kubelet[1946]: I1101 00:15:29.992115 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:29.992178 kubelet[1946]: I1101 00:15:29.992143 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:29.992178 kubelet[1946]: I1101 00:15:29.992171 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0bf98c0936acfd0b34d2af273d02ba8b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"0bf98c0936acfd0b34d2af273d02ba8b\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:29.992239 kubelet[1946]: I1101 00:15:29.992209 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:29.992239 kubelet[1946]: I1101 00:15:29.992228 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:29.992284 kubelet[1946]: I1101 00:15:29.992245 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:15:30.108183 kubelet[1946]: E1101 00:15:30.108096 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:30.108183 kubelet[1946]: E1101 00:15:30.108113 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:30.110350 kubelet[1946]: E1101 00:15:30.110328 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:30.664747 kubelet[1946]: I1101 00:15:30.664698 1946 apiserver.go:52] "Watching apiserver" Nov 1 00:15:30.690964 kubelet[1946]: I1101 00:15:30.690898 1946 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:15:30.712732 kubelet[1946]: E1101 00:15:30.712703 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:30.712732 kubelet[1946]: I1101 00:15:30.712730 1946 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:30.712948 kubelet[1946]: I1101 00:15:30.712932 1946 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:30.718145 kubelet[1946]: E1101 00:15:30.718107 1946 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Nov 1 00:15:30.718397 kubelet[1946]: E1101 00:15:30.718375 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:30.719652 kubelet[1946]: E1101 00:15:30.719628 1946 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Nov 1 00:15:30.719806 kubelet[1946]: E1101 00:15:30.719771 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:30.742133 kubelet[1946]: I1101 00:15:30.740761 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.740744205 podStartE2EDuration="1.740744205s" podCreationTimestamp="2025-11-01 00:15:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:15:30.732954886 +0000 UTC m=+1.129259142" watchObservedRunningTime="2025-11-01 00:15:30.740744205 +0000 UTC m=+1.137048461" Nov 1 00:15:30.750281 kubelet[1946]: I1101 00:15:30.750233 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.75021698 podStartE2EDuration="1.75021698s" podCreationTimestamp="2025-11-01 00:15:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:15:30.742355602 +0000 UTC m=+1.138659818" watchObservedRunningTime="2025-11-01 00:15:30.75021698 +0000 UTC m=+1.146521236" Nov 1 00:15:30.758040 kubelet[1946]: I1101 00:15:30.757998 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.757973411 podStartE2EDuration="1.757973411s" podCreationTimestamp="2025-11-01 00:15:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:15:30.750354094 +0000 UTC m=+1.146658350" watchObservedRunningTime="2025-11-01 00:15:30.757973411 +0000 UTC m=+1.154277667" Nov 1 00:15:31.367000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:31.367000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40005c6d80 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:15:31.367000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:31.367000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:31.367000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000e56460 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:15:31.367000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:31.367000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:31.367000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000e56620 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:15:31.367000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:31.367000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:31.367000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40005c6f40 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:15:31.367000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:31.688000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7369 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:15:31.688000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400069b140 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:15:31.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:31.713837 kubelet[1946]: E1101 00:15:31.713799 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:31.714347 kubelet[1946]: E1101 00:15:31.714329 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:33.452767 kubelet[1946]: E1101 00:15:33.452740 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:35.989248 kubelet[1946]: I1101 00:15:35.989217 1946 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:15:35.989973 env[1220]: time="2025-11-01T00:15:35.989925373Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:15:35.990228 kubelet[1946]: I1101 00:15:35.990116 1946 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:15:36.863228 systemd[1]: Created slice kubepods-besteffort-pod6f5ffa23_d5fc_4082_88fa_f11e1cc68a31.slice. Nov 1 00:15:37.044325 kubelet[1946]: I1101 00:15:37.044268 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/6f5ffa23-d5fc-4082-88fa-f11e1cc68a31-kube-proxy\") pod \"kube-proxy-ppnfw\" (UID: \"6f5ffa23-d5fc-4082-88fa-f11e1cc68a31\") " pod="kube-system/kube-proxy-ppnfw" Nov 1 00:15:37.044649 kubelet[1946]: I1101 00:15:37.044348 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6f5ffa23-d5fc-4082-88fa-f11e1cc68a31-lib-modules\") pod \"kube-proxy-ppnfw\" (UID: \"6f5ffa23-d5fc-4082-88fa-f11e1cc68a31\") " pod="kube-system/kube-proxy-ppnfw" Nov 1 00:15:37.044649 kubelet[1946]: I1101 00:15:37.044386 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xwmr7\" (UniqueName: \"kubernetes.io/projected/6f5ffa23-d5fc-4082-88fa-f11e1cc68a31-kube-api-access-xwmr7\") pod \"kube-proxy-ppnfw\" (UID: \"6f5ffa23-d5fc-4082-88fa-f11e1cc68a31\") " pod="kube-system/kube-proxy-ppnfw" Nov 1 00:15:37.044649 kubelet[1946]: I1101 00:15:37.044446 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6f5ffa23-d5fc-4082-88fa-f11e1cc68a31-xtables-lock\") pod \"kube-proxy-ppnfw\" (UID: \"6f5ffa23-d5fc-4082-88fa-f11e1cc68a31\") " pod="kube-system/kube-proxy-ppnfw" Nov 1 00:15:37.072001 systemd[1]: Created slice kubepods-besteffort-pod5d26cd90_6b48_44ac_ad82_6c3260c88ef6.slice. Nov 1 00:15:37.152568 kubelet[1946]: I1101 00:15:37.152489 1946 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:15:37.173220 kubelet[1946]: E1101 00:15:37.173187 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:37.176402 env[1220]: time="2025-11-01T00:15:37.174142398Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-ppnfw,Uid:6f5ffa23-d5fc-4082-88fa-f11e1cc68a31,Namespace:kube-system,Attempt:0,}" Nov 1 00:15:37.192046 env[1220]: time="2025-11-01T00:15:37.191968131Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:15:37.192186 env[1220]: time="2025-11-01T00:15:37.192021100Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:15:37.192186 env[1220]: time="2025-11-01T00:15:37.192032742Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:15:37.192262 env[1220]: time="2025-11-01T00:15:37.192216333Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/009ab28de1d891f0cfb90597d1bb9927918b864c83798f1c1e1167e5fd0899ff pid=2003 runtime=io.containerd.runc.v2 Nov 1 00:15:37.206582 systemd[1]: run-containerd-runc-k8s.io-009ab28de1d891f0cfb90597d1bb9927918b864c83798f1c1e1167e5fd0899ff-runc.EDMBJP.mount: Deactivated successfully. Nov 1 00:15:37.208166 systemd[1]: Started cri-containerd-009ab28de1d891f0cfb90597d1bb9927918b864c83798f1c1e1167e5fd0899ff.scope. Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.226086 kernel: kauditd_printk_skb: 18 callbacks suppressed Nov 1 00:15:37.226137 kernel: audit: type=1400 audit(1761956137.224:810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.231122 kernel: audit: type=1400 audit(1761956137.224:811): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.231193 kernel: audit: type=1400 audit(1761956137.224:812): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.236349 kernel: audit: type=1400 audit(1761956137.224:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.236470 kernel: audit: type=1400 audit(1761956137.224:814): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.241653 kernel: audit: type=1400 audit(1761956137.224:815): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.241713 kernel: audit: type=1400 audit(1761956137.224:816): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.245465 kubelet[1946]: I1101 00:15:37.245437 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/5d26cd90-6b48-44ac-ad82-6c3260c88ef6-var-lib-calico\") pod \"tigera-operator-7dcd859c48-r57gl\" (UID: \"5d26cd90-6b48-44ac-ad82-6c3260c88ef6\") " pod="tigera-operator/tigera-operator-7dcd859c48-r57gl" Nov 1 00:15:37.245545 kubelet[1946]: I1101 00:15:37.245478 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-54gm6\" (UniqueName: \"kubernetes.io/projected/5d26cd90-6b48-44ac-ad82-6c3260c88ef6-kube-api-access-54gm6\") pod \"tigera-operator-7dcd859c48-r57gl\" (UID: \"5d26cd90-6b48-44ac-ad82-6c3260c88ef6\") " pod="tigera-operator/tigera-operator-7dcd859c48-r57gl" Nov 1 00:15:37.246843 kernel: audit: type=1400 audit(1761956137.224:817): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.249438 kernel: audit: type=1400 audit(1761956137.224:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.252520 kernel: audit: type=1400 audit(1761956137.225:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit: BPF prog-id=103 op=LOAD Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2003 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030396162323864653164383931663063666239303539376431626239 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2003 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030396162323864653164383931663063666239303539376431626239 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.225000 audit: BPF prog-id=104 op=LOAD Nov 1 00:15:37.225000 audit[2013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2003 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030396162323864653164383931663063666239303539376431626239 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.227000 audit: BPF prog-id=105 op=LOAD Nov 1 00:15:37.227000 audit[2013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2003 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030396162323864653164383931663063666239303539376431626239 Nov 1 00:15:37.230000 audit: BPF prog-id=105 op=UNLOAD Nov 1 00:15:37.230000 audit: BPF prog-id=104 op=UNLOAD Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { perfmon } for pid=2013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit[2013]: AVC avc: denied { bpf } for pid=2013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.230000 audit: BPF prog-id=106 op=LOAD Nov 1 00:15:37.230000 audit[2013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2003 pid=2013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030396162323864653164383931663063666239303539376431626239 Nov 1 00:15:37.256780 env[1220]: time="2025-11-01T00:15:37.256742457Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-ppnfw,Uid:6f5ffa23-d5fc-4082-88fa-f11e1cc68a31,Namespace:kube-system,Attempt:0,} returns sandbox id \"009ab28de1d891f0cfb90597d1bb9927918b864c83798f1c1e1167e5fd0899ff\"" Nov 1 00:15:37.257649 kubelet[1946]: E1101 00:15:37.257628 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:37.260325 env[1220]: time="2025-11-01T00:15:37.259918707Z" level=info msg="CreateContainer within sandbox \"009ab28de1d891f0cfb90597d1bb9927918b864c83798f1c1e1167e5fd0899ff\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:15:37.272304 env[1220]: time="2025-11-01T00:15:37.272244843Z" level=info msg="CreateContainer within sandbox \"009ab28de1d891f0cfb90597d1bb9927918b864c83798f1c1e1167e5fd0899ff\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"30e7dd537e8004474728774ccf9fa4c4d4a86a69cd835fc97bbcb3179b4dac03\"" Nov 1 00:15:37.272951 env[1220]: time="2025-11-01T00:15:37.272924597Z" level=info msg="StartContainer for \"30e7dd537e8004474728774ccf9fa4c4d4a86a69cd835fc97bbcb3179b4dac03\"" Nov 1 00:15:37.287580 systemd[1]: Started cri-containerd-30e7dd537e8004474728774ccf9fa4c4d4a86a69cd835fc97bbcb3179b4dac03.scope. Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2003 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653764643533376538303034343734373238373734636366396661 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit: BPF prog-id=107 op=LOAD Nov 1 00:15:37.303000 audit[2043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2003 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653764643533376538303034343734373238373734636366396661 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit: BPF prog-id=108 op=LOAD Nov 1 00:15:37.303000 audit[2043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2003 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653764643533376538303034343734373238373734636366396661 Nov 1 00:15:37.303000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:15:37.303000 audit: BPF prog-id=107 op=UNLOAD Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.303000 audit: BPF prog-id=109 op=LOAD Nov 1 00:15:37.303000 audit[2043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2003 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653764643533376538303034343734373238373734636366396661 Nov 1 00:15:37.316536 env[1220]: time="2025-11-01T00:15:37.316484263Z" level=info msg="StartContainer for \"30e7dd537e8004474728774ccf9fa4c4d4a86a69cd835fc97bbcb3179b4dac03\" returns successfully" Nov 1 00:15:37.374834 env[1220]: time="2025-11-01T00:15:37.374795071Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-r57gl,Uid:5d26cd90-6b48-44ac-ad82-6c3260c88ef6,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:15:37.390239 env[1220]: time="2025-11-01T00:15:37.389002561Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:15:37.390239 env[1220]: time="2025-11-01T00:15:37.389048329Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:15:37.390239 env[1220]: time="2025-11-01T00:15:37.389059050Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:15:37.390544 env[1220]: time="2025-11-01T00:15:37.390493090Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/598f2950b79de7b1cf44f2aba2bfb2ff874a2a1ce7361ac699a012f7a0a16eda pid=2086 runtime=io.containerd.runc.v2 Nov 1 00:15:37.403412 systemd[1]: Started cri-containerd-598f2950b79de7b1cf44f2aba2bfb2ff874a2a1ce7361ac699a012f7a0a16eda.scope. Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.418000 audit: BPF prog-id=110 op=LOAD Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2086 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539386632393530623739646537623163663434663261626132626662 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2086 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539386632393530623739646537623163663434663261626132626662 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit: BPF prog-id=111 op=LOAD Nov 1 00:15:37.419000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2086 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539386632393530623739646537623163663434663261626132626662 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit: BPF prog-id=112 op=LOAD Nov 1 00:15:37.419000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2086 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539386632393530623739646537623163663434663261626132626662 Nov 1 00:15:37.419000 audit: BPF prog-id=112 op=UNLOAD Nov 1 00:15:37.419000 audit: BPF prog-id=111 op=UNLOAD Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:37.419000 audit: BPF prog-id=113 op=LOAD Nov 1 00:15:37.419000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2086 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539386632393530623739646537623163663434663261626132626662 Nov 1 00:15:37.438679 env[1220]: time="2025-11-01T00:15:37.438640482Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-r57gl,Uid:5d26cd90-6b48-44ac-ad82-6c3260c88ef6,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"598f2950b79de7b1cf44f2aba2bfb2ff874a2a1ce7361ac699a012f7a0a16eda\"" Nov 1 00:15:37.440604 env[1220]: time="2025-11-01T00:15:37.440574404Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:15:37.451000 audit[2148]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.451000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcdef79d0 a2=0 a3=1 items=0 ppid=2054 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.451000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:15:37.452000 audit[2149]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.452000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3c4c320 a2=0 a3=1 items=0 ppid=2054 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:15:37.454000 audit[2150]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.454000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe7e996c0 a2=0 a3=1 items=0 ppid=2054 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.454000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:15:37.455000 audit[2151]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.455000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc97a9770 a2=0 a3=1 items=0 ppid=2054 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.455000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:15:37.456000 audit[2152]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.456000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffa86dee0 a2=0 a3=1 items=0 ppid=2054 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:15:37.456000 audit[2153]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.456000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6adb390 a2=0 a3=1 items=0 ppid=2054 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.456000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:15:37.553000 audit[2154]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.553000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe6ab3be0 a2=0 a3=1 items=0 ppid=2054 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:15:37.555000 audit[2156]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.555000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffef189050 a2=0 a3=1 items=0 ppid=2054 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.555000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:15:37.559000 audit[2159]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.559000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc472e370 a2=0 a3=1 items=0 ppid=2054 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:15:37.560000 audit[2160]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.560000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf2b86a0 a2=0 a3=1 items=0 ppid=2054 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.560000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:15:37.562000 audit[2162]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.562000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd39ab640 a2=0 a3=1 items=0 ppid=2054 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.562000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:15:37.563000 audit[2163]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.563000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7246a40 a2=0 a3=1 items=0 ppid=2054 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.563000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:15:37.565000 audit[2165]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.565000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffccf265f0 a2=0 a3=1 items=0 ppid=2054 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:15:37.568000 audit[2168]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.568000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeac458d0 a2=0 a3=1 items=0 ppid=2054 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.568000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:15:37.569000 audit[2169]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.569000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff488b890 a2=0 a3=1 items=0 ppid=2054 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.569000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:15:37.571000 audit[2171]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.571000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff5ecb660 a2=0 a3=1 items=0 ppid=2054 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.571000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:15:37.572000 audit[2172]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.572000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9f34ec0 a2=0 a3=1 items=0 ppid=2054 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:15:37.574000 audit[2174]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.574000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe4b187c0 a2=0 a3=1 items=0 ppid=2054 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.574000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:15:37.578000 audit[2177]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.578000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeadaa7f0 a2=0 a3=1 items=0 ppid=2054 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.578000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:15:37.584000 audit[2180]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.584000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc1fc85b0 a2=0 a3=1 items=0 ppid=2054 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.584000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:15:37.585000 audit[2181]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.585000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc4716b30 a2=0 a3=1 items=0 ppid=2054 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.585000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:15:37.588000 audit[2183]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.588000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe7b4e2d0 a2=0 a3=1 items=0 ppid=2054 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:15:37.590000 audit[2186]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.590000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc2dced60 a2=0 a3=1 items=0 ppid=2054 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.590000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:15:37.591000 audit[2187]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.591000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc277adb0 a2=0 a3=1 items=0 ppid=2054 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.591000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:15:37.593000 audit[2189]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:15:37.593000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc03d27b0 a2=0 a3=1 items=0 ppid=2054 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.593000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:15:37.613000 audit[2195]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:37.613000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffff9bd160 a2=0 a3=1 items=0 ppid=2054 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.613000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:37.636000 audit[2195]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:37.636000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffff9bd160 a2=0 a3=1 items=0 ppid=2054 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.636000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:37.637000 audit[2200]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.637000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc6b90a90 a2=0 a3=1 items=0 ppid=2054 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:15:37.640000 audit[2202]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.640000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd28e4a50 a2=0 a3=1 items=0 ppid=2054 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.640000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:15:37.643000 audit[2205]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.643000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd072bdb0 a2=0 a3=1 items=0 ppid=2054 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.643000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:15:37.644000 audit[2206]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.644000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffce73fd10 a2=0 a3=1 items=0 ppid=2054 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.644000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:15:37.646000 audit[2208]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.646000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcfd794b0 a2=0 a3=1 items=0 ppid=2054 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.646000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:15:37.647000 audit[2209]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.647000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf132060 a2=0 a3=1 items=0 ppid=2054 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.647000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:15:37.650000 audit[2211]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.650000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcfaab9b0 a2=0 a3=1 items=0 ppid=2054 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.650000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:15:37.653000 audit[2214]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.653000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd0075e60 a2=0 a3=1 items=0 ppid=2054 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.653000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:15:37.655000 audit[2215]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.655000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3a321c0 a2=0 a3=1 items=0 ppid=2054 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.655000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:15:37.657000 audit[2217]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.657000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe24d93d0 a2=0 a3=1 items=0 ppid=2054 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.657000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:15:37.659000 audit[2218]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.659000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff0883420 a2=0 a3=1 items=0 ppid=2054 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.659000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:15:37.663000 audit[2220]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.663000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd41a2c10 a2=0 a3=1 items=0 ppid=2054 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.663000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:15:37.666000 audit[2223]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.666000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffefe13f80 a2=0 a3=1 items=0 ppid=2054 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.666000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:15:37.670000 audit[2226]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.670000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd66491b0 a2=0 a3=1 items=0 ppid=2054 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.670000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:15:37.671000 audit[2227]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.671000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe1398250 a2=0 a3=1 items=0 ppid=2054 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:15:37.673000 audit[2229]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.673000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe4e1f760 a2=0 a3=1 items=0 ppid=2054 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.673000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:15:37.676000 audit[2232]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.676000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd4100b00 a2=0 a3=1 items=0 ppid=2054 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.676000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:15:37.677000 audit[2233]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.677000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffce3e0300 a2=0 a3=1 items=0 ppid=2054 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.677000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:15:37.679000 audit[2235]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.679000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc86c7920 a2=0 a3=1 items=0 ppid=2054 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.679000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:15:37.680000 audit[2236]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.680000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffeae7680 a2=0 a3=1 items=0 ppid=2054 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.680000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:15:37.682000 audit[2238]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.682000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdc1065d0 a2=0 a3=1 items=0 ppid=2054 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.682000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:15:37.686000 audit[2241]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:15:37.686000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe22dab50 a2=0 a3=1 items=0 ppid=2054 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.686000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:15:37.689000 audit[2243]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:15:37.689000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffed6f1930 a2=0 a3=1 items=0 ppid=2054 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.689000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:37.690000 audit[2243]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:15:37.690000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffed6f1930 a2=0 a3=1 items=0 ppid=2054 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:37.690000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:37.726419 kubelet[1946]: E1101 00:15:37.726351 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:37.737123 kubelet[1946]: I1101 00:15:37.737070 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-ppnfw" podStartSLOduration=1.737055984 podStartE2EDuration="1.737055984s" podCreationTimestamp="2025-11-01 00:15:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:15:37.736775377 +0000 UTC m=+8.133079633" watchObservedRunningTime="2025-11-01 00:15:37.737055984 +0000 UTC m=+8.133360240" Nov 1 00:15:38.363828 kubelet[1946]: E1101 00:15:38.363720 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:38.729118 kubelet[1946]: E1101 00:15:38.728845 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:38.760497 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2245532078.mount: Deactivated successfully. Nov 1 00:15:39.381756 kubelet[1946]: E1101 00:15:39.381704 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:39.454212 env[1220]: time="2025-11-01T00:15:39.454158271Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:39.455573 env[1220]: time="2025-11-01T00:15:39.455531597Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:39.457368 env[1220]: time="2025-11-01T00:15:39.457340628Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:39.458882 env[1220]: time="2025-11-01T00:15:39.458846414Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:39.459447 env[1220]: time="2025-11-01T00:15:39.459424540Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Nov 1 00:15:39.461931 env[1220]: time="2025-11-01T00:15:39.461898991Z" level=info msg="CreateContainer within sandbox \"598f2950b79de7b1cf44f2aba2bfb2ff874a2a1ce7361ac699a012f7a0a16eda\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:15:39.472436 env[1220]: time="2025-11-01T00:15:39.472397485Z" level=info msg="CreateContainer within sandbox \"598f2950b79de7b1cf44f2aba2bfb2ff874a2a1ce7361ac699a012f7a0a16eda\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"93f0f3aa800e2993cc359a190883b767640a4a61d033ea4c6220f9be59ca3d7d\"" Nov 1 00:15:39.472818 env[1220]: time="2025-11-01T00:15:39.472767061Z" level=info msg="StartContainer for \"93f0f3aa800e2993cc359a190883b767640a4a61d033ea4c6220f9be59ca3d7d\"" Nov 1 00:15:39.493556 systemd[1]: run-containerd-runc-k8s.io-93f0f3aa800e2993cc359a190883b767640a4a61d033ea4c6220f9be59ca3d7d-runc.RKpy8u.mount: Deactivated successfully. Nov 1 00:15:39.495912 systemd[1]: Started cri-containerd-93f0f3aa800e2993cc359a190883b767640a4a61d033ea4c6220f9be59ca3d7d.scope. Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.508000 audit: BPF prog-id=114 op=LOAD Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2086 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:39.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933663066336161383030653239393363633335396131393038383362 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2086 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:39.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933663066336161383030653239393363633335396131393038383362 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit: BPF prog-id=115 op=LOAD Nov 1 00:15:39.509000 audit[2252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2086 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:39.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933663066336161383030653239393363633335396131393038383362 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit: BPF prog-id=116 op=LOAD Nov 1 00:15:39.509000 audit[2252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2086 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:39.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933663066336161383030653239393363633335396131393038383362 Nov 1 00:15:39.509000 audit: BPF prog-id=116 op=UNLOAD Nov 1 00:15:39.509000 audit: BPF prog-id=115 op=UNLOAD Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { perfmon } for pid=2252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit[2252]: AVC avc: denied { bpf } for pid=2252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:39.509000 audit: BPF prog-id=117 op=LOAD Nov 1 00:15:39.509000 audit[2252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2086 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:39.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933663066336161383030653239393363633335396131393038383362 Nov 1 00:15:39.520174 env[1220]: time="2025-11-01T00:15:39.520135083Z" level=info msg="StartContainer for \"93f0f3aa800e2993cc359a190883b767640a4a61d033ea4c6220f9be59ca3d7d\" returns successfully" Nov 1 00:15:39.734884 kubelet[1946]: E1101 00:15:39.732483 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:39.747253 kubelet[1946]: I1101 00:15:39.747192 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-r57gl" podStartSLOduration=0.726628483 podStartE2EDuration="2.747174725s" podCreationTimestamp="2025-11-01 00:15:37 +0000 UTC" firstStartedPulling="2025-11-01 00:15:37.439914294 +0000 UTC m=+7.836218510" lastFinishedPulling="2025-11-01 00:15:39.460460496 +0000 UTC m=+9.856764752" observedRunningTime="2025-11-01 00:15:39.745019602 +0000 UTC m=+10.141323898" watchObservedRunningTime="2025-11-01 00:15:39.747174725 +0000 UTC m=+10.143478941" Nov 1 00:15:40.734134 kubelet[1946]: E1101 00:15:40.734100 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:42.002090 update_engine[1210]: I1101 00:15:42.002035 1210 update_attempter.cc:509] Updating boot flags... Nov 1 00:15:43.459937 kubelet[1946]: E1101 00:15:43.459902 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:44.674697 sudo[1357]: pam_unix(sudo:session): session closed for user root Nov 1 00:15:44.678964 kernel: kauditd_printk_skb: 357 callbacks suppressed Nov 1 00:15:44.679073 kernel: audit: type=1106 audit(1761956144.674:921): pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:44.674000 audit[1357]: USER_END pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:44.678000 audit[1357]: CRED_DISP pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:44.682270 kernel: audit: type=1104 audit(1761956144.678:922): pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:15:44.685711 sshd[1353]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:44.685000 audit[1353]: USER_END pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:44.690879 systemd[1]: sshd@6-10.0.0.59:22-10.0.0.1:37878.service: Deactivated successfully. Nov 1 00:15:44.691597 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:15:44.691757 systemd[1]: session-7.scope: Consumed 7.956s CPU time. Nov 1 00:15:44.685000 audit[1353]: CRED_DISP pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:44.692632 systemd-logind[1206]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:15:44.696235 kernel: audit: type=1106 audit(1761956144.685:923): pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:44.696309 kernel: audit: type=1104 audit(1761956144.685:924): pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:15:44.696804 systemd-logind[1206]: Removed session 7. Nov 1 00:15:44.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.59:22-10.0.0.1:37878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:44.699844 kernel: audit: type=1131 audit(1761956144.690:925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.59:22-10.0.0.1:37878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:45.878000 audit[2352]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:45.878000 audit[2352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffa4098f0 a2=0 a3=1 items=0 ppid=2054 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:45.886440 kernel: audit: type=1325 audit(1761956145.878:926): table=filter:89 family=2 entries=14 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:45.886535 kernel: audit: type=1300 audit(1761956145.878:926): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffa4098f0 a2=0 a3=1 items=0 ppid=2054 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:45.886562 kernel: audit: type=1327 audit(1761956145.878:926): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:45.878000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:45.893000 audit[2352]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:45.897006 kernel: audit: type=1325 audit(1761956145.893:927): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:45.893000 audit[2352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffa4098f0 a2=0 a3=1 items=0 ppid=2054 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:45.893000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:45.902012 kernel: audit: type=1300 audit(1761956145.893:927): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffa4098f0 a2=0 a3=1 items=0 ppid=2054 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:45.913000 audit[2354]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:45.913000 audit[2354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff8e2a070 a2=0 a3=1 items=0 ppid=2054 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:45.913000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:45.920000 audit[2354]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:45.920000 audit[2354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff8e2a070 a2=0 a3=1 items=0 ppid=2054 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:45.920000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:51.547000 audit[2358]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:51.549447 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:15:51.549528 kernel: audit: type=1325 audit(1761956151.547:930): table=filter:93 family=2 entries=17 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:51.547000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffda38fe20 a2=0 a3=1 items=0 ppid=2054 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.555867 kernel: audit: type=1300 audit(1761956151.547:930): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffda38fe20 a2=0 a3=1 items=0 ppid=2054 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.547000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:51.558068 kernel: audit: type=1327 audit(1761956151.547:930): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:51.561000 audit[2358]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:51.565009 kernel: audit: type=1325 audit(1761956151.561:931): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:51.561000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffda38fe20 a2=0 a3=1 items=0 ppid=2054 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:51.574777 kernel: audit: type=1300 audit(1761956151.561:931): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffda38fe20 a2=0 a3=1 items=0 ppid=2054 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.574857 kernel: audit: type=1327 audit(1761956151.561:931): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:51.577000 audit[2360]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:51.577000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc1b1d1f0 a2=0 a3=1 items=0 ppid=2054 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.584660 kernel: audit: type=1325 audit(1761956151.577:932): table=filter:95 family=2 entries=18 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:51.584726 kernel: audit: type=1300 audit(1761956151.577:932): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc1b1d1f0 a2=0 a3=1 items=0 ppid=2054 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.577000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:51.586972 kernel: audit: type=1327 audit(1761956151.577:932): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:51.587000 audit[2360]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:51.587000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc1b1d1f0 a2=0 a3=1 items=0 ppid=2054 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.593080 kernel: audit: type=1325 audit(1761956151.587:933): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:51.587000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:52.602000 audit[2362]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:52.602000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffed09c050 a2=0 a3=1 items=0 ppid=2054 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:52.602000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:52.607000 audit[2362]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:52.607000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffed09c050 a2=0 a3=1 items=0 ppid=2054 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:52.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:53.353928 systemd[1]: Created slice kubepods-besteffort-pod262e2dbf_b396_4782_bc1f_bb56d89636f7.slice. Nov 1 00:15:53.361041 kubelet[1946]: I1101 00:15:53.361005 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/262e2dbf-b396-4782-bc1f-bb56d89636f7-tigera-ca-bundle\") pod \"calico-typha-f7469f97b-fjpcm\" (UID: \"262e2dbf-b396-4782-bc1f-bb56d89636f7\") " pod="calico-system/calico-typha-f7469f97b-fjpcm" Nov 1 00:15:53.361041 kubelet[1946]: I1101 00:15:53.361043 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pw96z\" (UniqueName: \"kubernetes.io/projected/262e2dbf-b396-4782-bc1f-bb56d89636f7-kube-api-access-pw96z\") pod \"calico-typha-f7469f97b-fjpcm\" (UID: \"262e2dbf-b396-4782-bc1f-bb56d89636f7\") " pod="calico-system/calico-typha-f7469f97b-fjpcm" Nov 1 00:15:53.361398 kubelet[1946]: I1101 00:15:53.361062 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/262e2dbf-b396-4782-bc1f-bb56d89636f7-typha-certs\") pod \"calico-typha-f7469f97b-fjpcm\" (UID: \"262e2dbf-b396-4782-bc1f-bb56d89636f7\") " pod="calico-system/calico-typha-f7469f97b-fjpcm" Nov 1 00:15:53.544696 systemd[1]: Created slice kubepods-besteffort-pod4909bb22_812b_463a_9c06_0d3da9d3ef99.slice. Nov 1 00:15:53.617000 audit[2366]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:53.617000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffec730630 a2=0 a3=1 items=0 ppid=2054 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.617000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:53.623000 audit[2366]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:53.623000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffec730630 a2=0 a3=1 items=0 ppid=2054 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.623000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:53.656280 kubelet[1946]: E1101 00:15:53.656243 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:53.656701 env[1220]: time="2025-11-01T00:15:53.656655046Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-f7469f97b-fjpcm,Uid:262e2dbf-b396-4782-bc1f-bb56d89636f7,Namespace:calico-system,Attempt:0,}" Nov 1 00:15:53.663532 kubelet[1946]: I1101 00:15:53.663501 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-lib-modules\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663618 kubelet[1946]: I1101 00:15:53.663539 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-var-lib-calico\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663618 kubelet[1946]: I1101 00:15:53.663560 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-flexvol-driver-host\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663618 kubelet[1946]: I1101 00:15:53.663579 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/4909bb22-812b-463a-9c06-0d3da9d3ef99-node-certs\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663618 kubelet[1946]: I1101 00:15:53.663595 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-cni-log-dir\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663618 kubelet[1946]: I1101 00:15:53.663611 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4909bb22-812b-463a-9c06-0d3da9d3ef99-tigera-ca-bundle\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663744 kubelet[1946]: I1101 00:15:53.663677 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-var-run-calico\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663744 kubelet[1946]: I1101 00:15:53.663707 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-xtables-lock\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663744 kubelet[1946]: I1101 00:15:53.663723 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6dptt\" (UniqueName: \"kubernetes.io/projected/4909bb22-812b-463a-9c06-0d3da9d3ef99-kube-api-access-6dptt\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663811 kubelet[1946]: I1101 00:15:53.663756 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-cni-bin-dir\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663811 kubelet[1946]: I1101 00:15:53.663775 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-cni-net-dir\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.663878 kubelet[1946]: I1101 00:15:53.663808 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/4909bb22-812b-463a-9c06-0d3da9d3ef99-policysync\") pod \"calico-node-x64wt\" (UID: \"4909bb22-812b-463a-9c06-0d3da9d3ef99\") " pod="calico-system/calico-node-x64wt" Nov 1 00:15:53.674795 env[1220]: time="2025-11-01T00:15:53.674731439Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:15:53.674795 env[1220]: time="2025-11-01T00:15:53.674773522Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:15:53.674795 env[1220]: time="2025-11-01T00:15:53.674784283Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:15:53.674998 env[1220]: time="2025-11-01T00:15:53.674960936Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/67525f9f4da9efff4ddcd46e9e2bc4fc7b970373caf69bbc316b0c5cbbb0bf9b pid=2375 runtime=io.containerd.runc.v2 Nov 1 00:15:53.691377 systemd[1]: Started cri-containerd-67525f9f4da9efff4ddcd46e9e2bc4fc7b970373caf69bbc316b0c5cbbb0bf9b.scope. Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.705000 audit: BPF prog-id=118 op=LOAD Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353235663966346461396566666634646463643436653965326263 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353235663966346461396566666634646463643436653965326263 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit: BPF prog-id=119 op=LOAD Nov 1 00:15:53.706000 audit[2385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353235663966346461396566666634646463643436653965326263 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit: BPF prog-id=120 op=LOAD Nov 1 00:15:53.706000 audit[2385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353235663966346461396566666634646463643436653965326263 Nov 1 00:15:53.706000 audit: BPF prog-id=120 op=UNLOAD Nov 1 00:15:53.706000 audit: BPF prog-id=119 op=UNLOAD Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { perfmon } for pid=2385 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit[2385]: AVC avc: denied { bpf } for pid=2385 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.706000 audit: BPF prog-id=121 op=LOAD Nov 1 00:15:53.706000 audit[2385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2375 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353235663966346461396566666634646463643436653965326263 Nov 1 00:15:53.725596 env[1220]: time="2025-11-01T00:15:53.725557914Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-f7469f97b-fjpcm,Uid:262e2dbf-b396-4782-bc1f-bb56d89636f7,Namespace:calico-system,Attempt:0,} returns sandbox id \"67525f9f4da9efff4ddcd46e9e2bc4fc7b970373caf69bbc316b0c5cbbb0bf9b\"" Nov 1 00:15:53.726215 kubelet[1946]: E1101 00:15:53.726196 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:53.727613 env[1220]: time="2025-11-01T00:15:53.727581470Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:15:53.767326 kubelet[1946]: E1101 00:15:53.767099 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.767326 kubelet[1946]: W1101 00:15:53.767122 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.768245 kubelet[1946]: E1101 00:15:53.768179 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.768245 kubelet[1946]: W1101 00:15:53.768196 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.769085 kubelet[1946]: E1101 00:15:53.769060 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.769213 kubelet[1946]: E1101 00:15:53.769159 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.769276 kubelet[1946]: E1101 00:15:53.769243 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.769333 kubelet[1946]: W1101 00:15:53.769319 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.769406 kubelet[1946]: E1101 00:15:53.769394 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.769603 kubelet[1946]: E1101 00:15:53.769579 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.769603 kubelet[1946]: W1101 00:15:53.769596 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.769679 kubelet[1946]: E1101 00:15:53.769613 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.770014 kubelet[1946]: E1101 00:15:53.769979 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.770014 kubelet[1946]: W1101 00:15:53.770010 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.770101 kubelet[1946]: E1101 00:15:53.770064 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.770353 kubelet[1946]: E1101 00:15:53.770288 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.770353 kubelet[1946]: W1101 00:15:53.770302 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.770353 kubelet[1946]: E1101 00:15:53.770401 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.770694 kubelet[1946]: E1101 00:15:53.770590 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.770694 kubelet[1946]: W1101 00:15:53.770601 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.770694 kubelet[1946]: E1101 00:15:53.770682 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.770969 kubelet[1946]: E1101 00:15:53.770943 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.770969 kubelet[1946]: W1101 00:15:53.770959 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.771068 kubelet[1946]: E1101 00:15:53.771030 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.771205 kubelet[1946]: E1101 00:15:53.771184 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.771205 kubelet[1946]: W1101 00:15:53.771198 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.771271 kubelet[1946]: E1101 00:15:53.771240 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.771382 kubelet[1946]: E1101 00:15:53.771364 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.771382 kubelet[1946]: W1101 00:15:53.771375 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.771462 kubelet[1946]: E1101 00:15:53.771414 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.771577 kubelet[1946]: E1101 00:15:53.771559 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.771577 kubelet[1946]: W1101 00:15:53.771570 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.771644 kubelet[1946]: E1101 00:15:53.771583 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.771739 kubelet[1946]: E1101 00:15:53.771721 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.771832 kubelet[1946]: W1101 00:15:53.771812 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.771878 kubelet[1946]: E1101 00:15:53.771850 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.772942 kubelet[1946]: E1101 00:15:53.772898 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.772942 kubelet[1946]: W1101 00:15:53.772919 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.772942 kubelet[1946]: E1101 00:15:53.772939 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.774718 kubelet[1946]: E1101 00:15:53.774696 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.774796 kubelet[1946]: W1101 00:15:53.774732 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.774796 kubelet[1946]: E1101 00:15:53.774752 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.775247 kubelet[1946]: E1101 00:15:53.775215 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.775247 kubelet[1946]: W1101 00:15:53.775244 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.775362 kubelet[1946]: E1101 00:15:53.775277 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.775530 kubelet[1946]: E1101 00:15:53.775513 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.775530 kubelet[1946]: W1101 00:15:53.775529 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.775672 kubelet[1946]: E1101 00:15:53.775654 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.775762 kubelet[1946]: E1101 00:15:53.775717 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.775847 kubelet[1946]: W1101 00:15:53.775834 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.775955 kubelet[1946]: E1101 00:15:53.775938 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.776202 kubelet[1946]: E1101 00:15:53.776190 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.776304 kubelet[1946]: W1101 00:15:53.776290 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.776411 kubelet[1946]: E1101 00:15:53.776395 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.776676 kubelet[1946]: E1101 00:15:53.776663 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.776766 kubelet[1946]: W1101 00:15:53.776753 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.776850 kubelet[1946]: E1101 00:15:53.776838 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.789537 kubelet[1946]: E1101 00:15:53.788568 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:15:53.792586 kubelet[1946]: E1101 00:15:53.792567 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.792586 kubelet[1946]: W1101 00:15:53.792585 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.792708 kubelet[1946]: E1101 00:15:53.792600 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.848109 kubelet[1946]: E1101 00:15:53.848083 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:53.848671 env[1220]: time="2025-11-01T00:15:53.848633356Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-x64wt,Uid:4909bb22-812b-463a-9c06-0d3da9d3ef99,Namespace:calico-system,Attempt:0,}" Nov 1 00:15:53.861666 env[1220]: time="2025-11-01T00:15:53.861595955Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:15:53.861666 env[1220]: time="2025-11-01T00:15:53.861639758Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:15:53.862103 env[1220]: time="2025-11-01T00:15:53.861650359Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:15:53.862251 env[1220]: time="2025-11-01T00:15:53.862199041Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387 pid=2439 runtime=io.containerd.runc.v2 Nov 1 00:15:53.875003 kubelet[1946]: E1101 00:15:53.874974 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.875127 kubelet[1946]: W1101 00:15:53.875109 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.875212 kubelet[1946]: E1101 00:15:53.875197 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.875555 kubelet[1946]: E1101 00:15:53.875540 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.875693 kubelet[1946]: W1101 00:15:53.875645 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.875764 kubelet[1946]: E1101 00:15:53.875751 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.876008 kubelet[1946]: E1101 00:15:53.875979 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.876094 kubelet[1946]: W1101 00:15:53.876081 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.876153 kubelet[1946]: E1101 00:15:53.876140 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.876397 kubelet[1946]: E1101 00:15:53.876382 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.876512 kubelet[1946]: W1101 00:15:53.876489 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.876582 kubelet[1946]: E1101 00:15:53.876570 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.876840 kubelet[1946]: E1101 00:15:53.876827 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.876920 kubelet[1946]: W1101 00:15:53.876907 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.877021 kubelet[1946]: E1101 00:15:53.877007 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.877254 kubelet[1946]: E1101 00:15:53.877241 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.877347 kubelet[1946]: W1101 00:15:53.877333 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.877440 kubelet[1946]: E1101 00:15:53.877427 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.877681 kubelet[1946]: E1101 00:15:53.877669 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.877818 kubelet[1946]: W1101 00:15:53.877802 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.877880 kubelet[1946]: E1101 00:15:53.877869 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.878136 kubelet[1946]: E1101 00:15:53.878122 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.878247 kubelet[1946]: W1101 00:15:53.878213 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.878895 kubelet[1946]: E1101 00:15:53.878876 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.879242 kubelet[1946]: E1101 00:15:53.879227 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.879358 kubelet[1946]: W1101 00:15:53.879343 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.879465 kubelet[1946]: E1101 00:15:53.879441 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.887104 kubelet[1946]: E1101 00:15:53.887081 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.887204 kubelet[1946]: W1101 00:15:53.887189 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.887279 kubelet[1946]: E1101 00:15:53.887265 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.887582 kubelet[1946]: E1101 00:15:53.887569 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.887658 kubelet[1946]: W1101 00:15:53.887645 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.887735 kubelet[1946]: E1101 00:15:53.887723 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.889312 kubelet[1946]: E1101 00:15:53.889293 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.889398 kubelet[1946]: W1101 00:15:53.889385 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.889468 kubelet[1946]: E1101 00:15:53.889443 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.889824 kubelet[1946]: E1101 00:15:53.889809 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.889926 kubelet[1946]: W1101 00:15:53.889912 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.890015 kubelet[1946]: E1101 00:15:53.890002 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.892729 kubelet[1946]: E1101 00:15:53.892710 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.892880 kubelet[1946]: W1101 00:15:53.892835 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.893182 kubelet[1946]: E1101 00:15:53.893165 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.894051 kubelet[1946]: E1101 00:15:53.894035 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.894131 kubelet[1946]: W1101 00:15:53.894119 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.894206 kubelet[1946]: E1101 00:15:53.894194 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.894426 kubelet[1946]: E1101 00:15:53.894414 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.894516 kubelet[1946]: W1101 00:15:53.894502 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.894572 kubelet[1946]: E1101 00:15:53.894561 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.895072 kubelet[1946]: E1101 00:15:53.894865 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.895154 kubelet[1946]: W1101 00:15:53.895140 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.895230 kubelet[1946]: E1101 00:15:53.895217 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.895485 kubelet[1946]: E1101 00:15:53.895470 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.895717 kubelet[1946]: W1101 00:15:53.895700 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.895800 kubelet[1946]: E1101 00:15:53.895787 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.896066 kubelet[1946]: E1101 00:15:53.896053 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.896171 kubelet[1946]: W1101 00:15:53.896157 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.898227 systemd[1]: Started cri-containerd-b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387.scope. Nov 1 00:15:53.900481 kubelet[1946]: E1101 00:15:53.900453 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.900874 kubelet[1946]: E1101 00:15:53.900859 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.901147 kubelet[1946]: W1101 00:15:53.901115 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.901230 kubelet[1946]: E1101 00:15:53.901218 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.901587 kubelet[1946]: E1101 00:15:53.901573 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.901682 kubelet[1946]: W1101 00:15:53.901669 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.901793 kubelet[1946]: E1101 00:15:53.901779 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.901894 kubelet[1946]: I1101 00:15:53.901879 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/81bfb214-06ca-4024-b7df-4955466b6e05-registration-dir\") pod \"csi-node-driver-zbrhh\" (UID: \"81bfb214-06ca-4024-b7df-4955466b6e05\") " pod="calico-system/csi-node-driver-zbrhh" Nov 1 00:15:53.902520 kubelet[1946]: E1101 00:15:53.902141 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.902520 kubelet[1946]: W1101 00:15:53.902157 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.902520 kubelet[1946]: E1101 00:15:53.902174 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.902520 kubelet[1946]: E1101 00:15:53.902374 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.902520 kubelet[1946]: W1101 00:15:53.902383 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.902520 kubelet[1946]: E1101 00:15:53.902395 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.903544 kubelet[1946]: E1101 00:15:53.903526 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.903544 kubelet[1946]: W1101 00:15:53.903541 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.903625 kubelet[1946]: E1101 00:15:53.903553 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.903625 kubelet[1946]: I1101 00:15:53.903576 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/81bfb214-06ca-4024-b7df-4955466b6e05-varrun\") pod \"csi-node-driver-zbrhh\" (UID: \"81bfb214-06ca-4024-b7df-4955466b6e05\") " pod="calico-system/csi-node-driver-zbrhh" Nov 1 00:15:53.903828 kubelet[1946]: E1101 00:15:53.903787 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.903828 kubelet[1946]: W1101 00:15:53.903803 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.903828 kubelet[1946]: E1101 00:15:53.903818 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.903930 kubelet[1946]: I1101 00:15:53.903834 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/81bfb214-06ca-4024-b7df-4955466b6e05-kubelet-dir\") pod \"csi-node-driver-zbrhh\" (UID: \"81bfb214-06ca-4024-b7df-4955466b6e05\") " pod="calico-system/csi-node-driver-zbrhh" Nov 1 00:15:53.904475 kubelet[1946]: E1101 00:15:53.904445 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.904475 kubelet[1946]: W1101 00:15:53.904474 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.904834 kubelet[1946]: E1101 00:15:53.904489 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.904834 kubelet[1946]: I1101 00:15:53.904523 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kpp67\" (UniqueName: \"kubernetes.io/projected/81bfb214-06ca-4024-b7df-4955466b6e05-kube-api-access-kpp67\") pod \"csi-node-driver-zbrhh\" (UID: \"81bfb214-06ca-4024-b7df-4955466b6e05\") " pod="calico-system/csi-node-driver-zbrhh" Nov 1 00:15:53.905429 kubelet[1946]: E1101 00:15:53.904873 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.905429 kubelet[1946]: W1101 00:15:53.904894 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.905429 kubelet[1946]: E1101 00:15:53.904907 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.905429 kubelet[1946]: I1101 00:15:53.904923 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/81bfb214-06ca-4024-b7df-4955466b6e05-socket-dir\") pod \"csi-node-driver-zbrhh\" (UID: \"81bfb214-06ca-4024-b7df-4955466b6e05\") " pod="calico-system/csi-node-driver-zbrhh" Nov 1 00:15:53.905429 kubelet[1946]: E1101 00:15:53.905264 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.905429 kubelet[1946]: W1101 00:15:53.905275 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.905429 kubelet[1946]: E1101 00:15:53.905292 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.905653 kubelet[1946]: E1101 00:15:53.905486 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.905653 kubelet[1946]: W1101 00:15:53.905494 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.905653 kubelet[1946]: E1101 00:15:53.905632 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.905653 kubelet[1946]: W1101 00:15:53.905638 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.905763 kubelet[1946]: E1101 00:15:53.905741 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.905763 kubelet[1946]: W1101 00:15:53.905748 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.905763 kubelet[1946]: E1101 00:15:53.905756 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.906393 kubelet[1946]: E1101 00:15:53.905855 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.906393 kubelet[1946]: W1101 00:15:53.905869 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.906393 kubelet[1946]: E1101 00:15:53.905884 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.906393 kubelet[1946]: E1101 00:15:53.905911 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.906393 kubelet[1946]: E1101 00:15:53.906097 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.906393 kubelet[1946]: W1101 00:15:53.906107 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.906393 kubelet[1946]: E1101 00:15:53.906117 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.911708 kubelet[1946]: E1101 00:15:53.906488 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.911708 kubelet[1946]: E1101 00:15:53.907109 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.911708 kubelet[1946]: W1101 00:15:53.907121 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.911708 kubelet[1946]: E1101 00:15:53.907133 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.911708 kubelet[1946]: E1101 00:15:53.907291 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:53.911708 kubelet[1946]: W1101 00:15:53.907300 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:53.911708 kubelet[1946]: E1101 00:15:53.907308 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit: BPF prog-id=122 op=LOAD Nov 1 00:15:53.917000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2439 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230656539666236383830323165643962643638363032616139323930 Nov 1 00:15:53.917000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.917000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2439 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230656539666236383830323165643962643638363032616139323930 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit: BPF prog-id=123 op=LOAD Nov 1 00:15:53.918000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2439 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230656539666236383830323165643962643638363032616139323930 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit: BPF prog-id=124 op=LOAD Nov 1 00:15:53.918000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2439 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230656539666236383830323165643962643638363032616139323930 Nov 1 00:15:53.918000 audit: BPF prog-id=124 op=UNLOAD Nov 1 00:15:53.918000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:53.918000 audit: BPF prog-id=125 op=LOAD Nov 1 00:15:53.918000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2439 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:53.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230656539666236383830323165643962643638363032616139323930 Nov 1 00:15:53.928974 env[1220]: time="2025-11-01T00:15:53.928933743Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-x64wt,Uid:4909bb22-812b-463a-9c06-0d3da9d3ef99,Namespace:calico-system,Attempt:0,} returns sandbox id \"b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387\"" Nov 1 00:15:53.929476 kubelet[1946]: E1101 00:15:53.929450 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:54.006316 kubelet[1946]: E1101 00:15:54.006288 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.006488 kubelet[1946]: W1101 00:15:54.006460 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.006720 kubelet[1946]: E1101 00:15:54.006702 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.007032 kubelet[1946]: E1101 00:15:54.007018 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.007124 kubelet[1946]: W1101 00:15:54.007111 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.007213 kubelet[1946]: E1101 00:15:54.007200 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.007402 kubelet[1946]: E1101 00:15:54.007387 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.007402 kubelet[1946]: W1101 00:15:54.007403 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.007491 kubelet[1946]: E1101 00:15:54.007420 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.007562 kubelet[1946]: E1101 00:15:54.007550 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.007562 kubelet[1946]: W1101 00:15:54.007560 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.007634 kubelet[1946]: E1101 00:15:54.007572 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.007695 kubelet[1946]: E1101 00:15:54.007684 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.007695 kubelet[1946]: W1101 00:15:54.007693 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.007763 kubelet[1946]: E1101 00:15:54.007705 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.007885 kubelet[1946]: E1101 00:15:54.007870 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.007926 kubelet[1946]: W1101 00:15:54.007886 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.007926 kubelet[1946]: E1101 00:15:54.007900 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.008097 kubelet[1946]: E1101 00:15:54.008086 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.008142 kubelet[1946]: W1101 00:15:54.008098 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.008142 kubelet[1946]: E1101 00:15:54.008114 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.008297 kubelet[1946]: E1101 00:15:54.008287 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.008297 kubelet[1946]: W1101 00:15:54.008297 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.008368 kubelet[1946]: E1101 00:15:54.008309 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.008474 kubelet[1946]: E1101 00:15:54.008454 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.008474 kubelet[1946]: W1101 00:15:54.008471 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.008530 kubelet[1946]: E1101 00:15:54.008514 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.008616 kubelet[1946]: E1101 00:15:54.008607 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.008616 kubelet[1946]: W1101 00:15:54.008616 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.008689 kubelet[1946]: E1101 00:15:54.008637 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.008750 kubelet[1946]: E1101 00:15:54.008741 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.008750 kubelet[1946]: W1101 00:15:54.008749 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.008815 kubelet[1946]: E1101 00:15:54.008760 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.008897 kubelet[1946]: E1101 00:15:54.008889 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.008938 kubelet[1946]: W1101 00:15:54.008897 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.008938 kubelet[1946]: E1101 00:15:54.008909 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.009053 kubelet[1946]: E1101 00:15:54.009044 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.009087 kubelet[1946]: W1101 00:15:54.009053 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.009087 kubelet[1946]: E1101 00:15:54.009068 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.009342 kubelet[1946]: E1101 00:15:54.009330 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.009385 kubelet[1946]: W1101 00:15:54.009343 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.009385 kubelet[1946]: E1101 00:15:54.009358 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.009536 kubelet[1946]: E1101 00:15:54.009526 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.009573 kubelet[1946]: W1101 00:15:54.009537 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.009573 kubelet[1946]: E1101 00:15:54.009551 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.009702 kubelet[1946]: E1101 00:15:54.009692 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.009702 kubelet[1946]: W1101 00:15:54.009702 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.009765 kubelet[1946]: E1101 00:15:54.009721 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.009835 kubelet[1946]: E1101 00:15:54.009827 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.009835 kubelet[1946]: W1101 00:15:54.009835 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.009898 kubelet[1946]: E1101 00:15:54.009853 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.009957 kubelet[1946]: E1101 00:15:54.009949 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.009957 kubelet[1946]: W1101 00:15:54.009956 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.010058 kubelet[1946]: E1101 00:15:54.009973 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.010124 kubelet[1946]: E1101 00:15:54.010114 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.010157 kubelet[1946]: W1101 00:15:54.010124 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.010157 kubelet[1946]: E1101 00:15:54.010136 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.010287 kubelet[1946]: E1101 00:15:54.010278 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.010323 kubelet[1946]: W1101 00:15:54.010288 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.010323 kubelet[1946]: E1101 00:15:54.010299 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.010428 kubelet[1946]: E1101 00:15:54.010420 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.010477 kubelet[1946]: W1101 00:15:54.010429 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.010477 kubelet[1946]: E1101 00:15:54.010440 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.010572 kubelet[1946]: E1101 00:15:54.010563 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.010607 kubelet[1946]: W1101 00:15:54.010572 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.010607 kubelet[1946]: E1101 00:15:54.010583 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.010731 kubelet[1946]: E1101 00:15:54.010722 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.010764 kubelet[1946]: W1101 00:15:54.010731 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.010764 kubelet[1946]: E1101 00:15:54.010742 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.010871 kubelet[1946]: E1101 00:15:54.010861 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.010905 kubelet[1946]: W1101 00:15:54.010871 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.010905 kubelet[1946]: E1101 00:15:54.010879 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.011050 kubelet[1946]: E1101 00:15:54.011040 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.011083 kubelet[1946]: W1101 00:15:54.011052 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.011083 kubelet[1946]: E1101 00:15:54.011061 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.020329 kubelet[1946]: E1101 00:15:54.020312 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:54.020443 kubelet[1946]: W1101 00:15:54.020428 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:54.020536 kubelet[1946]: E1101 00:15:54.020524 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:54.469819 systemd[1]: run-containerd-runc-k8s.io-67525f9f4da9efff4ddcd46e9e2bc4fc7b970373caf69bbc316b0c5cbbb0bf9b-runc.yUzYhT.mount: Deactivated successfully. Nov 1 00:15:54.674906 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount501424534.mount: Deactivated successfully. Nov 1 00:15:55.434961 env[1220]: time="2025-11-01T00:15:55.434913013Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:55.437032 env[1220]: time="2025-11-01T00:15:55.437001962Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:55.441294 env[1220]: time="2025-11-01T00:15:55.441262984Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:55.442569 env[1220]: time="2025-11-01T00:15:55.442535555Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:55.442962 env[1220]: time="2025-11-01T00:15:55.442941144Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Nov 1 00:15:55.446699 env[1220]: time="2025-11-01T00:15:55.446503837Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:15:55.458553 env[1220]: time="2025-11-01T00:15:55.458513530Z" level=info msg="CreateContainer within sandbox \"67525f9f4da9efff4ddcd46e9e2bc4fc7b970373caf69bbc316b0c5cbbb0bf9b\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:15:55.469112 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3173007506.mount: Deactivated successfully. Nov 1 00:15:55.470231 env[1220]: time="2025-11-01T00:15:55.470184839Z" level=info msg="CreateContainer within sandbox \"67525f9f4da9efff4ddcd46e9e2bc4fc7b970373caf69bbc316b0c5cbbb0bf9b\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"f222d2c1a695a3d344b753f4488dc683cc10dae80207bec2fcd29bb19355205e\"" Nov 1 00:15:55.470849 env[1220]: time="2025-11-01T00:15:55.470685794Z" level=info msg="StartContainer for \"f222d2c1a695a3d344b753f4488dc683cc10dae80207bec2fcd29bb19355205e\"" Nov 1 00:15:55.487839 systemd[1]: run-containerd-runc-k8s.io-f222d2c1a695a3d344b753f4488dc683cc10dae80207bec2fcd29bb19355205e-runc.v2p5wv.mount: Deactivated successfully. Nov 1 00:15:55.490496 systemd[1]: Started cri-containerd-f222d2c1a695a3d344b753f4488dc683cc10dae80207bec2fcd29bb19355205e.scope. Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.506000 audit: BPF prog-id=126 op=LOAD Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2375 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:55.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323264326331613639356133643334346237353366343438386463 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2375 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:55.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323264326331613639356133643334346237353366343438386463 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit: BPF prog-id=127 op=LOAD Nov 1 00:15:55.507000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2375 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:55.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323264326331613639356133643334346237353366343438386463 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit: BPF prog-id=128 op=LOAD Nov 1 00:15:55.507000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2375 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:55.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323264326331613639356133643334346237353366343438386463 Nov 1 00:15:55.507000 audit: BPF prog-id=128 op=UNLOAD Nov 1 00:15:55.507000 audit: BPF prog-id=127 op=UNLOAD Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:55.507000 audit: BPF prog-id=129 op=LOAD Nov 1 00:15:55.507000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2375 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:55.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323264326331613639356133643334346237353366343438386463 Nov 1 00:15:55.576909 env[1220]: time="2025-11-01T00:15:55.576845975Z" level=info msg="StartContainer for \"f222d2c1a695a3d344b753f4488dc683cc10dae80207bec2fcd29bb19355205e\" returns successfully" Nov 1 00:15:55.704605 kubelet[1946]: E1101 00:15:55.704191 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:15:55.760109 kubelet[1946]: E1101 00:15:55.760069 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:55.814567 kubelet[1946]: E1101 00:15:55.814540 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.816245 kubelet[1946]: W1101 00:15:55.816209 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.816359 kubelet[1946]: E1101 00:15:55.816343 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.816644 kubelet[1946]: E1101 00:15:55.816628 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.816772 kubelet[1946]: W1101 00:15:55.816756 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.816838 kubelet[1946]: E1101 00:15:55.816826 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.817143 kubelet[1946]: E1101 00:15:55.817126 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.817227 kubelet[1946]: W1101 00:15:55.817214 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.817309 kubelet[1946]: E1101 00:15:55.817295 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.817637 kubelet[1946]: E1101 00:15:55.817559 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.817829 kubelet[1946]: W1101 00:15:55.817810 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.818027 kubelet[1946]: E1101 00:15:55.817929 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.818322 kubelet[1946]: E1101 00:15:55.818308 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.818407 kubelet[1946]: W1101 00:15:55.818393 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.818470 kubelet[1946]: E1101 00:15:55.818457 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.818726 kubelet[1946]: E1101 00:15:55.818712 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.818810 kubelet[1946]: W1101 00:15:55.818797 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.818904 kubelet[1946]: E1101 00:15:55.818888 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.819146 kubelet[1946]: E1101 00:15:55.819132 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.819219 kubelet[1946]: W1101 00:15:55.819204 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.819292 kubelet[1946]: E1101 00:15:55.819280 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.819519 kubelet[1946]: E1101 00:15:55.819506 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.819656 kubelet[1946]: W1101 00:15:55.819638 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.819807 kubelet[1946]: E1101 00:15:55.819774 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.820152 kubelet[1946]: E1101 00:15:55.820135 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.820299 kubelet[1946]: W1101 00:15:55.820282 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.820370 kubelet[1946]: E1101 00:15:55.820357 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.820595 kubelet[1946]: E1101 00:15:55.820573 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.820682 kubelet[1946]: W1101 00:15:55.820667 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.820744 kubelet[1946]: E1101 00:15:55.820732 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.820960 kubelet[1946]: E1101 00:15:55.820948 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.821053 kubelet[1946]: W1101 00:15:55.821039 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.821132 kubelet[1946]: E1101 00:15:55.821115 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.821360 kubelet[1946]: E1101 00:15:55.821347 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.821444 kubelet[1946]: W1101 00:15:55.821430 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.821507 kubelet[1946]: E1101 00:15:55.821495 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.821880 kubelet[1946]: E1101 00:15:55.821847 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.822028 kubelet[1946]: W1101 00:15:55.822009 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.822093 kubelet[1946]: E1101 00:15:55.822081 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.822426 kubelet[1946]: E1101 00:15:55.822349 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.822528 kubelet[1946]: W1101 00:15:55.822511 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.822599 kubelet[1946]: E1101 00:15:55.822576 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.822843 kubelet[1946]: E1101 00:15:55.822828 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.822919 kubelet[1946]: W1101 00:15:55.822906 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.823059 kubelet[1946]: E1101 00:15:55.823044 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.823377 kubelet[1946]: E1101 00:15:55.823361 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.823465 kubelet[1946]: W1101 00:15:55.823451 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.823529 kubelet[1946]: E1101 00:15:55.823516 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.823793 kubelet[1946]: E1101 00:15:55.823779 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.823877 kubelet[1946]: W1101 00:15:55.823864 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.824023 kubelet[1946]: E1101 00:15:55.824007 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.824294 kubelet[1946]: E1101 00:15:55.824271 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.824294 kubelet[1946]: W1101 00:15:55.824289 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.824392 kubelet[1946]: E1101 00:15:55.824308 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.824506 kubelet[1946]: E1101 00:15:55.824491 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.824506 kubelet[1946]: W1101 00:15:55.824503 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.824702 kubelet[1946]: E1101 00:15:55.824517 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.824751 kubelet[1946]: E1101 00:15:55.824737 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.824751 kubelet[1946]: W1101 00:15:55.824747 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.824946 kubelet[1946]: E1101 00:15:55.824764 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.824978 kubelet[1946]: E1101 00:15:55.824966 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.824978 kubelet[1946]: W1101 00:15:55.824975 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.825090 kubelet[1946]: E1101 00:15:55.825005 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827023 kubelet[1946]: E1101 00:15:55.825408 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827023 kubelet[1946]: W1101 00:15:55.825424 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827023 kubelet[1946]: E1101 00:15:55.825445 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827023 kubelet[1946]: E1101 00:15:55.825633 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827023 kubelet[1946]: W1101 00:15:55.825648 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827023 kubelet[1946]: E1101 00:15:55.825665 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827023 kubelet[1946]: E1101 00:15:55.825831 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827023 kubelet[1946]: W1101 00:15:55.825847 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827023 kubelet[1946]: E1101 00:15:55.826036 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827023 kubelet[1946]: W1101 00:15:55.826044 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827304 kubelet[1946]: E1101 00:15:55.826053 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827304 kubelet[1946]: E1101 00:15:55.826196 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827304 kubelet[1946]: W1101 00:15:55.826204 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827304 kubelet[1946]: E1101 00:15:55.826219 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827304 kubelet[1946]: E1101 00:15:55.826342 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827304 kubelet[1946]: W1101 00:15:55.826350 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827304 kubelet[1946]: E1101 00:15:55.826366 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827304 kubelet[1946]: E1101 00:15:55.826521 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827304 kubelet[1946]: W1101 00:15:55.826542 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827304 kubelet[1946]: E1101 00:15:55.826551 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827520 kubelet[1946]: E1101 00:15:55.827073 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827520 kubelet[1946]: W1101 00:15:55.827092 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827520 kubelet[1946]: E1101 00:15:55.827109 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827520 kubelet[1946]: E1101 00:15:55.827130 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827520 kubelet[1946]: E1101 00:15:55.827273 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827520 kubelet[1946]: W1101 00:15:55.827289 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827520 kubelet[1946]: E1101 00:15:55.827298 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827520 kubelet[1946]: E1101 00:15:55.827420 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827520 kubelet[1946]: W1101 00:15:55.827428 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827520 kubelet[1946]: E1101 00:15:55.827445 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.827745 kubelet[1946]: E1101 00:15:55.827605 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.827745 kubelet[1946]: W1101 00:15:55.827622 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.827745 kubelet[1946]: E1101 00:15:55.827631 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:55.828010 kubelet[1946]: E1101 00:15:55.827981 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:15:55.828010 kubelet[1946]: W1101 00:15:55.828009 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:15:55.828086 kubelet[1946]: E1101 00:15:55.828020 1946 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:15:56.374857 env[1220]: time="2025-11-01T00:15:56.374818554Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:56.376595 env[1220]: time="2025-11-01T00:15:56.376568633Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:56.378222 env[1220]: time="2025-11-01T00:15:56.378196585Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:56.379689 env[1220]: time="2025-11-01T00:15:56.379663365Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:56.380186 env[1220]: time="2025-11-01T00:15:56.380161799Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Nov 1 00:15:56.394149 env[1220]: time="2025-11-01T00:15:56.394106191Z" level=info msg="CreateContainer within sandbox \"b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:15:56.408208 env[1220]: time="2025-11-01T00:15:56.408166152Z" level=info msg="CreateContainer within sandbox \"b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"1e73a976395c34ffcb53f7cd5d9f3b6ad6729de709fd2142be9b4d16fc811a40\"" Nov 1 00:15:56.409222 env[1220]: time="2025-11-01T00:15:56.409191942Z" level=info msg="StartContainer for \"1e73a976395c34ffcb53f7cd5d9f3b6ad6729de709fd2142be9b4d16fc811a40\"" Nov 1 00:15:56.426447 systemd[1]: Started cri-containerd-1e73a976395c34ffcb53f7cd5d9f3b6ad6729de709fd2142be9b4d16fc811a40.scope. Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2439 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:56.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165373361393736333935633334666663623533663763643564396633 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.441000 audit: BPF prog-id=130 op=LOAD Nov 1 00:15:56.441000 audit[2621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2439 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:56.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165373361393736333935633334666663623533663763643564396633 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.442000 audit: BPF prog-id=131 op=LOAD Nov 1 00:15:56.442000 audit[2621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2439 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:56.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165373361393736333935633334666663623533663763643564396633 Nov 1 00:15:56.443000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:15:56.443000 audit: BPF prog-id=130 op=UNLOAD Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:56.443000 audit: BPF prog-id=132 op=LOAD Nov 1 00:15:56.443000 audit[2621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2439 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:56.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165373361393736333935633334666663623533663763643564396633 Nov 1 00:15:56.468065 env[1220]: time="2025-11-01T00:15:56.465599834Z" level=info msg="StartContainer for \"1e73a976395c34ffcb53f7cd5d9f3b6ad6729de709fd2142be9b4d16fc811a40\" returns successfully" Nov 1 00:15:56.472355 systemd[1]: cri-containerd-1e73a976395c34ffcb53f7cd5d9f3b6ad6729de709fd2142be9b4d16fc811a40.scope: Deactivated successfully. Nov 1 00:15:56.476000 audit: BPF prog-id=132 op=UNLOAD Nov 1 00:15:56.493708 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1e73a976395c34ffcb53f7cd5d9f3b6ad6729de709fd2142be9b4d16fc811a40-rootfs.mount: Deactivated successfully. Nov 1 00:15:56.503740 env[1220]: time="2025-11-01T00:15:56.503693796Z" level=info msg="shim disconnected" id=1e73a976395c34ffcb53f7cd5d9f3b6ad6729de709fd2142be9b4d16fc811a40 Nov 1 00:15:56.503740 env[1220]: time="2025-11-01T00:15:56.503737079Z" level=warning msg="cleaning up after shim disconnected" id=1e73a976395c34ffcb53f7cd5d9f3b6ad6729de709fd2142be9b4d16fc811a40 namespace=k8s.io Nov 1 00:15:56.503914 env[1220]: time="2025-11-01T00:15:56.503749640Z" level=info msg="cleaning up dead shim" Nov 1 00:15:56.511396 env[1220]: time="2025-11-01T00:15:56.511362680Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:15:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2661 runtime=io.containerd.runc.v2\n" Nov 1 00:15:56.762416 kubelet[1946]: I1101 00:15:56.762331 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:15:56.762934 kubelet[1946]: E1101 00:15:56.762906 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:56.763227 kubelet[1946]: E1101 00:15:56.763206 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:56.765947 env[1220]: time="2025-11-01T00:15:56.765324626Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:15:56.779750 kubelet[1946]: I1101 00:15:56.779288 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-f7469f97b-fjpcm" podStartSLOduration=2.059670919 podStartE2EDuration="3.779275619s" podCreationTimestamp="2025-11-01 00:15:53 +0000 UTC" firstStartedPulling="2025-11-01 00:15:53.726719084 +0000 UTC m=+24.123023340" lastFinishedPulling="2025-11-01 00:15:55.446323744 +0000 UTC m=+25.842628040" observedRunningTime="2025-11-01 00:15:55.773481981 +0000 UTC m=+26.169786277" watchObservedRunningTime="2025-11-01 00:15:56.779275619 +0000 UTC m=+27.175579875" Nov 1 00:15:57.701955 kubelet[1946]: E1101 00:15:57.701838 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:15:59.313331 env[1220]: time="2025-11-01T00:15:59.313279454Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:59.315330 env[1220]: time="2025-11-01T00:15:59.315296657Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:59.317514 env[1220]: time="2025-11-01T00:15:59.317484591Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:59.319004 env[1220]: time="2025-11-01T00:15:59.318955521Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:15:59.319563 env[1220]: time="2025-11-01T00:15:59.319531876Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Nov 1 00:15:59.324114 env[1220]: time="2025-11-01T00:15:59.324078834Z" level=info msg="CreateContainer within sandbox \"b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:15:59.334842 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3559268314.mount: Deactivated successfully. Nov 1 00:15:59.338842 env[1220]: time="2025-11-01T00:15:59.338790493Z" level=info msg="CreateContainer within sandbox \"b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"0ab1c6ba1e9a404c3eb1354f879ab556700c4f2b7a609adc1a68e8400fe21833\"" Nov 1 00:15:59.340786 env[1220]: time="2025-11-01T00:15:59.339637864Z" level=info msg="StartContainer for \"0ab1c6ba1e9a404c3eb1354f879ab556700c4f2b7a609adc1a68e8400fe21833\"" Nov 1 00:15:59.357075 systemd[1]: Started cri-containerd-0ab1c6ba1e9a404c3eb1354f879ab556700c4f2b7a609adc1a68e8400fe21833.scope. Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.380332 kernel: kauditd_printk_skb: 229 callbacks suppressed Nov 1 00:15:59.380414 kernel: audit: type=1400 audit(1761956159.376:999): avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.380442 kernel: audit: type=1300 audit(1761956159.376:999): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2439 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:59.376000 audit[2687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2439 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:59.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623163366261316539613430346333656231333534663837396162 Nov 1 00:15:59.387953 kernel: audit: type=1327 audit(1761956159.376:999): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623163366261316539613430346333656231333534663837396162 Nov 1 00:15:59.388069 kernel: audit: type=1400 audit(1761956159.376:1000): avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.393107 kernel: audit: type=1400 audit(1761956159.376:1000): avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.395758 kernel: audit: type=1400 audit(1761956159.376:1000): avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.399043 kernel: audit: type=1400 audit(1761956159.376:1000): avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.399076 kernel: audit: type=1400 audit(1761956159.376:1000): avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.404333 kernel: audit: type=1400 audit(1761956159.376:1000): avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.407706 kernel: audit: type=1400 audit(1761956159.376:1000): avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit: BPF prog-id=133 op=LOAD Nov 1 00:15:59.376000 audit[2687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2439 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:59.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623163366261316539613430346333656231333534663837396162 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.376000 audit: BPF prog-id=134 op=LOAD Nov 1 00:15:59.376000 audit[2687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2439 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:59.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623163366261316539613430346333656231333534663837396162 Nov 1 00:15:59.379000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:15:59.379000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { perfmon } for pid=2687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit[2687]: AVC avc: denied { bpf } for pid=2687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:15:59.379000 audit: BPF prog-id=135 op=LOAD Nov 1 00:15:59.379000 audit[2687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2439 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:59.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623163366261316539613430346333656231333534663837396162 Nov 1 00:15:59.411212 env[1220]: time="2025-11-01T00:15:59.411169355Z" level=info msg="StartContainer for \"0ab1c6ba1e9a404c3eb1354f879ab556700c4f2b7a609adc1a68e8400fe21833\" returns successfully" Nov 1 00:15:59.702532 kubelet[1946]: E1101 00:15:59.702206 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:15:59.769180 kubelet[1946]: E1101 00:15:59.769139 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:15:59.969492 env[1220]: time="2025-11-01T00:15:59.969385182Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:15:59.972094 systemd[1]: cri-containerd-0ab1c6ba1e9a404c3eb1354f879ab556700c4f2b7a609adc1a68e8400fe21833.scope: Deactivated successfully. Nov 1 00:15:59.974000 audit: BPF prog-id=135 op=UNLOAD Nov 1 00:15:59.988176 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0ab1c6ba1e9a404c3eb1354f879ab556700c4f2b7a609adc1a68e8400fe21833-rootfs.mount: Deactivated successfully. Nov 1 00:15:59.990351 kubelet[1946]: I1101 00:15:59.990127 1946 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:15:59.992773 env[1220]: time="2025-11-01T00:15:59.992729808Z" level=info msg="shim disconnected" id=0ab1c6ba1e9a404c3eb1354f879ab556700c4f2b7a609adc1a68e8400fe21833 Nov 1 00:15:59.992892 env[1220]: time="2025-11-01T00:15:59.992775571Z" level=warning msg="cleaning up after shim disconnected" id=0ab1c6ba1e9a404c3eb1354f879ab556700c4f2b7a609adc1a68e8400fe21833 namespace=k8s.io Nov 1 00:15:59.992892 env[1220]: time="2025-11-01T00:15:59.992787692Z" level=info msg="cleaning up dead shim" Nov 1 00:16:00.000852 env[1220]: time="2025-11-01T00:16:00.000805061Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:15:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2730 runtime=io.containerd.runc.v2\n" Nov 1 00:16:00.026062 systemd[1]: Created slice kubepods-burstable-pod3a9efac0_8144_4907_9db7_0ad61385c717.slice. Nov 1 00:16:00.030826 systemd[1]: Created slice kubepods-burstable-podad016577_acfe_433f_85f4_2a0e1c651c14.slice. Nov 1 00:16:00.035236 systemd[1]: Created slice kubepods-besteffort-pod476f4117_f217_4ab0_8acb_437e73ee9d99.slice. Nov 1 00:16:00.039036 systemd[1]: Created slice kubepods-besteffort-pod7b333081_da7b_416e_a1c3_ea55953cf8be.slice. Nov 1 00:16:00.046676 systemd[1]: Created slice kubepods-besteffort-pod1bea652b_fa9e_4d21_a870_250a69c0d5a9.slice. Nov 1 00:16:00.052932 systemd[1]: Created slice kubepods-besteffort-pode64d0b8e_9ec4_4adc_bd1b_6e6c033d8b5f.slice. Nov 1 00:16:00.056373 systemd[1]: Created slice kubepods-besteffort-pod7d5a13f7_2466_4514_853b_41cfb2921ff0.slice. Nov 1 00:16:00.069550 kubelet[1946]: I1101 00:16:00.069502 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zdvgv\" (UniqueName: \"kubernetes.io/projected/3a9efac0-8144-4907-9db7-0ad61385c717-kube-api-access-zdvgv\") pod \"coredns-668d6bf9bc-4zrdh\" (UID: \"3a9efac0-8144-4907-9db7-0ad61385c717\") " pod="kube-system/coredns-668d6bf9bc-4zrdh" Nov 1 00:16:00.069667 kubelet[1946]: I1101 00:16:00.069548 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/7d5a13f7-2466-4514-853b-41cfb2921ff0-whisker-backend-key-pair\") pod \"whisker-86c9948df4-xlhh2\" (UID: \"7d5a13f7-2466-4514-853b-41cfb2921ff0\") " pod="calico-system/whisker-86c9948df4-xlhh2" Nov 1 00:16:00.069667 kubelet[1946]: I1101 00:16:00.069578 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s28vx\" (UniqueName: \"kubernetes.io/projected/1bea652b-fa9e-4d21-a870-250a69c0d5a9-kube-api-access-s28vx\") pod \"goldmane-666569f655-9ggfv\" (UID: \"1bea652b-fa9e-4d21-a870-250a69c0d5a9\") " pod="calico-system/goldmane-666569f655-9ggfv" Nov 1 00:16:00.069667 kubelet[1946]: I1101 00:16:00.069622 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3a9efac0-8144-4907-9db7-0ad61385c717-config-volume\") pod \"coredns-668d6bf9bc-4zrdh\" (UID: \"3a9efac0-8144-4907-9db7-0ad61385c717\") " pod="kube-system/coredns-668d6bf9bc-4zrdh" Nov 1 00:16:00.069667 kubelet[1946]: I1101 00:16:00.069644 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7b333081-da7b-416e-a1c3-ea55953cf8be-tigera-ca-bundle\") pod \"calico-kube-controllers-7f6b964fd9-74jpn\" (UID: \"7b333081-da7b-416e-a1c3-ea55953cf8be\") " pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" Nov 1 00:16:00.069785 kubelet[1946]: I1101 00:16:00.069659 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/476f4117-f217-4ab0-8acb-437e73ee9d99-calico-apiserver-certs\") pod \"calico-apiserver-f475bc956-k282f\" (UID: \"476f4117-f217-4ab0-8acb-437e73ee9d99\") " pod="calico-apiserver/calico-apiserver-f475bc956-k282f" Nov 1 00:16:00.069785 kubelet[1946]: I1101 00:16:00.069710 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jnqqf\" (UniqueName: \"kubernetes.io/projected/e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f-kube-api-access-jnqqf\") pod \"calico-apiserver-f475bc956-2vmq8\" (UID: \"e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f\") " pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" Nov 1 00:16:00.069785 kubelet[1946]: I1101 00:16:00.069726 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bp8dx\" (UniqueName: \"kubernetes.io/projected/7d5a13f7-2466-4514-853b-41cfb2921ff0-kube-api-access-bp8dx\") pod \"whisker-86c9948df4-xlhh2\" (UID: \"7d5a13f7-2466-4514-853b-41cfb2921ff0\") " pod="calico-system/whisker-86c9948df4-xlhh2" Nov 1 00:16:00.069785 kubelet[1946]: I1101 00:16:00.069769 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/1bea652b-fa9e-4d21-a870-250a69c0d5a9-goldmane-key-pair\") pod \"goldmane-666569f655-9ggfv\" (UID: \"1bea652b-fa9e-4d21-a870-250a69c0d5a9\") " pod="calico-system/goldmane-666569f655-9ggfv" Nov 1 00:16:00.069907 kubelet[1946]: I1101 00:16:00.069789 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f-calico-apiserver-certs\") pod \"calico-apiserver-f475bc956-2vmq8\" (UID: \"e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f\") " pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" Nov 1 00:16:00.069907 kubelet[1946]: I1101 00:16:00.069804 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/ad016577-acfe-433f-85f4-2a0e1c651c14-config-volume\") pod \"coredns-668d6bf9bc-n7f7f\" (UID: \"ad016577-acfe-433f-85f4-2a0e1c651c14\") " pod="kube-system/coredns-668d6bf9bc-n7f7f" Nov 1 00:16:00.069907 kubelet[1946]: I1101 00:16:00.069877 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5kxzc\" (UniqueName: \"kubernetes.io/projected/7b333081-da7b-416e-a1c3-ea55953cf8be-kube-api-access-5kxzc\") pod \"calico-kube-controllers-7f6b964fd9-74jpn\" (UID: \"7b333081-da7b-416e-a1c3-ea55953cf8be\") " pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" Nov 1 00:16:00.069978 kubelet[1946]: I1101 00:16:00.069915 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1bea652b-fa9e-4d21-a870-250a69c0d5a9-goldmane-ca-bundle\") pod \"goldmane-666569f655-9ggfv\" (UID: \"1bea652b-fa9e-4d21-a870-250a69c0d5a9\") " pod="calico-system/goldmane-666569f655-9ggfv" Nov 1 00:16:00.069978 kubelet[1946]: I1101 00:16:00.069938 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/1bea652b-fa9e-4d21-a870-250a69c0d5a9-config\") pod \"goldmane-666569f655-9ggfv\" (UID: \"1bea652b-fa9e-4d21-a870-250a69c0d5a9\") " pod="calico-system/goldmane-666569f655-9ggfv" Nov 1 00:16:00.070047 kubelet[1946]: I1101 00:16:00.069956 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2qb6l\" (UniqueName: \"kubernetes.io/projected/476f4117-f217-4ab0-8acb-437e73ee9d99-kube-api-access-2qb6l\") pod \"calico-apiserver-f475bc956-k282f\" (UID: \"476f4117-f217-4ab0-8acb-437e73ee9d99\") " pod="calico-apiserver/calico-apiserver-f475bc956-k282f" Nov 1 00:16:00.070047 kubelet[1946]: I1101 00:16:00.070024 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7d5a13f7-2466-4514-853b-41cfb2921ff0-whisker-ca-bundle\") pod \"whisker-86c9948df4-xlhh2\" (UID: \"7d5a13f7-2466-4514-853b-41cfb2921ff0\") " pod="calico-system/whisker-86c9948df4-xlhh2" Nov 1 00:16:00.070101 kubelet[1946]: I1101 00:16:00.070052 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t9h7d\" (UniqueName: \"kubernetes.io/projected/ad016577-acfe-433f-85f4-2a0e1c651c14-kube-api-access-t9h7d\") pod \"coredns-668d6bf9bc-n7f7f\" (UID: \"ad016577-acfe-433f-85f4-2a0e1c651c14\") " pod="kube-system/coredns-668d6bf9bc-n7f7f" Nov 1 00:16:00.331217 kubelet[1946]: E1101 00:16:00.329906 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:00.332535 env[1220]: time="2025-11-01T00:16:00.332228453Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-4zrdh,Uid:3a9efac0-8144-4907-9db7-0ad61385c717,Namespace:kube-system,Attempt:0,}" Nov 1 00:16:00.334359 kubelet[1946]: E1101 00:16:00.334292 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:00.336243 env[1220]: time="2025-11-01T00:16:00.334706080Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-n7f7f,Uid:ad016577-acfe-433f-85f4-2a0e1c651c14,Namespace:kube-system,Attempt:0,}" Nov 1 00:16:00.337739 env[1220]: time="2025-11-01T00:16:00.337642213Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f475bc956-k282f,Uid:476f4117-f217-4ab0-8acb-437e73ee9d99,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:16:00.344663 env[1220]: time="2025-11-01T00:16:00.344633545Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7f6b964fd9-74jpn,Uid:7b333081-da7b-416e-a1c3-ea55953cf8be,Namespace:calico-system,Attempt:0,}" Nov 1 00:16:00.352740 env[1220]: time="2025-11-01T00:16:00.352710422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-9ggfv,Uid:1bea652b-fa9e-4d21-a870-250a69c0d5a9,Namespace:calico-system,Attempt:0,}" Nov 1 00:16:00.355470 env[1220]: time="2025-11-01T00:16:00.355434942Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f475bc956-2vmq8,Uid:e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:16:00.360409 env[1220]: time="2025-11-01T00:16:00.360368873Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-86c9948df4-xlhh2,Uid:7d5a13f7-2466-4514-853b-41cfb2921ff0,Namespace:calico-system,Attempt:0,}" Nov 1 00:16:00.482594 env[1220]: time="2025-11-01T00:16:00.482307467Z" level=error msg="Failed to destroy network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.482791 env[1220]: time="2025-11-01T00:16:00.482721531Z" level=error msg="encountered an error cleaning up failed sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.482791 env[1220]: time="2025-11-01T00:16:00.482770494Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7f6b964fd9-74jpn,Uid:7b333081-da7b-416e-a1c3-ea55953cf8be,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.484717 kubelet[1946]: E1101 00:16:00.484653 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.484846 kubelet[1946]: E1101 00:16:00.484733 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" Nov 1 00:16:00.484846 kubelet[1946]: E1101 00:16:00.484753 1946 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" Nov 1 00:16:00.484846 kubelet[1946]: E1101 00:16:00.484797 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7f6b964fd9-74jpn_calico-system(7b333081-da7b-416e-a1c3-ea55953cf8be)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7f6b964fd9-74jpn_calico-system(7b333081-da7b-416e-a1c3-ea55953cf8be)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" podUID="7b333081-da7b-416e-a1c3-ea55953cf8be" Nov 1 00:16:00.492151 env[1220]: time="2025-11-01T00:16:00.492043121Z" level=error msg="Failed to destroy network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.492561 env[1220]: time="2025-11-01T00:16:00.492516269Z" level=error msg="encountered an error cleaning up failed sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.492625 env[1220]: time="2025-11-01T00:16:00.492590954Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-n7f7f,Uid:ad016577-acfe-433f-85f4-2a0e1c651c14,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.492873 kubelet[1946]: E1101 00:16:00.492831 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.492949 kubelet[1946]: E1101 00:16:00.492898 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-n7f7f" Nov 1 00:16:00.492949 kubelet[1946]: E1101 00:16:00.492917 1946 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-n7f7f" Nov 1 00:16:00.493047 kubelet[1946]: E1101 00:16:00.492962 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-n7f7f_kube-system(ad016577-acfe-433f-85f4-2a0e1c651c14)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-n7f7f_kube-system(ad016577-acfe-433f-85f4-2a0e1c651c14)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-n7f7f" podUID="ad016577-acfe-433f-85f4-2a0e1c651c14" Nov 1 00:16:00.504181 env[1220]: time="2025-11-01T00:16:00.504131794Z" level=error msg="Failed to destroy network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.504515 env[1220]: time="2025-11-01T00:16:00.504474415Z" level=error msg="encountered an error cleaning up failed sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.504567 env[1220]: time="2025-11-01T00:16:00.504531378Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-86c9948df4-xlhh2,Uid:7d5a13f7-2466-4514-853b-41cfb2921ff0,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.504779 kubelet[1946]: E1101 00:16:00.504740 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.504867 kubelet[1946]: E1101 00:16:00.504797 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-86c9948df4-xlhh2" Nov 1 00:16:00.504867 kubelet[1946]: E1101 00:16:00.504819 1946 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-86c9948df4-xlhh2" Nov 1 00:16:00.504931 kubelet[1946]: E1101 00:16:00.504878 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-86c9948df4-xlhh2_calico-system(7d5a13f7-2466-4514-853b-41cfb2921ff0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-86c9948df4-xlhh2_calico-system(7d5a13f7-2466-4514-853b-41cfb2921ff0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-86c9948df4-xlhh2" podUID="7d5a13f7-2466-4514-853b-41cfb2921ff0" Nov 1 00:16:00.507846 env[1220]: time="2025-11-01T00:16:00.507790970Z" level=error msg="Failed to destroy network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.509273 env[1220]: time="2025-11-01T00:16:00.509235615Z" level=error msg="encountered an error cleaning up failed sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.509406 env[1220]: time="2025-11-01T00:16:00.509376624Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f475bc956-k282f,Uid:476f4117-f217-4ab0-8acb-437e73ee9d99,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.509672 kubelet[1946]: E1101 00:16:00.509638 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.509734 kubelet[1946]: E1101 00:16:00.509686 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" Nov 1 00:16:00.509734 kubelet[1946]: E1101 00:16:00.509705 1946 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" Nov 1 00:16:00.509793 kubelet[1946]: E1101 00:16:00.509736 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-f475bc956-k282f_calico-apiserver(476f4117-f217-4ab0-8acb-437e73ee9d99)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-f475bc956-k282f_calico-apiserver(476f4117-f217-4ab0-8acb-437e73ee9d99)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" podUID="476f4117-f217-4ab0-8acb-437e73ee9d99" Nov 1 00:16:00.520353 env[1220]: time="2025-11-01T00:16:00.520299468Z" level=error msg="Failed to destroy network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.520737 env[1220]: time="2025-11-01T00:16:00.520705212Z" level=error msg="encountered an error cleaning up failed sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.520791 env[1220]: time="2025-11-01T00:16:00.520759735Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-9ggfv,Uid:1bea652b-fa9e-4d21-a870-250a69c0d5a9,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.520974 kubelet[1946]: E1101 00:16:00.520942 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.521068 kubelet[1946]: E1101 00:16:00.521009 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-9ggfv" Nov 1 00:16:00.521068 kubelet[1946]: E1101 00:16:00.521029 1946 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-9ggfv" Nov 1 00:16:00.521132 kubelet[1946]: E1101 00:16:00.521065 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-9ggfv_calico-system(1bea652b-fa9e-4d21-a870-250a69c0d5a9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-9ggfv_calico-system(1bea652b-fa9e-4d21-a870-250a69c0d5a9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-9ggfv" podUID="1bea652b-fa9e-4d21-a870-250a69c0d5a9" Nov 1 00:16:00.522618 env[1220]: time="2025-11-01T00:16:00.522538440Z" level=error msg="Failed to destroy network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.523103 env[1220]: time="2025-11-01T00:16:00.523069632Z" level=error msg="encountered an error cleaning up failed sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.523527 env[1220]: time="2025-11-01T00:16:00.523391811Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-4zrdh,Uid:3a9efac0-8144-4907-9db7-0ad61385c717,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.523778 kubelet[1946]: E1101 00:16:00.523748 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.523839 kubelet[1946]: E1101 00:16:00.523790 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-4zrdh" Nov 1 00:16:00.523839 kubelet[1946]: E1101 00:16:00.523806 1946 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-4zrdh" Nov 1 00:16:00.523912 kubelet[1946]: E1101 00:16:00.523834 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-4zrdh_kube-system(3a9efac0-8144-4907-9db7-0ad61385c717)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-4zrdh_kube-system(3a9efac0-8144-4907-9db7-0ad61385c717)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-4zrdh" podUID="3a9efac0-8144-4907-9db7-0ad61385c717" Nov 1 00:16:00.529928 env[1220]: time="2025-11-01T00:16:00.529891794Z" level=error msg="Failed to destroy network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.530204 env[1220]: time="2025-11-01T00:16:00.530175691Z" level=error msg="encountered an error cleaning up failed sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.530254 env[1220]: time="2025-11-01T00:16:00.530232934Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f475bc956-2vmq8,Uid:e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.530404 kubelet[1946]: E1101 00:16:00.530380 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.530450 kubelet[1946]: E1101 00:16:00.530419 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" Nov 1 00:16:00.530450 kubelet[1946]: E1101 00:16:00.530442 1946 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" Nov 1 00:16:00.530513 kubelet[1946]: E1101 00:16:00.530470 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-f475bc956-2vmq8_calico-apiserver(e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-f475bc956-2vmq8_calico-apiserver(e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" podUID="e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f" Nov 1 00:16:00.773465 kubelet[1946]: I1101 00:16:00.772807 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:00.773924 env[1220]: time="2025-11-01T00:16:00.773099541Z" level=info msg="StopPodSandbox for \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\"" Nov 1 00:16:00.773968 kubelet[1946]: I1101 00:16:00.773519 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:00.774010 env[1220]: time="2025-11-01T00:16:00.773947912Z" level=info msg="StopPodSandbox for \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\"" Nov 1 00:16:00.776012 kubelet[1946]: I1101 00:16:00.775962 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:00.776557 env[1220]: time="2025-11-01T00:16:00.776520543Z" level=info msg="StopPodSandbox for \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\"" Nov 1 00:16:00.778312 kubelet[1946]: I1101 00:16:00.778088 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:00.778529 env[1220]: time="2025-11-01T00:16:00.778469058Z" level=info msg="StopPodSandbox for \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\"" Nov 1 00:16:00.779445 kubelet[1946]: I1101 00:16:00.779419 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:00.780689 env[1220]: time="2025-11-01T00:16:00.780296086Z" level=info msg="StopPodSandbox for \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\"" Nov 1 00:16:00.782258 kubelet[1946]: E1101 00:16:00.782232 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:00.785327 env[1220]: time="2025-11-01T00:16:00.783520276Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:16:00.785327 env[1220]: time="2025-11-01T00:16:00.784379607Z" level=info msg="StopPodSandbox for \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\"" Nov 1 00:16:00.785436 kubelet[1946]: I1101 00:16:00.783955 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:00.787018 kubelet[1946]: I1101 00:16:00.785804 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:00.787708 env[1220]: time="2025-11-01T00:16:00.787571475Z" level=info msg="StopPodSandbox for \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\"" Nov 1 00:16:00.817215 env[1220]: time="2025-11-01T00:16:00.817141740Z" level=error msg="StopPodSandbox for \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\" failed" error="failed to destroy network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.817621 kubelet[1946]: E1101 00:16:00.817505 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:00.819047 kubelet[1946]: E1101 00:16:00.818923 1946 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480"} Nov 1 00:16:00.819047 kubelet[1946]: E1101 00:16:00.819020 1946 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:16:00.819195 kubelet[1946]: E1101 00:16:00.819056 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" podUID="e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f" Nov 1 00:16:00.824197 env[1220]: time="2025-11-01T00:16:00.824151673Z" level=error msg="StopPodSandbox for \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\" failed" error="failed to destroy network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.824499 kubelet[1946]: E1101 00:16:00.824463 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:00.824580 kubelet[1946]: E1101 00:16:00.824509 1946 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c"} Nov 1 00:16:00.824580 kubelet[1946]: E1101 00:16:00.824540 1946 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1bea652b-fa9e-4d21-a870-250a69c0d5a9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:16:00.824580 kubelet[1946]: E1101 00:16:00.824561 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1bea652b-fa9e-4d21-a870-250a69c0d5a9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-9ggfv" podUID="1bea652b-fa9e-4d21-a870-250a69c0d5a9" Nov 1 00:16:00.835126 env[1220]: time="2025-11-01T00:16:00.835070197Z" level=error msg="StopPodSandbox for \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\" failed" error="failed to destroy network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.835339 kubelet[1946]: E1101 00:16:00.835291 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:00.835421 kubelet[1946]: E1101 00:16:00.835349 1946 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba"} Nov 1 00:16:00.835421 kubelet[1946]: E1101 00:16:00.835383 1946 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3a9efac0-8144-4907-9db7-0ad61385c717\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:16:00.835421 kubelet[1946]: E1101 00:16:00.835404 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3a9efac0-8144-4907-9db7-0ad61385c717\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-4zrdh" podUID="3a9efac0-8144-4907-9db7-0ad61385c717" Nov 1 00:16:00.843079 env[1220]: time="2025-11-01T00:16:00.843023987Z" level=error msg="StopPodSandbox for \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\" failed" error="failed to destroy network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.843268 kubelet[1946]: E1101 00:16:00.843234 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:00.843330 kubelet[1946]: E1101 00:16:00.843280 1946 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0"} Nov 1 00:16:00.843330 kubelet[1946]: E1101 00:16:00.843311 1946 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7d5a13f7-2466-4514-853b-41cfb2921ff0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:16:00.843418 kubelet[1946]: E1101 00:16:00.843336 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7d5a13f7-2466-4514-853b-41cfb2921ff0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-86c9948df4-xlhh2" podUID="7d5a13f7-2466-4514-853b-41cfb2921ff0" Nov 1 00:16:00.850435 env[1220]: time="2025-11-01T00:16:00.850382861Z" level=error msg="StopPodSandbox for \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\" failed" error="failed to destroy network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.850814 kubelet[1946]: E1101 00:16:00.850752 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:00.850814 kubelet[1946]: E1101 00:16:00.850799 1946 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68"} Nov 1 00:16:00.850932 kubelet[1946]: E1101 00:16:00.850831 1946 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ad016577-acfe-433f-85f4-2a0e1c651c14\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:16:00.850932 kubelet[1946]: E1101 00:16:00.850851 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ad016577-acfe-433f-85f4-2a0e1c651c14\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-n7f7f" podUID="ad016577-acfe-433f-85f4-2a0e1c651c14" Nov 1 00:16:00.852537 env[1220]: time="2025-11-01T00:16:00.852496065Z" level=error msg="StopPodSandbox for \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\" failed" error="failed to destroy network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.852790 kubelet[1946]: E1101 00:16:00.852759 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:00.852855 kubelet[1946]: E1101 00:16:00.852814 1946 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416"} Nov 1 00:16:00.852855 kubelet[1946]: E1101 00:16:00.852838 1946 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"476f4117-f217-4ab0-8acb-437e73ee9d99\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:16:00.852944 kubelet[1946]: E1101 00:16:00.852855 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"476f4117-f217-4ab0-8acb-437e73ee9d99\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" podUID="476f4117-f217-4ab0-8acb-437e73ee9d99" Nov 1 00:16:00.857940 env[1220]: time="2025-11-01T00:16:00.857898544Z" level=error msg="StopPodSandbox for \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\" failed" error="failed to destroy network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:00.858114 kubelet[1946]: E1101 00:16:00.858076 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:00.858164 kubelet[1946]: E1101 00:16:00.858120 1946 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6"} Nov 1 00:16:00.858164 kubelet[1946]: E1101 00:16:00.858145 1946 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7b333081-da7b-416e-a1c3-ea55953cf8be\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:16:00.858234 kubelet[1946]: E1101 00:16:00.858162 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7b333081-da7b-416e-a1c3-ea55953cf8be\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" podUID="7b333081-da7b-416e-a1c3-ea55953cf8be" Nov 1 00:16:01.334027 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68-shm.mount: Deactivated successfully. Nov 1 00:16:01.334114 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba-shm.mount: Deactivated successfully. Nov 1 00:16:01.707310 systemd[1]: Created slice kubepods-besteffort-pod81bfb214_06ca_4024_b7df_4955466b6e05.slice. Nov 1 00:16:01.716618 env[1220]: time="2025-11-01T00:16:01.716515624Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zbrhh,Uid:81bfb214-06ca-4024-b7df-4955466b6e05,Namespace:calico-system,Attempt:0,}" Nov 1 00:16:01.778113 env[1220]: time="2025-11-01T00:16:01.778056013Z" level=error msg="Failed to destroy network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:01.781591 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5-shm.mount: Deactivated successfully. Nov 1 00:16:01.782876 env[1220]: time="2025-11-01T00:16:01.782833365Z" level=error msg="encountered an error cleaning up failed sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:01.783084 env[1220]: time="2025-11-01T00:16:01.783051617Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zbrhh,Uid:81bfb214-06ca-4024-b7df-4955466b6e05,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:01.783595 kubelet[1946]: E1101 00:16:01.783365 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:01.783595 kubelet[1946]: E1101 00:16:01.783424 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zbrhh" Nov 1 00:16:01.783595 kubelet[1946]: E1101 00:16:01.783456 1946 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zbrhh" Nov 1 00:16:01.784347 kubelet[1946]: E1101 00:16:01.783494 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-zbrhh_calico-system(81bfb214-06ca-4024-b7df-4955466b6e05)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-zbrhh_calico-system(81bfb214-06ca-4024-b7df-4955466b6e05)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:16:01.788610 kubelet[1946]: I1101 00:16:01.788276 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:01.789918 env[1220]: time="2025-11-01T00:16:01.789890967Z" level=info msg="StopPodSandbox for \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\"" Nov 1 00:16:01.830844 env[1220]: time="2025-11-01T00:16:01.830780539Z" level=error msg="StopPodSandbox for \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\" failed" error="failed to destroy network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:16:01.831480 kubelet[1946]: E1101 00:16:01.831042 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:01.831480 kubelet[1946]: E1101 00:16:01.831102 1946 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5"} Nov 1 00:16:01.831480 kubelet[1946]: E1101 00:16:01.831165 1946 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"81bfb214-06ca-4024-b7df-4955466b6e05\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:16:01.831480 kubelet[1946]: E1101 00:16:01.831186 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"81bfb214-06ca-4024-b7df-4955466b6e05\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:16:05.736844 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount317963963.mount: Deactivated successfully. Nov 1 00:16:06.024668 env[1220]: time="2025-11-01T00:16:06.024535867Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:16:06.026618 env[1220]: time="2025-11-01T00:16:06.026575006Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:16:06.028620 env[1220]: time="2025-11-01T00:16:06.028592305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:16:06.030099 env[1220]: time="2025-11-01T00:16:06.030054176Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:16:06.031208 env[1220]: time="2025-11-01T00:16:06.031167950Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Nov 1 00:16:06.059033 env[1220]: time="2025-11-01T00:16:06.058966748Z" level=info msg="CreateContainer within sandbox \"b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:16:06.134356 env[1220]: time="2025-11-01T00:16:06.134304148Z" level=info msg="CreateContainer within sandbox \"b0ee9fb688021ed9bd68602aa92909a5838999fbcc461f2705d1970c597c2387\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"c495570571cfbd9b49c445b40eaa0c165b580bb383a65d48b3ae6fb645ab78c8\"" Nov 1 00:16:06.135083 env[1220]: time="2025-11-01T00:16:06.134905538Z" level=info msg="StartContainer for \"c495570571cfbd9b49c445b40eaa0c165b580bb383a65d48b3ae6fb645ab78c8\"" Nov 1 00:16:06.152085 systemd[1]: Started cri-containerd-c495570571cfbd9b49c445b40eaa0c165b580bb383a65d48b3ae6fb645ab78c8.scope. Nov 1 00:16:06.172000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.174716 kernel: kauditd_printk_skb: 34 callbacks suppressed Nov 1 00:16:06.174782 kernel: audit: type=1400 audit(1761956166.172:1006): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.172000 audit[3178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2439 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:06.181262 kernel: audit: type=1300 audit(1761956166.172:1006): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2439 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:06.181331 kernel: audit: type=1327 audit(1761956166.172:1006): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334393535373035373163666264396234396334343562343065616130 Nov 1 00:16:06.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334393535373035373163666264396234396334343562343065616130 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.187420 kernel: audit: type=1400 audit(1761956166.173:1007): avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.187501 kernel: audit: type=1400 audit(1761956166.173:1007): avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.192387 kernel: audit: type=1400 audit(1761956166.173:1007): avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.195178 kernel: audit: type=1400 audit(1761956166.173:1007): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.197912 kernel: audit: type=1400 audit(1761956166.173:1007): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.197981 kernel: audit: type=1400 audit(1761956166.173:1007): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.205013 kernel: audit: type=1400 audit(1761956166.173:1007): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit: BPF prog-id=136 op=LOAD Nov 1 00:16:06.173000 audit[3178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2439 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334393535373035373163666264396234396334343562343065616130 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.173000 audit: BPF prog-id=137 op=LOAD Nov 1 00:16:06.173000 audit[3178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2439 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:06.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334393535373035373163666264396234396334343562343065616130 Nov 1 00:16:06.176000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:16:06.176000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:06.176000 audit: BPF prog-id=138 op=LOAD Nov 1 00:16:06.176000 audit[3178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2439 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:06.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334393535373035373163666264396234396334343562343065616130 Nov 1 00:16:06.206565 env[1220]: time="2025-11-01T00:16:06.202550082Z" level=info msg="StartContainer for \"c495570571cfbd9b49c445b40eaa0c165b580bb383a65d48b3ae6fb645ab78c8\" returns successfully" Nov 1 00:16:06.334302 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:16:06.334428 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:16:06.441091 env[1220]: time="2025-11-01T00:16:06.441026130Z" level=info msg="StopPodSandbox for \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\"" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.523 [INFO][3228] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.523 [INFO][3228] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" iface="eth0" netns="/var/run/netns/cni-75b6915f-3b8e-d651-9478-cb1ea9a61c0a" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.523 [INFO][3228] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" iface="eth0" netns="/var/run/netns/cni-75b6915f-3b8e-d651-9478-cb1ea9a61c0a" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.524 [INFO][3228] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" iface="eth0" netns="/var/run/netns/cni-75b6915f-3b8e-d651-9478-cb1ea9a61c0a" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.524 [INFO][3228] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.524 [INFO][3228] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.595 [INFO][3244] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.595 [INFO][3244] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.595 [INFO][3244] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.605 [WARNING][3244] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.605 [INFO][3244] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.607 [INFO][3244] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:06.610596 env[1220]: 2025-11-01 00:16:06.609 [INFO][3228] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:06.611084 env[1220]: time="2025-11-01T00:16:06.610725139Z" level=info msg="TearDown network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\" successfully" Nov 1 00:16:06.611084 env[1220]: time="2025-11-01T00:16:06.610756501Z" level=info msg="StopPodSandbox for \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\" returns successfully" Nov 1 00:16:06.710610 kubelet[1946]: I1101 00:16:06.710341 1946 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-bp8dx\" (UniqueName: \"kubernetes.io/projected/7d5a13f7-2466-4514-853b-41cfb2921ff0-kube-api-access-bp8dx\") pod \"7d5a13f7-2466-4514-853b-41cfb2921ff0\" (UID: \"7d5a13f7-2466-4514-853b-41cfb2921ff0\") " Nov 1 00:16:06.710610 kubelet[1946]: I1101 00:16:06.710413 1946 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/7d5a13f7-2466-4514-853b-41cfb2921ff0-whisker-backend-key-pair\") pod \"7d5a13f7-2466-4514-853b-41cfb2921ff0\" (UID: \"7d5a13f7-2466-4514-853b-41cfb2921ff0\") " Nov 1 00:16:06.710610 kubelet[1946]: I1101 00:16:06.710484 1946 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7d5a13f7-2466-4514-853b-41cfb2921ff0-whisker-ca-bundle\") pod \"7d5a13f7-2466-4514-853b-41cfb2921ff0\" (UID: \"7d5a13f7-2466-4514-853b-41cfb2921ff0\") " Nov 1 00:16:06.711093 kubelet[1946]: I1101 00:16:06.711043 1946 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/7d5a13f7-2466-4514-853b-41cfb2921ff0-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "7d5a13f7-2466-4514-853b-41cfb2921ff0" (UID: "7d5a13f7-2466-4514-853b-41cfb2921ff0"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:16:06.714953 kubelet[1946]: I1101 00:16:06.714904 1946 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/7d5a13f7-2466-4514-853b-41cfb2921ff0-kube-api-access-bp8dx" (OuterVolumeSpecName: "kube-api-access-bp8dx") pod "7d5a13f7-2466-4514-853b-41cfb2921ff0" (UID: "7d5a13f7-2466-4514-853b-41cfb2921ff0"). InnerVolumeSpecName "kube-api-access-bp8dx". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:16:06.716242 kubelet[1946]: I1101 00:16:06.716216 1946 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/7d5a13f7-2466-4514-853b-41cfb2921ff0-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "7d5a13f7-2466-4514-853b-41cfb2921ff0" (UID: "7d5a13f7-2466-4514-853b-41cfb2921ff0"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:16:06.737687 systemd[1]: run-netns-cni\x2d75b6915f\x2d3b8e\x2dd651\x2d9478\x2dcb1ea9a61c0a.mount: Deactivated successfully. Nov 1 00:16:06.737768 systemd[1]: var-lib-kubelet-pods-7d5a13f7\x2d2466\x2d4514\x2d853b\x2d41cfb2921ff0-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dbp8dx.mount: Deactivated successfully. Nov 1 00:16:06.737830 systemd[1]: var-lib-kubelet-pods-7d5a13f7\x2d2466\x2d4514\x2d853b\x2d41cfb2921ff0-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:16:06.810904 kubelet[1946]: I1101 00:16:06.810875 1946 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7d5a13f7-2466-4514-853b-41cfb2921ff0-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Nov 1 00:16:06.811096 kubelet[1946]: I1101 00:16:06.811082 1946 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-bp8dx\" (UniqueName: \"kubernetes.io/projected/7d5a13f7-2466-4514-853b-41cfb2921ff0-kube-api-access-bp8dx\") on node \"localhost\" DevicePath \"\"" Nov 1 00:16:06.811206 kubelet[1946]: I1101 00:16:06.811190 1946 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/7d5a13f7-2466-4514-853b-41cfb2921ff0-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Nov 1 00:16:06.812594 kubelet[1946]: E1101 00:16:06.812284 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:06.815401 systemd[1]: Removed slice kubepods-besteffort-pod7d5a13f7_2466_4514_853b_41cfb2921ff0.slice. Nov 1 00:16:06.847180 kubelet[1946]: I1101 00:16:06.847100 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-x64wt" podStartSLOduration=1.744905144 podStartE2EDuration="13.847084444s" podCreationTimestamp="2025-11-01 00:15:53 +0000 UTC" firstStartedPulling="2025-11-01 00:15:53.929838452 +0000 UTC m=+24.326142708" lastFinishedPulling="2025-11-01 00:16:06.032017752 +0000 UTC m=+36.428322008" observedRunningTime="2025-11-01 00:16:06.837195321 +0000 UTC m=+37.233499617" watchObservedRunningTime="2025-11-01 00:16:06.847084444 +0000 UTC m=+37.243388660" Nov 1 00:16:06.877425 systemd[1]: Created slice kubepods-besteffort-pod8d91f72f_9342_481f_af2b_25b3e30c46e0.slice. Nov 1 00:16:06.912070 kubelet[1946]: I1101 00:16:06.912022 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-drpgs\" (UniqueName: \"kubernetes.io/projected/8d91f72f-9342-481f-af2b-25b3e30c46e0-kube-api-access-drpgs\") pod \"whisker-578679bc68-ccw69\" (UID: \"8d91f72f-9342-481f-af2b-25b3e30c46e0\") " pod="calico-system/whisker-578679bc68-ccw69" Nov 1 00:16:06.912220 kubelet[1946]: I1101 00:16:06.912090 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8d91f72f-9342-481f-af2b-25b3e30c46e0-whisker-ca-bundle\") pod \"whisker-578679bc68-ccw69\" (UID: \"8d91f72f-9342-481f-af2b-25b3e30c46e0\") " pod="calico-system/whisker-578679bc68-ccw69" Nov 1 00:16:06.912220 kubelet[1946]: I1101 00:16:06.912116 1946 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8d91f72f-9342-481f-af2b-25b3e30c46e0-whisker-backend-key-pair\") pod \"whisker-578679bc68-ccw69\" (UID: \"8d91f72f-9342-481f-af2b-25b3e30c46e0\") " pod="calico-system/whisker-578679bc68-ccw69" Nov 1 00:16:07.180470 env[1220]: time="2025-11-01T00:16:07.180416805Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-578679bc68-ccw69,Uid:8d91f72f-9342-481f-af2b-25b3e30c46e0,Namespace:calico-system,Attempt:0,}" Nov 1 00:16:07.294162 systemd-networkd[1046]: cali811c0cb11ea: Link UP Nov 1 00:16:07.297027 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:16:07.297118 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali811c0cb11ea: link becomes ready Nov 1 00:16:07.297035 systemd-networkd[1046]: cali811c0cb11ea: Gained carrier Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.213 [INFO][3266] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.228 [INFO][3266] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--578679bc68--ccw69-eth0 whisker-578679bc68- calico-system 8d91f72f-9342-481f-af2b-25b3e30c46e0 893 0 2025-11-01 00:16:06 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:578679bc68 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-578679bc68-ccw69 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali811c0cb11ea [] [] }} ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Namespace="calico-system" Pod="whisker-578679bc68-ccw69" WorkloadEndpoint="localhost-k8s-whisker--578679bc68--ccw69-" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.228 [INFO][3266] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Namespace="calico-system" Pod="whisker-578679bc68-ccw69" WorkloadEndpoint="localhost-k8s-whisker--578679bc68--ccw69-eth0" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.250 [INFO][3281] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" HandleID="k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Workload="localhost-k8s-whisker--578679bc68--ccw69-eth0" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.251 [INFO][3281] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" HandleID="k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Workload="localhost-k8s-whisker--578679bc68--ccw69-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001373f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-578679bc68-ccw69", "timestamp":"2025-11-01 00:16:07.250984317 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.251 [INFO][3281] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.251 [INFO][3281] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.251 [INFO][3281] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.262 [INFO][3281] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.267 [INFO][3281] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.271 [INFO][3281] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.272 [INFO][3281] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.274 [INFO][3281] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.274 [INFO][3281] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.276 [INFO][3281] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152 Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.279 [INFO][3281] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.284 [INFO][3281] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.284 [INFO][3281] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" host="localhost" Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.284 [INFO][3281] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:07.313467 env[1220]: 2025-11-01 00:16:07.284 [INFO][3281] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" HandleID="k8s-pod-network.07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Workload="localhost-k8s-whisker--578679bc68--ccw69-eth0" Nov 1 00:16:07.314205 env[1220]: 2025-11-01 00:16:07.286 [INFO][3266] cni-plugin/k8s.go 418: Populated endpoint ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Namespace="calico-system" Pod="whisker-578679bc68-ccw69" WorkloadEndpoint="localhost-k8s-whisker--578679bc68--ccw69-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--578679bc68--ccw69-eth0", GenerateName:"whisker-578679bc68-", Namespace:"calico-system", SelfLink:"", UID:"8d91f72f-9342-481f-af2b-25b3e30c46e0", ResourceVersion:"893", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 16, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"578679bc68", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-578679bc68-ccw69", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali811c0cb11ea", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:07.314205 env[1220]: 2025-11-01 00:16:07.286 [INFO][3266] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Namespace="calico-system" Pod="whisker-578679bc68-ccw69" WorkloadEndpoint="localhost-k8s-whisker--578679bc68--ccw69-eth0" Nov 1 00:16:07.314205 env[1220]: 2025-11-01 00:16:07.286 [INFO][3266] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali811c0cb11ea ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Namespace="calico-system" Pod="whisker-578679bc68-ccw69" WorkloadEndpoint="localhost-k8s-whisker--578679bc68--ccw69-eth0" Nov 1 00:16:07.314205 env[1220]: 2025-11-01 00:16:07.297 [INFO][3266] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Namespace="calico-system" Pod="whisker-578679bc68-ccw69" WorkloadEndpoint="localhost-k8s-whisker--578679bc68--ccw69-eth0" Nov 1 00:16:07.314205 env[1220]: 2025-11-01 00:16:07.298 [INFO][3266] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Namespace="calico-system" Pod="whisker-578679bc68-ccw69" WorkloadEndpoint="localhost-k8s-whisker--578679bc68--ccw69-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--578679bc68--ccw69-eth0", GenerateName:"whisker-578679bc68-", Namespace:"calico-system", SelfLink:"", UID:"8d91f72f-9342-481f-af2b-25b3e30c46e0", ResourceVersion:"893", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 16, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"578679bc68", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152", Pod:"whisker-578679bc68-ccw69", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali811c0cb11ea", MAC:"46:42:94:9d:0b:cb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:07.314205 env[1220]: 2025-11-01 00:16:07.307 [INFO][3266] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152" Namespace="calico-system" Pod="whisker-578679bc68-ccw69" WorkloadEndpoint="localhost-k8s-whisker--578679bc68--ccw69-eth0" Nov 1 00:16:07.319086 env[1220]: time="2025-11-01T00:16:07.318929305Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:16:07.319086 env[1220]: time="2025-11-01T00:16:07.319023309Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:16:07.319086 env[1220]: time="2025-11-01T00:16:07.319051271Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:16:07.319447 env[1220]: time="2025-11-01T00:16:07.319395727Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152 pid=3304 runtime=io.containerd.runc.v2 Nov 1 00:16:07.331522 systemd[1]: Started cri-containerd-07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152.scope. Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit: BPF prog-id=139 op=LOAD Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3304 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393337613838336566623437663366386463643331656431353031 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3304 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393337613838336566623437663366386463643331656431353031 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.349000 audit: BPF prog-id=140 op=LOAD Nov 1 00:16:07.349000 audit[3313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3304 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393337613838336566623437663366386463643331656431353031 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit: BPF prog-id=141 op=LOAD Nov 1 00:16:07.350000 audit[3313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3304 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393337613838336566623437663366386463643331656431353031 Nov 1 00:16:07.350000 audit: BPF prog-id=141 op=UNLOAD Nov 1 00:16:07.350000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { perfmon } for pid=3313 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit[3313]: AVC avc: denied { bpf } for pid=3313 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:07.350000 audit: BPF prog-id=142 op=LOAD Nov 1 00:16:07.350000 audit[3313]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3304 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037393337613838336566623437663366386463643331656431353031 Nov 1 00:16:07.351559 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:16:07.367922 env[1220]: time="2025-11-01T00:16:07.367879630Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-578679bc68-ccw69,Uid:8d91f72f-9342-481f-af2b-25b3e30c46e0,Namespace:calico-system,Attempt:0,} returns sandbox id \"07937a883efb47f3f8dcd31ed1501be4263de53c5845b02ed17acfd8895d3152\"" Nov 1 00:16:07.369341 env[1220]: time="2025-11-01T00:16:07.369306938Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:16:07.577836 env[1220]: time="2025-11-01T00:16:07.577718719Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:07.591759 env[1220]: time="2025-11-01T00:16:07.591662861Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:16:07.592155 kubelet[1946]: E1101 00:16:07.592099 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:16:07.592269 kubelet[1946]: E1101 00:16:07.592171 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:16:07.592599 kubelet[1946]: E1101 00:16:07.592536 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:d95660f46ada42f9a137b4b31db0d45a,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-drpgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-578679bc68-ccw69_calico-system(8d91f72f-9342-481f-af2b-25b3e30c46e0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:07.594718 env[1220]: time="2025-11-01T00:16:07.594688005Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:16:07.632000 audit[3382]: AVC avc: denied { write } for pid=3382 comm="tee" name="fd" dev="proc" ino=18860 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:16:07.632000 audit[3382]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffde9497e9 a2=241 a3=1b6 items=1 ppid=3360 pid=3382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.632000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:16:07.632000 audit: PATH item=0 name="/dev/fd/63" inode=19898 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:16:07.632000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:16:07.638000 audit[3388]: AVC avc: denied { write } for pid=3388 comm="tee" name="fd" dev="proc" ino=20821 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:16:07.638000 audit[3388]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff2e807ea a2=241 a3=1b6 items=1 ppid=3347 pid=3388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.638000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:16:07.638000 audit: PATH item=0 name="/dev/fd/63" inode=18857 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:16:07.638000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:16:07.645000 audit[3400]: AVC avc: denied { write } for pid=3400 comm="tee" name="fd" dev="proc" ino=19906 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:16:07.645000 audit[3400]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe6ba87eb a2=241 a3=1b6 items=1 ppid=3356 pid=3400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.645000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:16:07.645000 audit: PATH item=0 name="/dev/fd/63" inode=19903 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:16:07.645000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:16:07.649000 audit[3398]: AVC avc: denied { write } for pid=3398 comm="tee" name="fd" dev="proc" ino=18866 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:16:07.649000 audit[3398]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd7dd47d9 a2=241 a3=1b6 items=1 ppid=3349 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.649000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:16:07.649000 audit: PATH item=0 name="/dev/fd/63" inode=18334 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:16:07.649000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:16:07.654000 audit[3422]: AVC avc: denied { write } for pid=3422 comm="tee" name="fd" dev="proc" ino=18872 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:16:07.654000 audit[3422]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffec44a7da a2=241 a3=1b6 items=1 ppid=3355 pid=3422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.654000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:16:07.654000 audit: PATH item=0 name="/dev/fd/63" inode=20830 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:16:07.654000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:16:07.661000 audit[3415]: AVC avc: denied { write } for pid=3415 comm="tee" name="fd" dev="proc" ino=18339 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:16:07.661000 audit[3415]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff5e047e9 a2=241 a3=1b6 items=1 ppid=3350 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.661000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:16:07.661000 audit: PATH item=0 name="/dev/fd/63" inode=20829 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:16:07.661000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:16:07.662000 audit[3427]: AVC avc: denied { write } for pid=3427 comm="tee" name="fd" dev="proc" ino=18343 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:16:07.662000 audit[3427]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff233a7e9 a2=241 a3=1b6 items=1 ppid=3364 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.662000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:16:07.662000 audit: PATH item=0 name="/dev/fd/63" inode=20835 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:16:07.662000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:16:07.705086 kubelet[1946]: I1101 00:16:07.705048 1946 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="7d5a13f7-2466-4514-853b-41cfb2921ff0" path="/var/lib/kubelet/pods/7d5a13f7-2466-4514-853b-41cfb2921ff0/volumes" Nov 1 00:16:07.804997 env[1220]: time="2025-11-01T00:16:07.804929512Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:07.805930 env[1220]: time="2025-11-01T00:16:07.805880117Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:16:07.806189 kubelet[1946]: E1101 00:16:07.806141 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:16:07.806467 kubelet[1946]: E1101 00:16:07.806200 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:16:07.806503 kubelet[1946]: E1101 00:16:07.806317 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-drpgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-578679bc68-ccw69_calico-system(8d91f72f-9342-481f-af2b-25b3e30c46e0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:07.808734 kubelet[1946]: E1101 00:16:07.807469 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-578679bc68-ccw69" podUID="8d91f72f-9342-481f-af2b-25b3e30c46e0" Nov 1 00:16:07.814671 kubelet[1946]: I1101 00:16:07.814338 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:16:07.814771 kubelet[1946]: E1101 00:16:07.814746 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:07.815957 kubelet[1946]: E1101 00:16:07.815918 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-578679bc68-ccw69" podUID="8d91f72f-9342-481f-af2b-25b3e30c46e0" Nov 1 00:16:07.843000 audit[3438]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=3438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:07.843000 audit[3438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe7fe1730 a2=0 a3=1 items=0 ppid=2054 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.843000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:07.864000 audit[3438]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=3438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:07.864000 audit[3438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe7fe1730 a2=0 a3=1 items=0 ppid=2054 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:07.864000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:08.577203 systemd[1]: run-containerd-runc-k8s.io-c495570571cfbd9b49c445b40eaa0c165b580bb383a65d48b3ae6fb645ab78c8-runc.nPEUOR.mount: Deactivated successfully. Nov 1 00:16:08.816649 kubelet[1946]: E1101 00:16:08.816609 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:08.818343 kubelet[1946]: E1101 00:16:08.818256 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-578679bc68-ccw69" podUID="8d91f72f-9342-481f-af2b-25b3e30c46e0" Nov 1 00:16:08.840906 systemd[1]: run-containerd-runc-k8s.io-c495570571cfbd9b49c445b40eaa0c165b580bb383a65d48b3ae6fb645ab78c8-runc.DL3bK5.mount: Deactivated successfully. Nov 1 00:16:08.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.59:22-10.0.0.1:38522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:08.850269 systemd[1]: Started sshd@7-10.0.0.59:22-10.0.0.1:38522.service. Nov 1 00:16:08.890000 audit[3517]: USER_ACCT pid=3517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:08.891887 sshd[3517]: Accepted publickey for core from 10.0.0.1 port 38522 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:08.892000 audit[3517]: CRED_ACQ pid=3517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:08.892000 audit[3517]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0066ed0 a2=3 a3=1 items=0 ppid=1 pid=3517 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:08.892000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:08.893475 sshd[3517]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:08.897344 systemd-logind[1206]: New session 8 of user core. Nov 1 00:16:08.898225 systemd[1]: Started session-8.scope. Nov 1 00:16:08.901000 audit[3517]: USER_START pid=3517 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:08.902000 audit[3532]: CRED_ACQ pid=3532 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:09.053637 sshd[3517]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:09.053000 audit[3517]: USER_END pid=3517 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:09.053000 audit[3517]: CRED_DISP pid=3517 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:09.056038 systemd[1]: sshd@7-10.0.0.59:22-10.0.0.1:38522.service: Deactivated successfully. Nov 1 00:16:09.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.59:22-10.0.0.1:38522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:09.056765 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:16:09.057224 systemd-logind[1206]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:16:09.058003 systemd-logind[1206]: Removed session 8. Nov 1 00:16:09.287145 systemd-networkd[1046]: cali811c0cb11ea: Gained IPv6LL Nov 1 00:16:11.702971 env[1220]: time="2025-11-01T00:16:11.702914798Z" level=info msg="StopPodSandbox for \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\"" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.744 [INFO][3606] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.744 [INFO][3606] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" iface="eth0" netns="/var/run/netns/cni-7df5741d-5990-4c13-dafb-d8da41400615" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.744 [INFO][3606] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" iface="eth0" netns="/var/run/netns/cni-7df5741d-5990-4c13-dafb-d8da41400615" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.744 [INFO][3606] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" iface="eth0" netns="/var/run/netns/cni-7df5741d-5990-4c13-dafb-d8da41400615" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.744 [INFO][3606] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.744 [INFO][3606] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.762 [INFO][3614] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.762 [INFO][3614] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.762 [INFO][3614] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.770 [WARNING][3614] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.770 [INFO][3614] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.771 [INFO][3614] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:11.775280 env[1220]: 2025-11-01 00:16:11.773 [INFO][3606] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:11.776257 env[1220]: time="2025-11-01T00:16:11.775410030Z" level=info msg="TearDown network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\" successfully" Nov 1 00:16:11.776257 env[1220]: time="2025-11-01T00:16:11.775449071Z" level=info msg="StopPodSandbox for \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\" returns successfully" Nov 1 00:16:11.776257 env[1220]: time="2025-11-01T00:16:11.776039257Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-9ggfv,Uid:1bea652b-fa9e-4d21-a870-250a69c0d5a9,Namespace:calico-system,Attempt:1,}" Nov 1 00:16:11.777393 systemd[1]: run-netns-cni\x2d7df5741d\x2d5990\x2d4c13\x2ddafb\x2dd8da41400615.mount: Deactivated successfully. Nov 1 00:16:11.879097 systemd-networkd[1046]: calic0f3c74bc6f: Link UP Nov 1 00:16:11.880329 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:16:11.880395 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic0f3c74bc6f: link becomes ready Nov 1 00:16:11.880451 systemd-networkd[1046]: calic0f3c74bc6f: Gained carrier Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.805 [INFO][3621] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.818 [INFO][3621] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--666569f655--9ggfv-eth0 goldmane-666569f655- calico-system 1bea652b-fa9e-4d21-a870-250a69c0d5a9 980 0 2025-11-01 00:15:51 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-666569f655-9ggfv eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic0f3c74bc6f [] [] }} ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Namespace="calico-system" Pod="goldmane-666569f655-9ggfv" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--9ggfv-" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.818 [INFO][3621] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Namespace="calico-system" Pod="goldmane-666569f655-9ggfv" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.838 [INFO][3636] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" HandleID="k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.838 [INFO][3636] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" HandleID="k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d7d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-666569f655-9ggfv", "timestamp":"2025-11-01 00:16:11.838698947 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.839 [INFO][3636] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.839 [INFO][3636] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.839 [INFO][3636] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.850 [INFO][3636] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.854 [INFO][3636] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.858 [INFO][3636] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.860 [INFO][3636] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.863 [INFO][3636] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.863 [INFO][3636] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.864 [INFO][3636] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.867 [INFO][3636] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.874 [INFO][3636] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.874 [INFO][3636] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" host="localhost" Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.874 [INFO][3636] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:11.895197 env[1220]: 2025-11-01 00:16:11.874 [INFO][3636] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" HandleID="k8s-pod-network.e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.895768 env[1220]: 2025-11-01 00:16:11.876 [INFO][3621] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Namespace="calico-system" Pod="goldmane-666569f655-9ggfv" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--9ggfv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--9ggfv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"1bea652b-fa9e-4d21-a870-250a69c0d5a9", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-666569f655-9ggfv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic0f3c74bc6f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:11.895768 env[1220]: 2025-11-01 00:16:11.876 [INFO][3621] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Namespace="calico-system" Pod="goldmane-666569f655-9ggfv" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.895768 env[1220]: 2025-11-01 00:16:11.876 [INFO][3621] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic0f3c74bc6f ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Namespace="calico-system" Pod="goldmane-666569f655-9ggfv" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.895768 env[1220]: 2025-11-01 00:16:11.881 [INFO][3621] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Namespace="calico-system" Pod="goldmane-666569f655-9ggfv" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.895768 env[1220]: 2025-11-01 00:16:11.884 [INFO][3621] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Namespace="calico-system" Pod="goldmane-666569f655-9ggfv" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--9ggfv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--9ggfv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"1bea652b-fa9e-4d21-a870-250a69c0d5a9", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a", Pod:"goldmane-666569f655-9ggfv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic0f3c74bc6f", MAC:"8a:e0:2e:1c:a2:ad", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:11.895768 env[1220]: 2025-11-01 00:16:11.893 [INFO][3621] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a" Namespace="calico-system" Pod="goldmane-666569f655-9ggfv" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:11.908916 env[1220]: time="2025-11-01T00:16:11.905012513Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:16:11.908916 env[1220]: time="2025-11-01T00:16:11.905071796Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:16:11.908916 env[1220]: time="2025-11-01T00:16:11.905083116Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:16:11.908916 env[1220]: time="2025-11-01T00:16:11.905347528Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a pid=3660 runtime=io.containerd.runc.v2 Nov 1 00:16:11.922077 systemd[1]: Started cri-containerd-e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a.scope. Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943730 kernel: kauditd_printk_skb: 142 callbacks suppressed Nov 1 00:16:11.943882 kernel: audit: type=1400 audit(1761956171.939:1048): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943918 kernel: audit: type=1400 audit(1761956171.939:1049): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.949214 kernel: audit: type=1400 audit(1761956171.939:1050): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.949288 kernel: audit: type=1400 audit(1761956171.939:1051): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.952008 kernel: audit: type=1400 audit(1761956171.939:1052): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.954863 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.961001 kernel: audit: type=1400 audit(1761956171.939:1053): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.961076 kernel: audit: type=1400 audit(1761956171.939:1054): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.966685 kernel: audit: type=1400 audit(1761956171.939:1055): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.969682 kernel: audit: type=1400 audit(1761956171.939:1056): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.975772 kernel: audit: type=1400 audit(1761956171.939:1057): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit: BPF prog-id=143 op=LOAD Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3660 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530396631363032333464323838623562383534303330336630303333 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3660 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530396631363032333464323838623562383534303330336630303333 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.939000 audit: BPF prog-id=144 op=LOAD Nov 1 00:16:11.939000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3660 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530396631363032333464323838623562383534303330336630303333 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.943000 audit: BPF prog-id=145 op=LOAD Nov 1 00:16:11.943000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3660 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:11.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530396631363032333464323838623562383534303330336630303333 Nov 1 00:16:11.946000 audit: BPF prog-id=145 op=UNLOAD Nov 1 00:16:11.946000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:11.946000 audit: BPF prog-id=146 op=LOAD Nov 1 00:16:11.946000 audit[3672]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3660 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:11.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530396631363032333464323838623562383534303330336630303333 Nov 1 00:16:11.994851 env[1220]: time="2025-11-01T00:16:11.994791927Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-9ggfv,Uid:1bea652b-fa9e-4d21-a870-250a69c0d5a9,Namespace:calico-system,Attempt:1,} returns sandbox id \"e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a\"" Nov 1 00:16:11.997605 env[1220]: time="2025-11-01T00:16:11.997553926Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:16:12.109101 kubelet[1946]: I1101 00:16:12.108812 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:16:12.109483 kubelet[1946]: E1101 00:16:12.109203 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:12.134000 audit[3715]: NETFILTER_CFG table=filter:103 family=2 entries=21 op=nft_register_rule pid=3715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:12.134000 audit[3715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd1d99930 a2=0 a3=1 items=0 ppid=2054 pid=3715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:12.134000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:12.143000 audit[3715]: NETFILTER_CFG table=nat:104 family=2 entries=19 op=nft_register_chain pid=3715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:12.143000 audit[3715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd1d99930 a2=0 a3=1 items=0 ppid=2054 pid=3715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:12.143000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:12.210555 env[1220]: time="2025-11-01T00:16:12.210445861Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:12.212419 env[1220]: time="2025-11-01T00:16:12.212362622Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:16:12.212734 kubelet[1946]: E1101 00:16:12.212693 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:16:12.212802 kubelet[1946]: E1101 00:16:12.212744 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:16:12.213129 kubelet[1946]: E1101 00:16:12.212906 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-s28vx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-9ggfv_calico-system(1bea652b-fa9e-4d21-a870-250a69c0d5a9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:12.214674 kubelet[1946]: E1101 00:16:12.214600 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-9ggfv" podUID="1bea652b-fa9e-4d21-a870-250a69c0d5a9" Nov 1 00:16:12.777520 systemd[1]: run-containerd-runc-k8s.io-e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a-runc.WqNlxX.mount: Deactivated successfully. Nov 1 00:16:12.828244 kubelet[1946]: E1101 00:16:12.828215 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:12.828599 kubelet[1946]: E1101 00:16:12.828566 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-9ggfv" podUID="1bea652b-fa9e-4d21-a870-250a69c0d5a9" Nov 1 00:16:12.848000 audit[3719]: NETFILTER_CFG table=filter:105 family=2 entries=20 op=nft_register_rule pid=3719 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:12.848000 audit[3719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffffe28f1b0 a2=0 a3=1 items=0 ppid=2054 pid=3719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:12.848000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:12.862000 audit[3719]: NETFILTER_CFG table=nat:106 family=2 entries=14 op=nft_register_rule pid=3719 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:12.862000 audit[3719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffffe28f1b0 a2=0 a3=1 items=0 ppid=2054 pid=3719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:12.862000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.097000 audit: BPF prog-id=147 op=LOAD Nov 1 00:16:13.097000 audit[3776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffef2f9438 a2=98 a3=ffffef2f9428 items=0 ppid=3720 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.097000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:16:13.098000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit: BPF prog-id=148 op=LOAD Nov 1 00:16:13.098000 audit[3776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffef2f92e8 a2=74 a3=95 items=0 ppid=3720 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.098000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:16:13.098000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { bpf } for pid=3776 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit: BPF prog-id=149 op=LOAD Nov 1 00:16:13.098000 audit[3776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffef2f9318 a2=40 a3=ffffef2f9348 items=0 ppid=3720 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.098000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:16:13.098000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:16:13.098000 audit[3776]: AVC avc: denied { perfmon } for pid=3776 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.098000 audit[3776]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffef2f9430 a2=50 a3=0 items=0 ppid=3720 pid=3776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.098000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit: BPF prog-id=150 op=LOAD Nov 1 00:16:13.101000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc865ac98 a2=98 a3=ffffc865ac88 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.101000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.101000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit: BPF prog-id=151 op=LOAD Nov 1 00:16:13.101000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc865a928 a2=74 a3=95 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.101000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.101000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.101000 audit: BPF prog-id=152 op=LOAD Nov 1 00:16:13.101000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc865a988 a2=94 a3=2 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.101000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.101000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit: BPF prog-id=153 op=LOAD Nov 1 00:16:13.193000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc865a948 a2=40 a3=ffffc865a978 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.193000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:16:13.193000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.193000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc865aa60 a2=50 a3=0 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc865a9b8 a2=28 a3=ffffc865aae8 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc865a9e8 a2=28 a3=ffffc865ab18 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc865a898 a2=28 a3=ffffc865a9c8 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc865aa08 a2=28 a3=ffffc865ab38 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc865a9e8 a2=28 a3=ffffc865ab18 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc865a9d8 a2=28 a3=ffffc865ab08 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc865aa08 a2=28 a3=ffffc865ab38 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc865a9e8 a2=28 a3=ffffc865ab18 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc865aa08 a2=28 a3=ffffc865ab38 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.201000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.201000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc865a9d8 a2=28 a3=ffffc865ab08 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.201000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc865aa58 a2=28 a3=ffffc865ab98 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc865a790 a2=50 a3=0 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit: BPF prog-id=154 op=LOAD Nov 1 00:16:13.202000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc865a798 a2=94 a3=5 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.202000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc865a8a0 a2=50 a3=0 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc865a9e8 a2=4 a3=3 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { confidentiality } for pid=3780 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:16:13.202000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc865a9c8 a2=94 a3=6 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { confidentiality } for pid=3780 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:16:13.202000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc865a198 a2=94 a3=83 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.202000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc865a198 a2=94 a3=83 items=0 ppid=3720 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.202000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit: BPF prog-id=155 op=LOAD Nov 1 00:16:13.212000 audit[3784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcb6beb98 a2=98 a3=ffffcb6beb88 items=0 ppid=3720 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.212000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:16:13.212000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit: BPF prog-id=156 op=LOAD Nov 1 00:16:13.212000 audit[3784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcb6bea48 a2=74 a3=95 items=0 ppid=3720 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.212000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:16:13.212000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.212000 audit: BPF prog-id=157 op=LOAD Nov 1 00:16:13.212000 audit[3784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcb6bea78 a2=40 a3=ffffcb6beaa8 items=0 ppid=3720 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.212000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:16:13.212000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:16:13.273746 systemd-networkd[1046]: vxlan.calico: Link UP Nov 1 00:16:13.273754 systemd-networkd[1046]: vxlan.calico: Gained carrier Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.280000 audit: BPF prog-id=158 op=LOAD Nov 1 00:16:13.280000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdb9e8ac8 a2=98 a3=ffffdb9e8ab8 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.280000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.280000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit: BPF prog-id=159 op=LOAD Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdb9e87a8 a2=74 a3=95 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit: BPF prog-id=160 op=LOAD Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdb9e8808 a2=94 a3=2 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdb9e8838 a2=28 a3=ffffdb9e8968 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb9e8868 a2=28 a3=ffffdb9e8998 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb9e8718 a2=28 a3=ffffdb9e8848 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdb9e8888 a2=28 a3=ffffdb9e89b8 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdb9e8868 a2=28 a3=ffffdb9e8998 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdb9e8858 a2=28 a3=ffffdb9e8988 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdb9e8888 a2=28 a3=ffffdb9e89b8 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb9e8868 a2=28 a3=ffffdb9e8998 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb9e8888 a2=28 a3=ffffdb9e89b8 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb9e8858 a2=28 a3=ffffdb9e8988 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdb9e88d8 a2=28 a3=ffffdb9e8a18 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.281000 audit: BPF prog-id=161 op=LOAD Nov 1 00:16:13.281000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdb9e86f8 a2=40 a3=ffffdb9e8728 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.281000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.281000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffdb9e8720 a2=50 a3=0 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.282000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffdb9e8720 a2=50 a3=0 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.282000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit: BPF prog-id=162 op=LOAD Nov 1 00:16:13.282000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdb9e7e88 a2=94 a3=2 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.282000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.282000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { perfmon } for pid=3811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit[3811]: AVC avc: denied { bpf } for pid=3811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.282000 audit: BPF prog-id=163 op=LOAD Nov 1 00:16:13.282000 audit[3811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdb9e8018 a2=94 a3=30 items=0 ppid=3720 pid=3811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.282000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.286000 audit: BPF prog-id=164 op=LOAD Nov 1 00:16:13.286000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdb8f79b8 a2=98 a3=ffffdb8f79a8 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.286000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.287000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit: BPF prog-id=165 op=LOAD Nov 1 00:16:13.287000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdb8f7648 a2=74 a3=95 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.287000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.287000 audit: BPF prog-id=165 op=UNLOAD Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.287000 audit: BPF prog-id=166 op=LOAD Nov 1 00:16:13.287000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdb8f76a8 a2=94 a3=2 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.287000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.287000 audit: BPF prog-id=166 op=UNLOAD Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.374000 audit: BPF prog-id=167 op=LOAD Nov 1 00:16:13.374000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdb8f7668 a2=40 a3=ffffdb8f7698 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.374000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.375000 audit: BPF prog-id=167 op=UNLOAD Nov 1 00:16:13.375000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.375000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffdb8f7780 a2=50 a3=0 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.375000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb8f76d8 a2=28 a3=ffffdb8f7808 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb8f7708 a2=28 a3=ffffdb8f7838 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb8f75b8 a2=28 a3=ffffdb8f76e8 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb8f7728 a2=28 a3=ffffdb8f7858 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb8f7708 a2=28 a3=ffffdb8f7838 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb8f76f8 a2=28 a3=ffffdb8f7828 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb8f7728 a2=28 a3=ffffdb8f7858 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb8f7708 a2=28 a3=ffffdb8f7838 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb8f7728 a2=28 a3=ffffdb8f7858 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb8f76f8 a2=28 a3=ffffdb8f7828 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb8f7778 a2=28 a3=ffffdb8f78b8 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdb8f74b0 a2=50 a3=0 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit: BPF prog-id=168 op=LOAD Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdb8f74b8 a2=94 a3=5 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit: BPF prog-id=168 op=UNLOAD Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdb8f75c0 a2=50 a3=0 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffdb8f7708 a2=4 a3=3 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { confidentiality } for pid=3813 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdb8f76e8 a2=94 a3=6 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.383000 audit[3813]: AVC avc: denied { confidentiality } for pid=3813 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:16:13.383000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdb8f6eb8 a2=94 a3=83 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { confidentiality } for pid=3813 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:16:13.384000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdb8f6eb8 a2=94 a3=83 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.384000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb8f88f8 a2=10 a3=ffffdb8f89e8 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.384000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb8f87b8 a2=10 a3=ffffdb8f88a8 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.384000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb8f8728 a2=10 a3=ffffdb8f88a8 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.384000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.384000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:13.384000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb8f8728 a2=10 a3=ffffdb8f88a8 items=0 ppid=3720 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.384000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:16:13.398000 audit: BPF prog-id=163 op=UNLOAD Nov 1 00:16:13.440000 audit[3842]: NETFILTER_CFG table=mangle:107 family=2 entries=16 op=nft_register_chain pid=3842 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:13.440000 audit[3842]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffd4cb1c60 a2=0 a3=ffff9c6e6fa8 items=0 ppid=3720 pid=3842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.440000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:13.445000 audit[3843]: NETFILTER_CFG table=nat:108 family=2 entries=15 op=nft_register_chain pid=3843 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:13.445000 audit[3843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffcdc8c410 a2=0 a3=ffffb9e98fa8 items=0 ppid=3720 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.445000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:13.448127 systemd-networkd[1046]: calic0f3c74bc6f: Gained IPv6LL Nov 1 00:16:13.453000 audit[3841]: NETFILTER_CFG table=raw:109 family=2 entries=21 op=nft_register_chain pid=3841 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:13.453000 audit[3841]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffd75db340 a2=0 a3=ffffa1601fa8 items=0 ppid=3720 pid=3841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.453000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:13.454000 audit[3845]: NETFILTER_CFG table=filter:110 family=2 entries=130 op=nft_register_chain pid=3845 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:13.454000 audit[3845]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=75396 a0=3 a1=ffffde931180 a2=0 a3=ffffb5a8ffa8 items=0 ppid=3720 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.454000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:13.703559 env[1220]: time="2025-11-01T00:16:13.702978483Z" level=info msg="StopPodSandbox for \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\"" Nov 1 00:16:13.703559 env[1220]: time="2025-11-01T00:16:13.703036005Z" level=info msg="StopPodSandbox for \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\"" Nov 1 00:16:13.703559 env[1220]: time="2025-11-01T00:16:13.703028925Z" level=info msg="StopPodSandbox for \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\"" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.760 [INFO][3893] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.760 [INFO][3893] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" iface="eth0" netns="/var/run/netns/cni-9fab670b-fabd-ff71-ca0a-b0c5d41ebddc" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.761 [INFO][3893] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" iface="eth0" netns="/var/run/netns/cni-9fab670b-fabd-ff71-ca0a-b0c5d41ebddc" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.761 [INFO][3893] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" iface="eth0" netns="/var/run/netns/cni-9fab670b-fabd-ff71-ca0a-b0c5d41ebddc" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.761 [INFO][3893] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.761 [INFO][3893] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.790 [INFO][3914] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.790 [INFO][3914] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.790 [INFO][3914] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.799 [WARNING][3914] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.799 [INFO][3914] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.801 [INFO][3914] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:13.810022 env[1220]: 2025-11-01 00:16:13.806 [INFO][3893] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:13.811890 env[1220]: time="2025-11-01T00:16:13.811851592Z" level=info msg="TearDown network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\" successfully" Nov 1 00:16:13.811957 env[1220]: time="2025-11-01T00:16:13.811941636Z" level=info msg="StopPodSandbox for \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\" returns successfully" Nov 1 00:16:13.812216 systemd[1]: run-netns-cni\x2d9fab670b\x2dfabd\x2dff71\x2dca0a\x2db0c5d41ebddc.mount: Deactivated successfully. Nov 1 00:16:13.812511 kubelet[1946]: E1101 00:16:13.812358 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:13.813635 env[1220]: time="2025-11-01T00:16:13.812967278Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-n7f7f,Uid:ad016577-acfe-433f-85f4-2a0e1c651c14,Namespace:kube-system,Attempt:1,}" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.758 [INFO][3879] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.759 [INFO][3879] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" iface="eth0" netns="/var/run/netns/cni-e41dacb8-cb18-b129-c423-b6748890c969" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.760 [INFO][3879] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" iface="eth0" netns="/var/run/netns/cni-e41dacb8-cb18-b129-c423-b6748890c969" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.760 [INFO][3879] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" iface="eth0" netns="/var/run/netns/cni-e41dacb8-cb18-b129-c423-b6748890c969" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.760 [INFO][3879] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.760 [INFO][3879] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.793 [INFO][3912] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.793 [INFO][3912] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.801 [INFO][3912] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.813 [WARNING][3912] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.813 [INFO][3912] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.815 [INFO][3912] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:13.822262 env[1220]: 2025-11-01 00:16:13.816 [INFO][3879] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:13.823176 env[1220]: time="2025-11-01T00:16:13.823143295Z" level=info msg="TearDown network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\" successfully" Nov 1 00:16:13.823230 env[1220]: time="2025-11-01T00:16:13.823176177Z" level=info msg="StopPodSandbox for \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\" returns successfully" Nov 1 00:16:13.824917 systemd[1]: run-netns-cni\x2de41dacb8\x2dcb18\x2db129\x2dc423\x2db6748890c969.mount: Deactivated successfully. Nov 1 00:16:13.825722 env[1220]: time="2025-11-01T00:16:13.825685640Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f475bc956-k282f,Uid:476f4117-f217-4ab0-8acb-437e73ee9d99,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:16:13.831388 kubelet[1946]: E1101 00:16:13.830413 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-9ggfv" podUID="1bea652b-fa9e-4d21-a870-250a69c0d5a9" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.776 [INFO][3894] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.776 [INFO][3894] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" iface="eth0" netns="/var/run/netns/cni-037470d7-4a2c-1c09-b1a6-dfdf5fd48f5e" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.776 [INFO][3894] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" iface="eth0" netns="/var/run/netns/cni-037470d7-4a2c-1c09-b1a6-dfdf5fd48f5e" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.776 [INFO][3894] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" iface="eth0" netns="/var/run/netns/cni-037470d7-4a2c-1c09-b1a6-dfdf5fd48f5e" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.776 [INFO][3894] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.776 [INFO][3894] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.806 [INFO][3926] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.806 [INFO][3926] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.815 [INFO][3926] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.834 [WARNING][3926] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.834 [INFO][3926] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.836 [INFO][3926] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:13.850511 env[1220]: 2025-11-01 00:16:13.848 [INFO][3894] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:13.850925 env[1220]: time="2025-11-01T00:16:13.850614943Z" level=info msg="TearDown network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\" successfully" Nov 1 00:16:13.850925 env[1220]: time="2025-11-01T00:16:13.850641824Z" level=info msg="StopPodSandbox for \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\" returns successfully" Nov 1 00:16:13.851255 env[1220]: time="2025-11-01T00:16:13.851215968Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7f6b964fd9-74jpn,Uid:7b333081-da7b-416e-a1c3-ea55953cf8be,Namespace:calico-system,Attempt:1,}" Nov 1 00:16:13.955605 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib0cfff89b87: link becomes ready Nov 1 00:16:13.955238 systemd-networkd[1046]: calib0cfff89b87: Link UP Nov 1 00:16:13.955367 systemd-networkd[1046]: calib0cfff89b87: Gained carrier Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.879 [INFO][3937] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0 coredns-668d6bf9bc- kube-system ad016577-acfe-433f-85f4-2a0e1c651c14 1024 0 2025-11-01 00:15:37 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-n7f7f eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calib0cfff89b87 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Namespace="kube-system" Pod="coredns-668d6bf9bc-n7f7f" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--n7f7f-" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.880 [INFO][3937] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Namespace="kube-system" Pod="coredns-668d6bf9bc-n7f7f" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.913 [INFO][3979] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" HandleID="k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.914 [INFO][3979] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" HandleID="k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004ca70), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-n7f7f", "timestamp":"2025-11-01 00:16:13.913660251 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.915 [INFO][3979] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.915 [INFO][3979] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.915 [INFO][3979] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.924 [INFO][3979] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.930 [INFO][3979] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.933 [INFO][3979] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.935 [INFO][3979] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.938 [INFO][3979] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.938 [INFO][3979] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.940 [INFO][3979] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8 Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.944 [INFO][3979] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.950 [INFO][3979] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.950 [INFO][3979] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" host="localhost" Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.950 [INFO][3979] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:13.973039 env[1220]: 2025-11-01 00:16:13.950 [INFO][3979] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" HandleID="k8s-pod-network.d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.973955 env[1220]: 2025-11-01 00:16:13.952 [INFO][3937] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Namespace="kube-system" Pod="coredns-668d6bf9bc-n7f7f" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"ad016577-acfe-433f-85f4-2a0e1c651c14", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-n7f7f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib0cfff89b87", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:13.973955 env[1220]: 2025-11-01 00:16:13.952 [INFO][3937] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Namespace="kube-system" Pod="coredns-668d6bf9bc-n7f7f" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.973955 env[1220]: 2025-11-01 00:16:13.952 [INFO][3937] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib0cfff89b87 ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Namespace="kube-system" Pod="coredns-668d6bf9bc-n7f7f" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.973955 env[1220]: 2025-11-01 00:16:13.957 [INFO][3937] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Namespace="kube-system" Pod="coredns-668d6bf9bc-n7f7f" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.973955 env[1220]: 2025-11-01 00:16:13.959 [INFO][3937] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Namespace="kube-system" Pod="coredns-668d6bf9bc-n7f7f" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"ad016577-acfe-433f-85f4-2a0e1c651c14", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8", Pod:"coredns-668d6bf9bc-n7f7f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib0cfff89b87", MAC:"e2:8e:47:ce:62:c4", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:13.973955 env[1220]: 2025-11-01 00:16:13.970 [INFO][3937] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8" Namespace="kube-system" Pod="coredns-668d6bf9bc-n7f7f" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:13.980000 audit[4015]: NETFILTER_CFG table=filter:111 family=2 entries=46 op=nft_register_chain pid=4015 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:13.980000 audit[4015]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23740 a0=3 a1=ffffdbf3e1c0 a2=0 a3=ffffae213fa8 items=0 ppid=3720 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.980000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:13.991099 env[1220]: time="2025-11-01T00:16:13.991029906Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:16:13.991099 env[1220]: time="2025-11-01T00:16:13.991069748Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:16:13.991278 env[1220]: time="2025-11-01T00:16:13.991080188Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:16:13.991556 env[1220]: time="2025-11-01T00:16:13.991520567Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8 pid=4022 runtime=io.containerd.runc.v2 Nov 1 00:16:14.002512 systemd[1]: Started cri-containerd-d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8.scope. Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.020000 audit: BPF prog-id=169 op=LOAD Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4022 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393535343965653837396236666235326266376661393065623834 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4022 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393535343965653837396236666235326266376661393065623834 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.021000 audit: BPF prog-id=170 op=LOAD Nov 1 00:16:14.021000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4022 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393535343965653837396236666235326266376661393065623834 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.022000 audit: BPF prog-id=171 op=LOAD Nov 1 00:16:14.022000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4022 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.022000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393535343965653837396236666235326266376661393065623834 Nov 1 00:16:14.022000 audit: BPF prog-id=171 op=UNLOAD Nov 1 00:16:14.023000 audit: BPF prog-id=170 op=UNLOAD Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { perfmon } for pid=4033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit[4033]: AVC avc: denied { bpf } for pid=4033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.023000 audit: BPF prog-id=172 op=LOAD Nov 1 00:16:14.023000 audit[4033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4022 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434393535343965653837396236666235326266376661393065623834 Nov 1 00:16:14.025540 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:16:14.041931 env[1220]: time="2025-11-01T00:16:14.041886279Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-n7f7f,Uid:ad016577-acfe-433f-85f4-2a0e1c651c14,Namespace:kube-system,Attempt:1,} returns sandbox id \"d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8\"" Nov 1 00:16:14.042572 kubelet[1946]: E1101 00:16:14.042546 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:14.046435 env[1220]: time="2025-11-01T00:16:14.046315337Z" level=info msg="CreateContainer within sandbox \"d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:16:14.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.59:22-10.0.0.1:50568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:14.059307 systemd[1]: Started sshd@8-10.0.0.59:22-10.0.0.1:50568.service. Nov 1 00:16:14.067526 env[1220]: time="2025-11-01T00:16:14.067483988Z" level=info msg="CreateContainer within sandbox \"d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"52359940deb5b8f1fe42df1809e37072e05e2188ebb1207af415e632e071844c\"" Nov 1 00:16:14.070886 env[1220]: time="2025-11-01T00:16:14.070852323Z" level=info msg="StartContainer for \"52359940deb5b8f1fe42df1809e37072e05e2188ebb1207af415e632e071844c\"" Nov 1 00:16:14.074014 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali093c6d9e23f: link becomes ready Nov 1 00:16:14.074352 systemd-networkd[1046]: cali093c6d9e23f: Link UP Nov 1 00:16:14.074521 systemd-networkd[1046]: cali093c6d9e23f: Gained carrier Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:13.900 [INFO][3950] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--f475bc956--k282f-eth0 calico-apiserver-f475bc956- calico-apiserver 476f4117-f217-4ab0-8acb-437e73ee9d99 1023 0 2025-11-01 00:15:45 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:f475bc956 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-f475bc956-k282f eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali093c6d9e23f [] [] }} ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-k282f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--k282f-" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:13.900 [INFO][3950] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-k282f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:13.930 [INFO][3989] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" HandleID="k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:13.930 [INFO][3989] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" HandleID="k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a2320), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-f475bc956-k282f", "timestamp":"2025-11-01 00:16:13.93069103 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:13.930 [INFO][3989] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:13.950 [INFO][3989] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:13.950 [INFO][3989] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.026 [INFO][3989] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.032 [INFO][3989] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.038 [INFO][3989] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.042 [INFO][3989] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.046 [INFO][3989] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.046 [INFO][3989] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.047 [INFO][3989] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.051 [INFO][3989] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.056 [INFO][3989] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.056 [INFO][3989] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" host="localhost" Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.056 [INFO][3989] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:14.088964 env[1220]: 2025-11-01 00:16:14.056 [INFO][3989] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" HandleID="k8s-pod-network.55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:14.089545 env[1220]: 2025-11-01 00:16:14.071 [INFO][3950] cni-plugin/k8s.go 418: Populated endpoint ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-k282f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f475bc956--k282f-eth0", GenerateName:"calico-apiserver-f475bc956-", Namespace:"calico-apiserver", SelfLink:"", UID:"476f4117-f217-4ab0-8acb-437e73ee9d99", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f475bc956", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-f475bc956-k282f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali093c6d9e23f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:14.089545 env[1220]: 2025-11-01 00:16:14.071 [INFO][3950] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-k282f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:14.089545 env[1220]: 2025-11-01 00:16:14.071 [INFO][3950] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali093c6d9e23f ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-k282f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:14.089545 env[1220]: 2025-11-01 00:16:14.074 [INFO][3950] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-k282f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:14.089545 env[1220]: 2025-11-01 00:16:14.075 [INFO][3950] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-k282f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f475bc956--k282f-eth0", GenerateName:"calico-apiserver-f475bc956-", Namespace:"calico-apiserver", SelfLink:"", UID:"476f4117-f217-4ab0-8acb-437e73ee9d99", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f475bc956", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf", Pod:"calico-apiserver-f475bc956-k282f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali093c6d9e23f", MAC:"42:f6:01:7a:bb:91", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:14.089545 env[1220]: 2025-11-01 00:16:14.084 [INFO][3950] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-k282f" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:14.101767 systemd[1]: Started cri-containerd-52359940deb5b8f1fe42df1809e37072e05e2188ebb1207af415e632e071844c.scope. Nov 1 00:16:14.105661 env[1220]: time="2025-11-01T00:16:14.105458154Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:16:14.105661 env[1220]: time="2025-11-01T00:16:14.105502876Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:16:14.105661 env[1220]: time="2025-11-01T00:16:14.105513076Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:16:14.105825 env[1220]: time="2025-11-01T00:16:14.105755166Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf pid=4094 runtime=io.containerd.runc.v2 Nov 1 00:16:14.107000 audit[4083]: NETFILTER_CFG table=filter:112 family=2 entries=58 op=nft_register_chain pid=4083 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:14.110186 sshd[4057]: Accepted publickey for core from 10.0.0.1 port 50568 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:14.109000 audit[4057]: USER_ACCT pid=4057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:14.110000 audit[4057]: CRED_ACQ pid=4057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:14.110000 audit[4057]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1b337a0 a2=3 a3=1 items=0 ppid=1 pid=4057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.110000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:14.107000 audit[4083]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30584 a0=3 a1=ffffeef1de70 a2=0 a3=ffffb7d6ffa8 items=0 ppid=3720 pid=4083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.107000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:14.112451 sshd[4057]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:14.120709 systemd[1]: Started cri-containerd-55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf.scope. Nov 1 00:16:14.125640 systemd[1]: Started session-9.scope. Nov 1 00:16:14.126575 systemd-logind[1206]: New session 9 of user core. Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.128000 audit: BPF prog-id=173 op=LOAD Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4022 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333539393430646562356238663166653432646631383039653337 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4022 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333539393430646562356238663166653432646631383039653337 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit: BPF prog-id=174 op=LOAD Nov 1 00:16:14.130000 audit[4077]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4022 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333539393430646562356238663166653432646631383039653337 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit: BPF prog-id=175 op=LOAD Nov 1 00:16:14.130000 audit[4077]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4022 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333539393430646562356238663166653432646631383039653337 Nov 1 00:16:14.130000 audit: BPF prog-id=175 op=UNLOAD Nov 1 00:16:14.130000 audit: BPF prog-id=174 op=UNLOAD Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { perfmon } for pid=4077 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit[4077]: AVC avc: denied { bpf } for pid=4077 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.130000 audit: BPF prog-id=176 op=LOAD Nov 1 00:16:14.130000 audit[4077]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4022 pid=4077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333539393430646562356238663166653432646631383039653337 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.138000 audit: BPF prog-id=177 op=LOAD Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4094 pid=4106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535646238306463383132336363656336323732333833633238336130 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4094 pid=4106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535646238306463383132336363656336323732333833633238336130 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit: BPF prog-id=178 op=LOAD Nov 1 00:16:14.140000 audit[4106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4094 pid=4106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535646238306463383132336363656336323732333833633238336130 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit: BPF prog-id=179 op=LOAD Nov 1 00:16:14.140000 audit[4106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4094 pid=4106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535646238306463383132336363656336323732333833633238336130 Nov 1 00:16:14.140000 audit: BPF prog-id=179 op=UNLOAD Nov 1 00:16:14.140000 audit: BPF prog-id=178 op=UNLOAD Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { perfmon } for pid=4106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit[4106]: AVC avc: denied { bpf } for pid=4106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.140000 audit: BPF prog-id=180 op=LOAD Nov 1 00:16:14.140000 audit[4106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4094 pid=4106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535646238306463383132336363656336323732333833633238336130 Nov 1 00:16:14.142118 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:16:14.145000 audit[4057]: USER_START pid=4057 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:14.149000 audit[4128]: CRED_ACQ pid=4128 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:14.168944 systemd-networkd[1046]: cali30409352bb2: Link UP Nov 1 00:16:14.171193 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali30409352bb2: link becomes ready Nov 1 00:16:14.171713 env[1220]: time="2025-11-01T00:16:14.171327281Z" level=info msg="StartContainer for \"52359940deb5b8f1fe42df1809e37072e05e2188ebb1207af415e632e071844c\" returns successfully" Nov 1 00:16:14.171457 systemd-networkd[1046]: cali30409352bb2: Gained carrier Nov 1 00:16:14.179716 env[1220]: time="2025-11-01T00:16:14.179669257Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f475bc956-k282f,Uid:476f4117-f217-4ab0-8acb-437e73ee9d99,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf\"" Nov 1 00:16:14.181848 env[1220]: time="2025-11-01T00:16:14.181015951Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:13.903 [INFO][3962] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0 calico-kube-controllers-7f6b964fd9- calico-system 7b333081-da7b-416e-a1c3-ea55953cf8be 1025 0 2025-11-01 00:15:53 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7f6b964fd9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7f6b964fd9-74jpn eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali30409352bb2 [] [] }} ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Namespace="calico-system" Pod="calico-kube-controllers-7f6b964fd9-74jpn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:13.903 [INFO][3962] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Namespace="calico-system" Pod="calico-kube-controllers-7f6b964fd9-74jpn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:13.941 [INFO][3991] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" HandleID="k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:13.941 [INFO][3991] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" HandleID="k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400034b8a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7f6b964fd9-74jpn", "timestamp":"2025-11-01 00:16:13.94167012 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:13.941 [INFO][3991] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.056 [INFO][3991] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.056 [INFO][3991] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.128 [INFO][3991] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.133 [INFO][3991] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.140 [INFO][3991] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.142 [INFO][3991] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.148 [INFO][3991] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.148 [INFO][3991] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.150 [INFO][3991] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0 Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.156 [INFO][3991] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.163 [INFO][3991] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.164 [INFO][3991] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" host="localhost" Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.164 [INFO][3991] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:14.187005 env[1220]: 2025-11-01 00:16:14.164 [INFO][3991] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" HandleID="k8s-pod-network.9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:14.187644 env[1220]: 2025-11-01 00:16:14.167 [INFO][3962] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Namespace="calico-system" Pod="calico-kube-controllers-7f6b964fd9-74jpn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0", GenerateName:"calico-kube-controllers-7f6b964fd9-", Namespace:"calico-system", SelfLink:"", UID:"7b333081-da7b-416e-a1c3-ea55953cf8be", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7f6b964fd9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7f6b964fd9-74jpn", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali30409352bb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:14.187644 env[1220]: 2025-11-01 00:16:14.167 [INFO][3962] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Namespace="calico-system" Pod="calico-kube-controllers-7f6b964fd9-74jpn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:14.187644 env[1220]: 2025-11-01 00:16:14.167 [INFO][3962] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali30409352bb2 ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Namespace="calico-system" Pod="calico-kube-controllers-7f6b964fd9-74jpn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:14.187644 env[1220]: 2025-11-01 00:16:14.168 [INFO][3962] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Namespace="calico-system" Pod="calico-kube-controllers-7f6b964fd9-74jpn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:14.187644 env[1220]: 2025-11-01 00:16:14.174 [INFO][3962] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Namespace="calico-system" Pod="calico-kube-controllers-7f6b964fd9-74jpn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0", GenerateName:"calico-kube-controllers-7f6b964fd9-", Namespace:"calico-system", SelfLink:"", UID:"7b333081-da7b-416e-a1c3-ea55953cf8be", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7f6b964fd9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0", Pod:"calico-kube-controllers-7f6b964fd9-74jpn", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali30409352bb2", MAC:"66:8e:11:be:04:12", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:14.187644 env[1220]: 2025-11-01 00:16:14.183 [INFO][3962] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0" Namespace="calico-system" Pod="calico-kube-controllers-7f6b964fd9-74jpn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:14.199620 env[1220]: time="2025-11-01T00:16:14.199552616Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:16:14.199850 env[1220]: time="2025-11-01T00:16:14.199796106Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:16:14.199977 env[1220]: time="2025-11-01T00:16:14.199952432Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:16:14.200446 env[1220]: time="2025-11-01T00:16:14.200376449Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0 pid=4162 runtime=io.containerd.runc.v2 Nov 1 00:16:14.212357 systemd[1]: Started cri-containerd-9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0.scope. Nov 1 00:16:14.247000 audit[4105]: AVC avc: denied { getattr } for pid=4105 comm="coredns" path="cgroup:[4026532371]" dev="nsfs" ino=4026532371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c874,c948 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:16:14.247000 audit[4105]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056900 a2=400014c578 a3=0 items=0 ppid=4022 pid=4105 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c874,c948 key=(null) Nov 1 00:16:14.247000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.254000 audit: BPF prog-id=181 op=LOAD Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4162 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343130633461383132613035303839363732306237336632653439 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4162 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343130633461383132613035303839363732306237336632653439 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit: BPF prog-id=182 op=LOAD Nov 1 00:16:14.256000 audit[4177]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4162 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343130633461383132613035303839363732306237336632653439 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit: BPF prog-id=183 op=LOAD Nov 1 00:16:14.256000 audit[4177]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4162 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343130633461383132613035303839363732306237336632653439 Nov 1 00:16:14.256000 audit: BPF prog-id=183 op=UNLOAD Nov 1 00:16:14.256000 audit: BPF prog-id=182 op=UNLOAD Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:14.256000 audit: BPF prog-id=184 op=LOAD Nov 1 00:16:14.256000 audit[4177]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4162 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343130633461383132613035303839363732306237336632653439 Nov 1 00:16:14.259474 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:16:14.289661 env[1220]: time="2025-11-01T00:16:14.289616996Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7f6b964fd9-74jpn,Uid:7b333081-da7b-416e-a1c3-ea55953cf8be,Namespace:calico-system,Attempt:1,} returns sandbox id \"9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0\"" Nov 1 00:16:14.290000 audit[4207]: NETFILTER_CFG table=filter:113 family=2 entries=48 op=nft_register_chain pid=4207 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:14.290000 audit[4207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23140 a0=3 a1=ffffc3eac450 a2=0 a3=ffff9181bfa8 items=0 ppid=3720 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.290000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:14.345306 sshd[4057]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:14.345000 audit[4057]: USER_END pid=4057 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:14.345000 audit[4057]: CRED_DISP pid=4057 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:14.347942 systemd[1]: sshd@8-10.0.0.59:22-10.0.0.1:50568.service: Deactivated successfully. Nov 1 00:16:14.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.59:22-10.0.0.1:50568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:14.348946 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:16:14.349488 systemd-logind[1206]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:16:14.350160 systemd-logind[1206]: Removed session 9. Nov 1 00:16:14.400659 env[1220]: time="2025-11-01T00:16:14.400616897Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:14.407078 env[1220]: time="2025-11-01T00:16:14.407016874Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:16:14.407294 kubelet[1946]: E1101 00:16:14.407248 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:14.407396 kubelet[1946]: E1101 00:16:14.407303 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:14.407745 kubelet[1946]: E1101 00:16:14.407529 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2qb6l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-f475bc956-k282f_calico-apiserver(476f4117-f217-4ab0-8acb-437e73ee9d99): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:14.407948 env[1220]: time="2025-11-01T00:16:14.407892189Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:16:14.409054 kubelet[1946]: E1101 00:16:14.409013 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" podUID="476f4117-f217-4ab0-8acb-437e73ee9d99" Nov 1 00:16:14.471231 systemd-networkd[1046]: vxlan.calico: Gained IPv6LL Nov 1 00:16:14.620477 env[1220]: time="2025-11-01T00:16:14.620416051Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:14.621571 env[1220]: time="2025-11-01T00:16:14.621516775Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:16:14.622172 kubelet[1946]: E1101 00:16:14.621915 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:16:14.622172 kubelet[1946]: E1101 00:16:14.621970 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:16:14.622172 kubelet[1946]: E1101 00:16:14.622108 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5kxzc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7f6b964fd9-74jpn_calico-system(7b333081-da7b-416e-a1c3-ea55953cf8be): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:14.623287 kubelet[1946]: E1101 00:16:14.623250 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" podUID="7b333081-da7b-416e-a1c3-ea55953cf8be" Nov 1 00:16:14.815704 systemd[1]: run-netns-cni\x2d037470d7\x2d4a2c\x2d1c09\x2db1a6\x2ddfdf5fd48f5e.mount: Deactivated successfully. Nov 1 00:16:14.834876 kubelet[1946]: E1101 00:16:14.834843 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" podUID="476f4117-f217-4ab0-8acb-437e73ee9d99" Nov 1 00:16:14.836375 kubelet[1946]: E1101 00:16:14.836348 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:14.838903 kubelet[1946]: E1101 00:16:14.838872 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" podUID="7b333081-da7b-416e-a1c3-ea55953cf8be" Nov 1 00:16:14.857000 audit[4215]: NETFILTER_CFG table=filter:114 family=2 entries=20 op=nft_register_rule pid=4215 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:14.857000 audit[4215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe06b2340 a2=0 a3=1 items=0 ppid=2054 pid=4215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.857000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:14.865200 kubelet[1946]: I1101 00:16:14.865148 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-n7f7f" podStartSLOduration=37.865132687 podStartE2EDuration="37.865132687s" podCreationTimestamp="2025-11-01 00:15:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:16:14.865064204 +0000 UTC m=+45.261368460" watchObservedRunningTime="2025-11-01 00:16:14.865132687 +0000 UTC m=+45.261436943" Nov 1 00:16:14.865000 audit[4215]: NETFILTER_CFG table=nat:115 family=2 entries=14 op=nft_register_rule pid=4215 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:14.865000 audit[4215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffe06b2340 a2=0 a3=1 items=0 ppid=2054 pid=4215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.865000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:14.878000 audit[4217]: NETFILTER_CFG table=filter:116 family=2 entries=17 op=nft_register_rule pid=4217 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:14.878000 audit[4217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe32144b0 a2=0 a3=1 items=0 ppid=2054 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.878000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:14.885000 audit[4217]: NETFILTER_CFG table=nat:117 family=2 entries=35 op=nft_register_chain pid=4217 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:14.885000 audit[4217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffe32144b0 a2=0 a3=1 items=0 ppid=2054 pid=4217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:14.885000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:15.431253 systemd-networkd[1046]: cali093c6d9e23f: Gained IPv6LL Nov 1 00:16:15.559149 systemd-networkd[1046]: calib0cfff89b87: Gained IPv6LL Nov 1 00:16:15.702646 env[1220]: time="2025-11-01T00:16:15.702505941Z" level=info msg="StopPodSandbox for \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\"" Nov 1 00:16:15.703101 env[1220]: time="2025-11-01T00:16:15.703076724Z" level=info msg="StopPodSandbox for \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\"" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.754 [INFO][4241] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.754 [INFO][4241] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" iface="eth0" netns="/var/run/netns/cni-559ca4a1-d31a-3c7d-4870-6a11169b1e30" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.754 [INFO][4241] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" iface="eth0" netns="/var/run/netns/cni-559ca4a1-d31a-3c7d-4870-6a11169b1e30" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.754 [INFO][4241] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" iface="eth0" netns="/var/run/netns/cni-559ca4a1-d31a-3c7d-4870-6a11169b1e30" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.754 [INFO][4241] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.754 [INFO][4241] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.782 [INFO][4255] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.782 [INFO][4255] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.782 [INFO][4255] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.790 [WARNING][4255] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.790 [INFO][4255] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.793 [INFO][4255] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:15.801214 env[1220]: 2025-11-01 00:16:15.794 [INFO][4241] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:15.802276 env[1220]: time="2025-11-01T00:16:15.802238430Z" level=info msg="TearDown network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\" successfully" Nov 1 00:16:15.802502 env[1220]: time="2025-11-01T00:16:15.802373555Z" level=info msg="StopPodSandbox for \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\" returns successfully" Nov 1 00:16:15.804370 systemd[1]: run-netns-cni\x2d559ca4a1\x2dd31a\x2d3c7d\x2d4870\x2d6a11169b1e30.mount: Deactivated successfully. Nov 1 00:16:15.806242 env[1220]: time="2025-11-01T00:16:15.806208907Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f475bc956-2vmq8,Uid:e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.755 [INFO][4240] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.755 [INFO][4240] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" iface="eth0" netns="/var/run/netns/cni-9556fa4b-43f5-64f3-6efa-9db778f6bc6d" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.756 [INFO][4240] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" iface="eth0" netns="/var/run/netns/cni-9556fa4b-43f5-64f3-6efa-9db778f6bc6d" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.756 [INFO][4240] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" iface="eth0" netns="/var/run/netns/cni-9556fa4b-43f5-64f3-6efa-9db778f6bc6d" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.756 [INFO][4240] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.756 [INFO][4240] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.782 [INFO][4258] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.782 [INFO][4258] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.793 [INFO][4258] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.801 [WARNING][4258] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.801 [INFO][4258] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.804 [INFO][4258] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:15.808882 env[1220]: 2025-11-01 00:16:15.806 [INFO][4240] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:15.811107 env[1220]: time="2025-11-01T00:16:15.811075058Z" level=info msg="TearDown network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\" successfully" Nov 1 00:16:15.811107 env[1220]: time="2025-11-01T00:16:15.811106659Z" level=info msg="StopPodSandbox for \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\" returns successfully" Nov 1 00:16:15.811415 kubelet[1946]: E1101 00:16:15.811391 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:15.811924 systemd[1]: run-netns-cni\x2d9556fa4b\x2d43f5\x2d64f3\x2d6efa\x2d9db778f6bc6d.mount: Deactivated successfully. Nov 1 00:16:15.813159 env[1220]: time="2025-11-01T00:16:15.811969453Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-4zrdh,Uid:3a9efac0-8144-4907-9db7-0ad61385c717,Namespace:kube-system,Attempt:1,}" Nov 1 00:16:15.815177 systemd-networkd[1046]: cali30409352bb2: Gained IPv6LL Nov 1 00:16:15.840464 kubelet[1946]: E1101 00:16:15.840433 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:15.848475 kubelet[1946]: E1101 00:16:15.844135 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" podUID="476f4117-f217-4ab0-8acb-437e73ee9d99" Nov 1 00:16:15.848475 kubelet[1946]: E1101 00:16:15.844203 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" podUID="7b333081-da7b-416e-a1c3-ea55953cf8be" Nov 1 00:16:15.967902 systemd-networkd[1046]: cali1a23c9a76dd: Link UP Nov 1 00:16:15.971139 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:16:15.971337 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1a23c9a76dd: link becomes ready Nov 1 00:16:15.971249 systemd-networkd[1046]: cali1a23c9a76dd: Gained carrier Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.877 [INFO][4272] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0 calico-apiserver-f475bc956- calico-apiserver e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f 1069 0 2025-11-01 00:15:45 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:f475bc956 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-f475bc956-2vmq8 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1a23c9a76dd [] [] }} ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-2vmq8" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--2vmq8-" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.877 [INFO][4272] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-2vmq8" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.906 [INFO][4302] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" HandleID="k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.907 [INFO][4302] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" HandleID="k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137700), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-f475bc956-2vmq8", "timestamp":"2025-11-01 00:16:15.906950835 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.907 [INFO][4302] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.907 [INFO][4302] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.907 [INFO][4302] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.919 [INFO][4302] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.923 [INFO][4302] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.928 [INFO][4302] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.930 [INFO][4302] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.932 [INFO][4302] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.932 [INFO][4302] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.934 [INFO][4302] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.944 [INFO][4302] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.962 [INFO][4302] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.962 [INFO][4302] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" host="localhost" Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.962 [INFO][4302] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:15.981962 env[1220]: 2025-11-01 00:16:15.962 [INFO][4302] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" HandleID="k8s-pod-network.9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.982592 env[1220]: 2025-11-01 00:16:15.964 [INFO][4272] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-2vmq8" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0", GenerateName:"calico-apiserver-f475bc956-", Namespace:"calico-apiserver", SelfLink:"", UID:"e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f", ResourceVersion:"1069", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f475bc956", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-f475bc956-2vmq8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1a23c9a76dd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:15.982592 env[1220]: 2025-11-01 00:16:15.964 [INFO][4272] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-2vmq8" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.982592 env[1220]: 2025-11-01 00:16:15.964 [INFO][4272] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1a23c9a76dd ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-2vmq8" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.982592 env[1220]: 2025-11-01 00:16:15.968 [INFO][4272] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-2vmq8" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.982592 env[1220]: 2025-11-01 00:16:15.969 [INFO][4272] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-2vmq8" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0", GenerateName:"calico-apiserver-f475bc956-", Namespace:"calico-apiserver", SelfLink:"", UID:"e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f", ResourceVersion:"1069", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f475bc956", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb", Pod:"calico-apiserver-f475bc956-2vmq8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1a23c9a76dd", MAC:"12:c1:93:75:c1:6d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:15.982592 env[1220]: 2025-11-01 00:16:15.977 [INFO][4272] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb" Namespace="calico-apiserver" Pod="calico-apiserver-f475bc956-2vmq8" WorkloadEndpoint="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:15.990000 audit[4326]: NETFILTER_CFG table=filter:118 family=2 entries=53 op=nft_register_chain pid=4326 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:15.990000 audit[4326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26640 a0=3 a1=ffffc9dfb4f0 a2=0 a3=ffff92ce5fa8 items=0 ppid=3720 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:15.990000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:15.993929 env[1220]: time="2025-11-01T00:16:15.993873099Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:16:15.994105 env[1220]: time="2025-11-01T00:16:15.993945662Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:16:15.994105 env[1220]: time="2025-11-01T00:16:15.993972183Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:16:15.994171 env[1220]: time="2025-11-01T00:16:15.994147230Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb pid=4334 runtime=io.containerd.runc.v2 Nov 1 00:16:16.005274 systemd[1]: Started cri-containerd-9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb.scope. Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit: BPF prog-id=185 op=LOAD Nov 1 00:16:16.023000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[4343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4334 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313562396135616232623637613736393863333263623635636435 Nov 1 00:16:16.023000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.023000 audit[4343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4334 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313562396135616232623637613736393863333263623635636435 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit: BPF prog-id=186 op=LOAD Nov 1 00:16:16.024000 audit[4343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4334 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313562396135616232623637613736393863333263623635636435 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit: BPF prog-id=187 op=LOAD Nov 1 00:16:16.024000 audit[4343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4334 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313562396135616232623637613736393863333263623635636435 Nov 1 00:16:16.024000 audit: BPF prog-id=187 op=UNLOAD Nov 1 00:16:16.024000 audit: BPF prog-id=186 op=UNLOAD Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { perfmon } for pid=4343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit[4343]: AVC avc: denied { bpf } for pid=4343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.024000 audit: BPF prog-id=188 op=LOAD Nov 1 00:16:16.024000 audit[4343]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4334 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313562396135616232623637613736393863333263623635636435 Nov 1 00:16:16.026529 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:16:16.048866 env[1220]: time="2025-11-01T00:16:16.048819948Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-f475bc956-2vmq8,Uid:e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb\"" Nov 1 00:16:16.050352 env[1220]: time="2025-11-01T00:16:16.050314325Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:16:16.056611 systemd-networkd[1046]: calic302a59cf27: Link UP Nov 1 00:16:16.058212 systemd-networkd[1046]: calic302a59cf27: Gained carrier Nov 1 00:16:16.059017 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic302a59cf27: link becomes ready Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:15.895 [INFO][4285] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0 coredns-668d6bf9bc- kube-system 3a9efac0-8144-4907-9db7-0ad61385c717 1070 0 2025-11-01 00:15:37 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-4zrdh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic302a59cf27 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Namespace="kube-system" Pod="coredns-668d6bf9bc-4zrdh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4zrdh-" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:15.896 [INFO][4285] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Namespace="kube-system" Pod="coredns-668d6bf9bc-4zrdh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:15.926 [INFO][4309] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" HandleID="k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:15.926 [INFO][4309] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" HandleID="k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004de20), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-4zrdh", "timestamp":"2025-11-01 00:16:15.926202593 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:15.926 [INFO][4309] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:15.962 [INFO][4309] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:15.962 [INFO][4309] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.020 [INFO][4309] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.025 [INFO][4309] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.033 [INFO][4309] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.035 [INFO][4309] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.037 [INFO][4309] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.037 [INFO][4309] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.039 [INFO][4309] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.043 [INFO][4309] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.049 [INFO][4309] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.050 [INFO][4309] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" host="localhost" Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.050 [INFO][4309] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:16.076119 env[1220]: 2025-11-01 00:16:16.050 [INFO][4309] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" HandleID="k8s-pod-network.a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:16.076672 env[1220]: 2025-11-01 00:16:16.053 [INFO][4285] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Namespace="kube-system" Pod="coredns-668d6bf9bc-4zrdh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3a9efac0-8144-4907-9db7-0ad61385c717", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-4zrdh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic302a59cf27", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:16.076672 env[1220]: 2025-11-01 00:16:16.053 [INFO][4285] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Namespace="kube-system" Pod="coredns-668d6bf9bc-4zrdh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:16.076672 env[1220]: 2025-11-01 00:16:16.053 [INFO][4285] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic302a59cf27 ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Namespace="kube-system" Pod="coredns-668d6bf9bc-4zrdh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:16.076672 env[1220]: 2025-11-01 00:16:16.058 [INFO][4285] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Namespace="kube-system" Pod="coredns-668d6bf9bc-4zrdh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:16.076672 env[1220]: 2025-11-01 00:16:16.060 [INFO][4285] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Namespace="kube-system" Pod="coredns-668d6bf9bc-4zrdh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3a9efac0-8144-4907-9db7-0ad61385c717", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd", Pod:"coredns-668d6bf9bc-4zrdh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic302a59cf27", MAC:"ca:f7:95:f3:c5:3b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:16.076672 env[1220]: 2025-11-01 00:16:16.073 [INFO][4285] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd" Namespace="kube-system" Pod="coredns-668d6bf9bc-4zrdh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:16.082000 audit[4378]: NETFILTER_CFG table=filter:119 family=2 entries=58 op=nft_register_chain pid=4378 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:16.082000 audit[4378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26760 a0=3 a1=ffffe3a36010 a2=0 a3=ffff84ce3fa8 items=0 ppid=3720 pid=4378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.082000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:16.085275 env[1220]: time="2025-11-01T00:16:16.085203793Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:16:16.085275 env[1220]: time="2025-11-01T00:16:16.085251235Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:16:16.085430 env[1220]: time="2025-11-01T00:16:16.085395761Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:16:16.085771 env[1220]: time="2025-11-01T00:16:16.085730174Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd pid=4384 runtime=io.containerd.runc.v2 Nov 1 00:16:16.096923 systemd[1]: Started cri-containerd-a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd.scope. Nov 1 00:16:16.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit: BPF prog-id=189 op=LOAD Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4384 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136353738613031663766626234333562376466613062636631316233 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4384 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136353738613031663766626234333562376466613062636631316233 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit: BPF prog-id=190 op=LOAD Nov 1 00:16:16.113000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4384 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136353738613031663766626234333562376466613062636631316233 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit: BPF prog-id=191 op=LOAD Nov 1 00:16:16.113000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4384 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136353738613031663766626234333562376466613062636631316233 Nov 1 00:16:16.113000 audit: BPF prog-id=191 op=UNLOAD Nov 1 00:16:16.113000 audit: BPF prog-id=190 op=UNLOAD Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.113000 audit: BPF prog-id=192 op=LOAD Nov 1 00:16:16.113000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4384 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136353738613031663766626234333562376466613062636631316233 Nov 1 00:16:16.116156 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:16:16.131665 env[1220]: time="2025-11-01T00:16:16.131608547Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-4zrdh,Uid:3a9efac0-8144-4907-9db7-0ad61385c717,Namespace:kube-system,Attempt:1,} returns sandbox id \"a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd\"" Nov 1 00:16:16.132339 kubelet[1946]: E1101 00:16:16.132317 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:16.136021 env[1220]: time="2025-11-01T00:16:16.135970595Z" level=info msg="CreateContainer within sandbox \"a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:16:16.148354 env[1220]: time="2025-11-01T00:16:16.148300552Z" level=info msg="CreateContainer within sandbox \"a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"03b6df75eeecfd01f6a39a88768794e4c4ba4fd1f6fecb6dab2007b8ffa0ea7d\"" Nov 1 00:16:16.148817 env[1220]: time="2025-11-01T00:16:16.148758289Z" level=info msg="StartContainer for \"03b6df75eeecfd01f6a39a88768794e4c4ba4fd1f6fecb6dab2007b8ffa0ea7d\"" Nov 1 00:16:16.163630 systemd[1]: Started cri-containerd-03b6df75eeecfd01f6a39a88768794e4c4ba4fd1f6fecb6dab2007b8ffa0ea7d.scope. Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit: BPF prog-id=193 op=LOAD Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4384 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033623664663735656565636664303166366133396138383736383739 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4384 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033623664663735656565636664303166366133396138383736383739 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit: BPF prog-id=194 op=LOAD Nov 1 00:16:16.186000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4384 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033623664663735656565636664303166366133396138383736383739 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit: BPF prog-id=195 op=LOAD Nov 1 00:16:16.186000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4384 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033623664663735656565636664303166366133396138383736383739 Nov 1 00:16:16.186000 audit: BPF prog-id=195 op=UNLOAD Nov 1 00:16:16.186000 audit: BPF prog-id=194 op=UNLOAD Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.186000 audit: BPF prog-id=196 op=LOAD Nov 1 00:16:16.186000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4384 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033623664663735656565636664303166366133396138383736383739 Nov 1 00:16:16.231542 env[1220]: time="2025-11-01T00:16:16.231371882Z" level=info msg="StartContainer for \"03b6df75eeecfd01f6a39a88768794e4c4ba4fd1f6fecb6dab2007b8ffa0ea7d\" returns successfully" Nov 1 00:16:16.247000 audit[4435]: AVC avc: denied { getattr } for pid=4435 comm="coredns" path="cgroup:[4026532213]" dev="nsfs" ino=4026532213 scontext=system_u:system_r:svirt_lxc_net_t:s0:c490,c1000 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:16:16.247000 audit[4435]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000154930 a2=4000156578 a3=0 items=0 ppid=4384 pid=4435 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c490,c1000 key=(null) Nov 1 00:16:16.247000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:16:16.265341 env[1220]: time="2025-11-01T00:16:16.260459806Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:16.265341 env[1220]: time="2025-11-01T00:16:16.261496566Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:16:16.265606 kubelet[1946]: E1101 00:16:16.261718 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:16.265606 kubelet[1946]: E1101 00:16:16.261771 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:16.265606 kubelet[1946]: E1101 00:16:16.261885 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jnqqf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-f475bc956-2vmq8_calico-apiserver(e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:16.265606 kubelet[1946]: E1101 00:16:16.263277 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" podUID="e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f" Nov 1 00:16:16.702432 env[1220]: time="2025-11-01T00:16:16.702377802Z" level=info msg="StopPodSandbox for \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\"" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.747 [INFO][4467] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.747 [INFO][4467] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" iface="eth0" netns="/var/run/netns/cni-2b4f5c8b-95ea-12c8-5df0-dff62194bb05" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.747 [INFO][4467] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" iface="eth0" netns="/var/run/netns/cni-2b4f5c8b-95ea-12c8-5df0-dff62194bb05" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.747 [INFO][4467] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" iface="eth0" netns="/var/run/netns/cni-2b4f5c8b-95ea-12c8-5df0-dff62194bb05" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.747 [INFO][4467] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.747 [INFO][4467] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.764 [INFO][4476] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.765 [INFO][4476] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.765 [INFO][4476] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.773 [WARNING][4476] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.773 [INFO][4476] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.774 [INFO][4476] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:16.778578 env[1220]: 2025-11-01 00:16:16.776 [INFO][4467] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:16.779206 env[1220]: time="2025-11-01T00:16:16.778712032Z" level=info msg="TearDown network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\" successfully" Nov 1 00:16:16.779206 env[1220]: time="2025-11-01T00:16:16.778741193Z" level=info msg="StopPodSandbox for \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\" returns successfully" Nov 1 00:16:16.779686 env[1220]: time="2025-11-01T00:16:16.779656788Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zbrhh,Uid:81bfb214-06ca-4024-b7df-4955466b6e05,Namespace:calico-system,Attempt:1,}" Nov 1 00:16:16.827154 systemd[1]: run-netns-cni\x2d2b4f5c8b\x2d95ea\x2d12c8\x2d5df0\x2ddff62194bb05.mount: Deactivated successfully. Nov 1 00:16:16.845913 kubelet[1946]: E1101 00:16:16.845870 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" podUID="e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f" Nov 1 00:16:16.850891 kubelet[1946]: E1101 00:16:16.850532 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:16.850891 kubelet[1946]: E1101 00:16:16.850601 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:16.871031 kubelet[1946]: I1101 00:16:16.870674 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-4zrdh" podStartSLOduration=39.870656785 podStartE2EDuration="39.870656785s" podCreationTimestamp="2025-11-01 00:15:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:16:16.870220368 +0000 UTC m=+47.266524624" watchObservedRunningTime="2025-11-01 00:16:16.870656785 +0000 UTC m=+47.266961041" Nov 1 00:16:16.876000 audit[4507]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=4507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:16.876000 audit[4507]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff55e3140 a2=0 a3=1 items=0 ppid=2054 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:16.882000 audit[4507]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=4507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:16.882000 audit[4507]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff55e3140 a2=0 a3=1 items=0 ppid=2054 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.882000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:16.894000 audit[4510]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=4510 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:16.894000 audit[4510]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff9710040 a2=0 a3=1 items=0 ppid=2054 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.894000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:16.905000 audit[4510]: NETFILTER_CFG table=nat:123 family=2 entries=56 op=nft_register_chain pid=4510 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:16.905000 audit[4510]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff9710040 a2=0 a3=1 items=0 ppid=2054 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.905000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:16.913449 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3cb1e2f5c49: link becomes ready Nov 1 00:16:16.911573 systemd-networkd[1046]: cali3cb1e2f5c49: Link UP Nov 1 00:16:16.911763 systemd-networkd[1046]: cali3cb1e2f5c49: Gained carrier Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.831 [INFO][4484] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--zbrhh-eth0 csi-node-driver- calico-system 81bfb214-06ca-4024-b7df-4955466b6e05 1102 0 2025-11-01 00:15:53 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-zbrhh eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali3cb1e2f5c49 [] [] }} ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Namespace="calico-system" Pod="csi-node-driver-zbrhh" WorkloadEndpoint="localhost-k8s-csi--node--driver--zbrhh-" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.832 [INFO][4484] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Namespace="calico-system" Pod="csi-node-driver-zbrhh" WorkloadEndpoint="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.870 [INFO][4499] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" HandleID="k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.870 [INFO][4499] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" HandleID="k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002b9590), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-zbrhh", "timestamp":"2025-11-01 00:16:16.870753268 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.871 [INFO][4499] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.871 [INFO][4499] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.871 [INFO][4499] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.880 [INFO][4499] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.886 [INFO][4499] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.890 [INFO][4499] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.892 [INFO][4499] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.895 [INFO][4499] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.895 [INFO][4499] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.896 [INFO][4499] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5 Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.899 [INFO][4499] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.906 [INFO][4499] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.906 [INFO][4499] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" host="localhost" Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.906 [INFO][4499] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:16.924714 env[1220]: 2025-11-01 00:16:16.906 [INFO][4499] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" HandleID="k8s-pod-network.2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.925282 env[1220]: 2025-11-01 00:16:16.908 [INFO][4484] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Namespace="calico-system" Pod="csi-node-driver-zbrhh" WorkloadEndpoint="localhost-k8s-csi--node--driver--zbrhh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zbrhh-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"81bfb214-06ca-4024-b7df-4955466b6e05", ResourceVersion:"1102", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-zbrhh", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali3cb1e2f5c49", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:16.925282 env[1220]: 2025-11-01 00:16:16.909 [INFO][4484] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Namespace="calico-system" Pod="csi-node-driver-zbrhh" WorkloadEndpoint="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.925282 env[1220]: 2025-11-01 00:16:16.909 [INFO][4484] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3cb1e2f5c49 ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Namespace="calico-system" Pod="csi-node-driver-zbrhh" WorkloadEndpoint="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.925282 env[1220]: 2025-11-01 00:16:16.911 [INFO][4484] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Namespace="calico-system" Pod="csi-node-driver-zbrhh" WorkloadEndpoint="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.925282 env[1220]: 2025-11-01 00:16:16.914 [INFO][4484] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Namespace="calico-system" Pod="csi-node-driver-zbrhh" WorkloadEndpoint="localhost-k8s-csi--node--driver--zbrhh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zbrhh-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"81bfb214-06ca-4024-b7df-4955466b6e05", ResourceVersion:"1102", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5", Pod:"csi-node-driver-zbrhh", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali3cb1e2f5c49", MAC:"e2:a9:c8:2b:4a:31", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:16.925282 env[1220]: 2025-11-01 00:16:16.921 [INFO][4484] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5" Namespace="calico-system" Pod="csi-node-driver-zbrhh" WorkloadEndpoint="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:16.935000 audit[4521]: NETFILTER_CFG table=filter:124 family=2 entries=62 op=nft_register_chain pid=4521 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:16:16.935000 audit[4521]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28352 a0=3 a1=ffffd5abace0 a2=0 a3=ffff828bffa8 items=0 ppid=3720 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.935000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:16:16.940307 env[1220]: time="2025-11-01T00:16:16.940247514Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:16:16.940402 env[1220]: time="2025-11-01T00:16:16.940321557Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:16:16.940402 env[1220]: time="2025-11-01T00:16:16.940347358Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:16:16.940653 env[1220]: time="2025-11-01T00:16:16.940598247Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5 pid=4529 runtime=io.containerd.runc.v2 Nov 1 00:16:16.952551 systemd[1]: run-containerd-runc-k8s.io-2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5-runc.25H4Mp.mount: Deactivated successfully. Nov 1 00:16:16.956594 systemd[1]: Started cri-containerd-2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5.scope. Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.974453 kernel: kauditd_printk_skb: 1045 callbacks suppressed Nov 1 00:16:16.974515 kernel: audit: type=1400 audit(1761956176.969:1323): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.974552 kernel: audit: type=1400 audit(1761956176.969:1324): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.979595 kernel: audit: type=1400 audit(1761956176.969:1325): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.982645 kernel: audit: type=1400 audit(1761956176.969:1326): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.983407 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.986263 kernel: audit: type=1400 audit(1761956176.969:1327): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.989681 kernel: audit: type=1400 audit(1761956176.969:1328): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.992529 kernel: audit: type=1400 audit(1761956176.969:1329): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.995291 kernel: audit: type=1400 audit(1761956176.969:1330): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.997412 env[1220]: time="2025-11-01T00:16:16.995889744Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zbrhh,Uid:81bfb214-06ca-4024-b7df-4955466b6e05,Namespace:calico-system,Attempt:1,} returns sandbox id \"2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5\"" Nov 1 00:16:16.998887 kernel: audit: type=1400 audit(1761956176.969:1331): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.999608 env[1220]: time="2025-11-01T00:16:16.999577766Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:16:16.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:17.003753 kernel: audit: type=1400 audit(1761956176.970:1332): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.970000 audit: BPF prog-id=197 op=LOAD Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4529 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262653836636234656465356662353839386363333937346534643231 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4529 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262653836636234656465356662353839386363333937346534643231 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.971000 audit: BPF prog-id=198 op=LOAD Nov 1 00:16:16.971000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4529 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262653836636234656465356662353839386363333937346534643231 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.973000 audit: BPF prog-id=199 op=LOAD Nov 1 00:16:16.973000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4529 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262653836636234656465356662353839386363333937346534643231 Nov 1 00:16:16.976000 audit: BPF prog-id=199 op=UNLOAD Nov 1 00:16:16.976000 audit: BPF prog-id=198 op=UNLOAD Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { perfmon } for pid=4539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit[4539]: AVC avc: denied { bpf } for pid=4539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:16.976000 audit: BPF prog-id=200 op=LOAD Nov 1 00:16:16.976000 audit[4539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4529 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:16.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262653836636234656465356662353839386363333937346534643231 Nov 1 00:16:17.207678 env[1220]: time="2025-11-01T00:16:17.207515096Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:17.209410 env[1220]: time="2025-11-01T00:16:17.209291643Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:16:17.209631 kubelet[1946]: E1101 00:16:17.209485 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:16:17.209631 kubelet[1946]: E1101 00:16:17.209526 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:16:17.209799 kubelet[1946]: E1101 00:16:17.209637 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kpp67,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-zbrhh_calico-system(81bfb214-06ca-4024-b7df-4955466b6e05): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:17.211699 env[1220]: time="2025-11-01T00:16:17.211653933Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:16:17.401506 env[1220]: time="2025-11-01T00:16:17.401436133Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:17.402603 env[1220]: time="2025-11-01T00:16:17.402549815Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:16:17.403060 kubelet[1946]: E1101 00:16:17.402957 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:16:17.403145 kubelet[1946]: E1101 00:16:17.403076 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:16:17.403274 kubelet[1946]: E1101 00:16:17.403236 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kpp67,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-zbrhh_calico-system(81bfb214-06ca-4024-b7df-4955466b6e05): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:17.405352 kubelet[1946]: E1101 00:16:17.405297 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:16:17.607133 systemd-networkd[1046]: cali1a23c9a76dd: Gained IPv6LL Nov 1 00:16:17.854080 kubelet[1946]: E1101 00:16:17.854046 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:17.854534 kubelet[1946]: E1101 00:16:17.854434 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" podUID="e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f" Nov 1 00:16:17.854849 kubelet[1946]: E1101 00:16:17.854809 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:16:18.055115 systemd-networkd[1046]: calic302a59cf27: Gained IPv6LL Nov 1 00:16:18.119104 systemd-networkd[1046]: cali3cb1e2f5c49: Gained IPv6LL Nov 1 00:16:18.855275 kubelet[1946]: E1101 00:16:18.855243 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:18.856187 kubelet[1946]: E1101 00:16:18.856154 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:16:19.350359 systemd[1]: Started sshd@9-10.0.0.59:22-10.0.0.1:51394.service. Nov 1 00:16:19.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.59:22-10.0.0.1:51394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:19.388000 audit[4571]: USER_ACCT pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.390043 sshd[4571]: Accepted publickey for core from 10.0.0.1 port 51394 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:19.390000 audit[4571]: CRED_ACQ pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.390000 audit[4571]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe239f530 a2=3 a3=1 items=0 ppid=1 pid=4571 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:19.390000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:19.391873 sshd[4571]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:19.395239 systemd-logind[1206]: New session 10 of user core. Nov 1 00:16:19.396139 systemd[1]: Started session-10.scope. Nov 1 00:16:19.399000 audit[4571]: USER_START pid=4571 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.400000 audit[4573]: CRED_ACQ pid=4573 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.537439 sshd[4571]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:19.538000 audit[4571]: USER_END pid=4571 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.538000 audit[4571]: CRED_DISP pid=4571 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.541685 systemd[1]: Started sshd@10-10.0.0.59:22-10.0.0.1:51400.service. Nov 1 00:16:19.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.59:22-10.0.0.1:51400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:19.542281 systemd[1]: sshd@9-10.0.0.59:22-10.0.0.1:51394.service: Deactivated successfully. Nov 1 00:16:19.543029 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:16:19.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.59:22-10.0.0.1:51394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:19.543829 systemd-logind[1206]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:16:19.544796 systemd-logind[1206]: Removed session 10. Nov 1 00:16:19.575000 audit[4584]: USER_ACCT pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.577139 sshd[4584]: Accepted publickey for core from 10.0.0.1 port 51400 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:19.577000 audit[4584]: CRED_ACQ pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.577000 audit[4584]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6ea36b0 a2=3 a3=1 items=0 ppid=1 pid=4584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:19.577000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:19.578637 sshd[4584]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:19.582519 systemd-logind[1206]: New session 11 of user core. Nov 1 00:16:19.583355 systemd[1]: Started session-11.scope. Nov 1 00:16:19.586000 audit[4584]: USER_START pid=4584 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.588000 audit[4587]: CRED_ACQ pid=4587 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.753597 sshd[4584]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:19.753000 audit[4584]: USER_END pid=4584 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.753000 audit[4584]: CRED_DISP pid=4584 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.756482 systemd[1]: Started sshd@11-10.0.0.59:22-10.0.0.1:51408.service. Nov 1 00:16:19.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.59:22-10.0.0.1:51408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:19.757014 systemd[1]: sshd@10-10.0.0.59:22-10.0.0.1:51400.service: Deactivated successfully. Nov 1 00:16:19.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.59:22-10.0.0.1:51400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:19.760624 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:16:19.761234 systemd-logind[1206]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:16:19.765136 systemd-logind[1206]: Removed session 11. Nov 1 00:16:19.795000 audit[4596]: USER_ACCT pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.796222 sshd[4596]: Accepted publickey for core from 10.0.0.1 port 51408 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:19.796000 audit[4596]: CRED_ACQ pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.796000 audit[4596]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd83d8e00 a2=3 a3=1 items=0 ppid=1 pid=4596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:19.796000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:19.797405 sshd[4596]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:19.800573 systemd-logind[1206]: New session 12 of user core. Nov 1 00:16:19.801407 systemd[1]: Started session-12.scope. Nov 1 00:16:19.803000 audit[4596]: USER_START pid=4596 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.804000 audit[4599]: CRED_ACQ pid=4599 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.944383 sshd[4596]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:19.945000 audit[4596]: USER_END pid=4596 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.945000 audit[4596]: CRED_DISP pid=4596 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:19.949823 systemd[1]: sshd@11-10.0.0.59:22-10.0.0.1:51408.service: Deactivated successfully. Nov 1 00:16:19.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.59:22-10.0.0.1:51408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:19.950557 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:16:19.951070 systemd-logind[1206]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:16:19.951852 systemd-logind[1206]: Removed session 12. Nov 1 00:16:23.704534 env[1220]: time="2025-11-01T00:16:23.704494694Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:16:23.926654 env[1220]: time="2025-11-01T00:16:23.926577168Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:23.933637 env[1220]: time="2025-11-01T00:16:23.933571129Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:16:23.933814 kubelet[1946]: E1101 00:16:23.933775 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:16:23.934115 kubelet[1946]: E1101 00:16:23.933826 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:16:23.934115 kubelet[1946]: E1101 00:16:23.933934 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:d95660f46ada42f9a137b4b31db0d45a,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-drpgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-578679bc68-ccw69_calico-system(8d91f72f-9342-481f-af2b-25b3e30c46e0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:23.935751 env[1220]: time="2025-11-01T00:16:23.935711363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:16:24.149477 env[1220]: time="2025-11-01T00:16:24.149432521Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:24.150385 env[1220]: time="2025-11-01T00:16:24.150339552Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:16:24.150701 kubelet[1946]: E1101 00:16:24.150652 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:16:24.150781 kubelet[1946]: E1101 00:16:24.150713 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:16:24.150867 kubelet[1946]: E1101 00:16:24.150830 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-drpgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-578679bc68-ccw69_calico-system(8d91f72f-9342-481f-af2b-25b3e30c46e0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:24.152101 kubelet[1946]: E1101 00:16:24.152063 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-578679bc68-ccw69" podUID="8d91f72f-9342-481f-af2b-25b3e30c46e0" Nov 1 00:16:24.948827 systemd[1]: Started sshd@12-10.0.0.59:22-10.0.0.1:51410.service. Nov 1 00:16:24.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.59:22-10.0.0.1:51410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:24.952694 kernel: kauditd_printk_skb: 80 callbacks suppressed Nov 1 00:16:24.952795 kernel: audit: type=1130 audit(1761956184.947:1368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.59:22-10.0.0.1:51410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:24.987000 audit[4623]: USER_ACCT pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:24.988323 sshd[4623]: Accepted publickey for core from 10.0.0.1 port 51410 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:24.989839 sshd[4623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:24.987000 audit[4623]: CRED_ACQ pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:24.993446 systemd-logind[1206]: New session 13 of user core. Nov 1 00:16:24.993831 systemd[1]: Started session-13.scope. Nov 1 00:16:24.994855 kernel: audit: type=1101 audit(1761956184.987:1369): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:24.994907 kernel: audit: type=1103 audit(1761956184.987:1370): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:24.994931 kernel: audit: type=1006 audit(1761956184.987:1371): pid=4623 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Nov 1 00:16:24.987000 audit[4623]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe45c6ec0 a2=3 a3=1 items=0 ppid=1 pid=4623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:25.000332 kernel: audit: type=1300 audit(1761956184.987:1371): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe45c6ec0 a2=3 a3=1 items=0 ppid=1 pid=4623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:24.987000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:25.001515 kernel: audit: type=1327 audit(1761956184.987:1371): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:25.001594 kernel: audit: type=1105 audit(1761956184.995:1372): pid=4623 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:24.995000 audit[4623]: USER_START pid=4623 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:24.995000 audit[4625]: CRED_ACQ pid=4625 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:25.008279 kernel: audit: type=1103 audit(1761956184.995:1373): pid=4625 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:25.115871 sshd[4623]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:25.115000 audit[4623]: USER_END pid=4623 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:25.118338 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:16:25.118923 systemd-logind[1206]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:16:25.119059 systemd[1]: sshd@12-10.0.0.59:22-10.0.0.1:51410.service: Deactivated successfully. Nov 1 00:16:25.120128 systemd-logind[1206]: Removed session 13. Nov 1 00:16:25.115000 audit[4623]: CRED_DISP pid=4623 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:25.123852 kernel: audit: type=1106 audit(1761956185.115:1374): pid=4623 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:25.123907 kernel: audit: type=1104 audit(1761956185.115:1375): pid=4623 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:25.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.59:22-10.0.0.1:51410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:26.115000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:26.115000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4003002fc0 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:16:26.115000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:16:26.128000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7342 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:26.128000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40023b48d0 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:16:26.128000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:16:26.703978 env[1220]: time="2025-11-01T00:16:26.703921926Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:16:26.916609 env[1220]: time="2025-11-01T00:16:26.916534444Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:26.917502 env[1220]: time="2025-11-01T00:16:26.917445074Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:16:26.917675 kubelet[1946]: E1101 00:16:26.917620 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:16:26.917946 kubelet[1946]: E1101 00:16:26.917675 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:16:26.917946 kubelet[1946]: E1101 00:16:26.917802 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-s28vx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-9ggfv_calico-system(1bea652b-fa9e-4d21-a870-250a69c0d5a9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:26.919377 kubelet[1946]: E1101 00:16:26.919341 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-9ggfv" podUID="1bea652b-fa9e-4d21-a870-250a69c0d5a9" Nov 1 00:16:26.950000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:26.950000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=40129eff40 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:16:26.950000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:16:26.956000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7338 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:26.956000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400dbf6db0 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:16:26.956000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:16:26.956000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7342 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:26.956000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:26.956000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=4005c1b140 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:16:26.956000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:16:26.956000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=400719a1e0 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:16:26.956000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:16:26.957000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:26.957000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=401013c100 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:16:26.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:16:26.957000 audit[1823]: AVC avc: denied { watch } for pid=1823 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7342 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:26.957000 audit[1823]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=400dbf6de0 a2=fc6 a3=0 items=0 ppid=1673 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c440 key=(null) Nov 1 00:16:26.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:16:29.684867 env[1220]: time="2025-11-01T00:16:29.684826726Z" level=info msg="StopPodSandbox for \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\"" Nov 1 00:16:29.709334 env[1220]: time="2025-11-01T00:16:29.709293595Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.725 [WARNING][4647] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zbrhh-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"81bfb214-06ca-4024-b7df-4955466b6e05", ResourceVersion:"1149", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5", Pod:"csi-node-driver-zbrhh", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali3cb1e2f5c49", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.725 [INFO][4647] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.725 [INFO][4647] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" iface="eth0" netns="" Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.725 [INFO][4647] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.725 [INFO][4647] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.755 [INFO][4658] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.755 [INFO][4658] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.755 [INFO][4658] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.763 [WARNING][4658] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.763 [INFO][4658] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.765 [INFO][4658] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:29.768786 env[1220]: 2025-11-01 00:16:29.766 [INFO][4647] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:29.769255 env[1220]: time="2025-11-01T00:16:29.768819075Z" level=info msg="TearDown network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\" successfully" Nov 1 00:16:29.769255 env[1220]: time="2025-11-01T00:16:29.768846436Z" level=info msg="StopPodSandbox for \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\" returns successfully" Nov 1 00:16:29.769500 env[1220]: time="2025-11-01T00:16:29.769472696Z" level=info msg="RemovePodSandbox for \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\"" Nov 1 00:16:29.769539 env[1220]: time="2025-11-01T00:16:29.769510417Z" level=info msg="Forcibly stopping sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\"" Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.805 [WARNING][4675] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zbrhh-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"81bfb214-06ca-4024-b7df-4955466b6e05", ResourceVersion:"1149", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2be86cb4ede5fb5898cc3974e4d21890e87da8a33e0cb7d742b7aa2bbe5ab3f5", Pod:"csi-node-driver-zbrhh", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali3cb1e2f5c49", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.805 [INFO][4675] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.805 [INFO][4675] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" iface="eth0" netns="" Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.805 [INFO][4675] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.805 [INFO][4675] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.823 [INFO][4684] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.824 [INFO][4684] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.824 [INFO][4684] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.832 [WARNING][4684] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.832 [INFO][4684] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" HandleID="k8s-pod-network.1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Workload="localhost-k8s-csi--node--driver--zbrhh-eth0" Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.833 [INFO][4684] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:29.837509 env[1220]: 2025-11-01 00:16:29.835 [INFO][4675] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5" Nov 1 00:16:29.837936 env[1220]: time="2025-11-01T00:16:29.837537051Z" level=info msg="TearDown network for sandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\" successfully" Nov 1 00:16:29.841725 env[1220]: time="2025-11-01T00:16:29.841692985Z" level=info msg="RemovePodSandbox \"1f7f308c5713e5d98f7f367c1109752caa2e6867da459acf69ac3bc708ec6fe5\" returns successfully" Nov 1 00:16:29.842308 env[1220]: time="2025-11-01T00:16:29.842276644Z" level=info msg="StopPodSandbox for \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\"" Nov 1 00:16:29.915009 env[1220]: time="2025-11-01T00:16:29.914895826Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:29.915981 env[1220]: time="2025-11-01T00:16:29.915884618Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:16:29.916365 kubelet[1946]: E1101 00:16:29.916160 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:16:29.916365 kubelet[1946]: E1101 00:16:29.916211 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:16:29.916646 kubelet[1946]: E1101 00:16:29.916444 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5kxzc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7f6b964fd9-74jpn_calico-system(7b333081-da7b-416e-a1c3-ea55953cf8be): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:29.917124 env[1220]: time="2025-11-01T00:16:29.917097137Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:16:29.918097 kubelet[1946]: E1101 00:16:29.918031 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" podUID="7b333081-da7b-416e-a1c3-ea55953cf8be" Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.877 [WARNING][4702] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f475bc956--k282f-eth0", GenerateName:"calico-apiserver-f475bc956-", Namespace:"calico-apiserver", SelfLink:"", UID:"476f4117-f217-4ab0-8acb-437e73ee9d99", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f475bc956", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf", Pod:"calico-apiserver-f475bc956-k282f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali093c6d9e23f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.877 [INFO][4702] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.877 [INFO][4702] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" iface="eth0" netns="" Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.877 [INFO][4702] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.877 [INFO][4702] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.912 [INFO][4711] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.913 [INFO][4711] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.913 [INFO][4711] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.922 [WARNING][4711] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.923 [INFO][4711] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.925 [INFO][4711] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:29.928968 env[1220]: 2025-11-01 00:16:29.927 [INFO][4702] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:29.929336 env[1220]: time="2025-11-01T00:16:29.929005161Z" level=info msg="TearDown network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\" successfully" Nov 1 00:16:29.929336 env[1220]: time="2025-11-01T00:16:29.929028522Z" level=info msg="StopPodSandbox for \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\" returns successfully" Nov 1 00:16:29.929728 env[1220]: time="2025-11-01T00:16:29.929697504Z" level=info msg="RemovePodSandbox for \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\"" Nov 1 00:16:29.929799 env[1220]: time="2025-11-01T00:16:29.929732225Z" level=info msg="Forcibly stopping sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\"" Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.962 [WARNING][4728] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f475bc956--k282f-eth0", GenerateName:"calico-apiserver-f475bc956-", Namespace:"calico-apiserver", SelfLink:"", UID:"476f4117-f217-4ab0-8acb-437e73ee9d99", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f475bc956", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"55db80dc8123ccec6272383c283a0aaf7067f99657b37ec04aa599ab1151eabf", Pod:"calico-apiserver-f475bc956-k282f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali093c6d9e23f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.963 [INFO][4728] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.963 [INFO][4728] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" iface="eth0" netns="" Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.963 [INFO][4728] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.963 [INFO][4728] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.980 [INFO][4737] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.980 [INFO][4737] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.980 [INFO][4737] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.988 [WARNING][4737] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.988 [INFO][4737] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" HandleID="k8s-pod-network.e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Workload="localhost-k8s-calico--apiserver--f475bc956--k282f-eth0" Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.993 [INFO][4737] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:29.998738 env[1220]: 2025-11-01 00:16:29.995 [INFO][4728] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416" Nov 1 00:16:29.998738 env[1220]: time="2025-11-01T00:16:29.997619934Z" level=info msg="TearDown network for sandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\" successfully" Nov 1 00:16:30.007090 env[1220]: time="2025-11-01T00:16:30.007042516Z" level=info msg="RemovePodSandbox \"e9357d55b3ce42c57f7c6c6207ae28af77ce69ad016094a0d3be0f18618cc416\" returns successfully" Nov 1 00:16:30.007588 env[1220]: time="2025-11-01T00:16:30.007539292Z" level=info msg="StopPodSandbox for \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\"" Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.039 [WARNING][4755] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3a9efac0-8144-4907-9db7-0ad61385c717", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd", Pod:"coredns-668d6bf9bc-4zrdh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic302a59cf27", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.039 [INFO][4755] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.039 [INFO][4755] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" iface="eth0" netns="" Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.039 [INFO][4755] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.039 [INFO][4755] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.057 [INFO][4764] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.057 [INFO][4764] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.057 [INFO][4764] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.066 [WARNING][4764] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.066 [INFO][4764] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.068 [INFO][4764] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.071684 env[1220]: 2025-11-01 00:16:30.070 [INFO][4755] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:30.072174 env[1220]: time="2025-11-01T00:16:30.071721983Z" level=info msg="TearDown network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\" successfully" Nov 1 00:16:30.072174 env[1220]: time="2025-11-01T00:16:30.071763664Z" level=info msg="StopPodSandbox for \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\" returns successfully" Nov 1 00:16:30.072479 env[1220]: time="2025-11-01T00:16:30.072450646Z" level=info msg="RemovePodSandbox for \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\"" Nov 1 00:16:30.072698 env[1220]: time="2025-11-01T00:16:30.072653852Z" level=info msg="Forcibly stopping sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\"" Nov 1 00:16:30.125733 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 00:16:30.125854 kernel: audit: type=1130 audit(1761956190.120:1385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.59:22-10.0.0.1:53118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:30.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.59:22-10.0.0.1:53118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:30.120954 systemd[1]: Started sshd@13-10.0.0.59:22-10.0.0.1:53118.service. Nov 1 00:16:30.128464 env[1220]: time="2025-11-01T00:16:30.128412314Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:30.129246 env[1220]: time="2025-11-01T00:16:30.129200659Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:16:30.129453 kubelet[1946]: E1101 00:16:30.129413 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:30.129552 kubelet[1946]: E1101 00:16:30.129462 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:30.129844 kubelet[1946]: E1101 00:16:30.129785 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2qb6l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-f475bc956-k282f_calico-apiserver(476f4117-f217-4ab0-8acb-437e73ee9d99): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:30.129984 env[1220]: time="2025-11-01T00:16:30.129828479Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:16:30.131375 kubelet[1946]: E1101 00:16:30.131328 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" podUID="476f4117-f217-4ab0-8acb-437e73ee9d99" Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.106 [WARNING][4783] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3a9efac0-8144-4907-9db7-0ad61385c717", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a6578a01f7fbb435b7dfa0bcf11b326adaead10d55a762dd91989dd9e80cdabd", Pod:"coredns-668d6bf9bc-4zrdh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic302a59cf27", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.107 [INFO][4783] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.107 [INFO][4783] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" iface="eth0" netns="" Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.107 [INFO][4783] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.107 [INFO][4783] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.140 [INFO][4792] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.140 [INFO][4792] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.140 [INFO][4792] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.151 [WARNING][4792] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.151 [INFO][4792] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" HandleID="k8s-pod-network.8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Workload="localhost-k8s-coredns--668d6bf9bc--4zrdh-eth0" Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.153 [INFO][4792] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.158263 env[1220]: 2025-11-01 00:16:30.156 [INFO][4783] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba" Nov 1 00:16:30.158747 env[1220]: time="2025-11-01T00:16:30.158711362Z" level=info msg="TearDown network for sandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\" successfully" Nov 1 00:16:30.161644 env[1220]: time="2025-11-01T00:16:30.161612934Z" level=info msg="RemovePodSandbox \"8b8556ee94022d0e101ccfbdccf6d0f65dc1c19d2091acaf5cf48c8e5a3592ba\" returns successfully" Nov 1 00:16:30.162229 env[1220]: time="2025-11-01T00:16:30.162198313Z" level=info msg="StopPodSandbox for \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\"" Nov 1 00:16:30.161000 audit[4799]: USER_ACCT pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.165119 sshd[4799]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:30.166426 sshd[4799]: Accepted publickey for core from 10.0.0.1 port 53118 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:30.162000 audit[4799]: CRED_ACQ pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.170444 kernel: audit: type=1101 audit(1761956190.161:1386): pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.170508 kernel: audit: type=1103 audit(1761956190.162:1387): pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.172639 kernel: audit: type=1006 audit(1761956190.162:1388): pid=4799 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Nov 1 00:16:30.172722 kernel: audit: type=1300 audit(1761956190.162:1388): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5441c80 a2=3 a3=1 items=0 ppid=1 pid=4799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:30.162000 audit[4799]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5441c80 a2=3 a3=1 items=0 ppid=1 pid=4799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:30.162000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:30.178375 kernel: audit: type=1327 audit(1761956190.162:1388): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:30.178967 systemd-logind[1206]: New session 14 of user core. Nov 1 00:16:30.179439 systemd[1]: Started session-14.scope. Nov 1 00:16:30.181000 audit[4799]: USER_START pid=4799 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.186000 audit[4818]: CRED_ACQ pid=4818 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.190805 kernel: audit: type=1105 audit(1761956190.181:1389): pid=4799 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.190954 kernel: audit: type=1103 audit(1761956190.186:1390): pid=4818 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.213 [WARNING][4813] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"ad016577-acfe-433f-85f4-2a0e1c651c14", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8", Pod:"coredns-668d6bf9bc-n7f7f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib0cfff89b87", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.213 [INFO][4813] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.213 [INFO][4813] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" iface="eth0" netns="" Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.213 [INFO][4813] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.213 [INFO][4813] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.232 [INFO][4822] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.232 [INFO][4822] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.232 [INFO][4822] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.242 [WARNING][4822] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.242 [INFO][4822] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.243 [INFO][4822] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.249612 env[1220]: 2025-11-01 00:16:30.247 [INFO][4813] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:30.249612 env[1220]: time="2025-11-01T00:16:30.249583025Z" level=info msg="TearDown network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\" successfully" Nov 1 00:16:30.249612 env[1220]: time="2025-11-01T00:16:30.249611466Z" level=info msg="StopPodSandbox for \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\" returns successfully" Nov 1 00:16:30.250479 env[1220]: time="2025-11-01T00:16:30.250444972Z" level=info msg="RemovePodSandbox for \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\"" Nov 1 00:16:30.250663 env[1220]: time="2025-11-01T00:16:30.250624098Z" level=info msg="Forcibly stopping sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\"" Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.284 [WARNING][4847] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"ad016577-acfe-433f-85f4-2a0e1c651c14", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d495549ee879b6fb52bf7fa90eb84ee6fa1c98520b4cab39212f94ae0f9c58f8", Pod:"coredns-668d6bf9bc-n7f7f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib0cfff89b87", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.284 [INFO][4847] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.284 [INFO][4847] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" iface="eth0" netns="" Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.284 [INFO][4847] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.284 [INFO][4847] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.312 [INFO][4857] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.312 [INFO][4857] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.312 [INFO][4857] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.321 [WARNING][4857] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.321 [INFO][4857] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" HandleID="k8s-pod-network.1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Workload="localhost-k8s-coredns--668d6bf9bc--n7f7f-eth0" Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.323 [INFO][4857] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.327864 env[1220]: 2025-11-01 00:16:30.325 [INFO][4847] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68" Nov 1 00:16:30.328373 env[1220]: time="2025-11-01T00:16:30.327896607Z" level=info msg="TearDown network for sandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\" successfully" Nov 1 00:16:30.331060 env[1220]: time="2025-11-01T00:16:30.331025146Z" level=info msg="RemovePodSandbox \"1e03cee472dbdf58e654b2bf71f0b2c45ce6e485b9cda77a18250da7c3925b68\" returns successfully" Nov 1 00:16:30.331531 env[1220]: time="2025-11-01T00:16:30.331505402Z" level=info msg="StopPodSandbox for \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\"" Nov 1 00:16:30.348435 env[1220]: time="2025-11-01T00:16:30.348403942Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:30.349350 env[1220]: time="2025-11-01T00:16:30.349305130Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:16:30.349674 kubelet[1946]: E1101 00:16:30.349628 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:16:30.349735 kubelet[1946]: E1101 00:16:30.349685 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:16:30.349906 kubelet[1946]: E1101 00:16:30.349859 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kpp67,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-zbrhh_calico-system(81bfb214-06ca-4024-b7df-4955466b6e05): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:30.353055 env[1220]: time="2025-11-01T00:16:30.353027889Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:16:30.369864 sshd[4799]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:30.369000 audit[4799]: USER_END pid=4799 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.369000 audit[4799]: CRED_DISP pid=4799 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.376010 systemd[1]: sshd@13-10.0.0.59:22-10.0.0.1:53118.service: Deactivated successfully. Nov 1 00:16:30.376785 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:16:30.379186 kernel: audit: type=1106 audit(1761956190.369:1391): pid=4799 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.379254 kernel: audit: type=1104 audit(1761956190.369:1392): pid=4799 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:30.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.59:22-10.0.0.1:53118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:30.379292 systemd-logind[1206]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:16:30.380022 systemd-logind[1206]: Removed session 14. Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.382 [WARNING][4874] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" WorkloadEndpoint="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.382 [INFO][4874] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.382 [INFO][4874] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" iface="eth0" netns="" Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.382 [INFO][4874] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.382 [INFO][4874] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.398 [INFO][4883] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.398 [INFO][4883] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.398 [INFO][4883] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.406 [WARNING][4883] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.406 [INFO][4883] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.407 [INFO][4883] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.412017 env[1220]: 2025-11-01 00:16:30.409 [INFO][4874] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:30.412440 env[1220]: time="2025-11-01T00:16:30.412409346Z" level=info msg="TearDown network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\" successfully" Nov 1 00:16:30.412503 env[1220]: time="2025-11-01T00:16:30.412487029Z" level=info msg="StopPodSandbox for \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\" returns successfully" Nov 1 00:16:30.413016 env[1220]: time="2025-11-01T00:16:30.412955684Z" level=info msg="RemovePodSandbox for \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\"" Nov 1 00:16:30.413077 env[1220]: time="2025-11-01T00:16:30.413023646Z" level=info msg="Forcibly stopping sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\"" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.447 [WARNING][4901] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" WorkloadEndpoint="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.447 [INFO][4901] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.447 [INFO][4901] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" iface="eth0" netns="" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.447 [INFO][4901] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.447 [INFO][4901] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.464 [INFO][4909] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.464 [INFO][4909] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.464 [INFO][4909] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.472 [WARNING][4909] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.472 [INFO][4909] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" HandleID="k8s-pod-network.87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Workload="localhost-k8s-whisker--86c9948df4--xlhh2-eth0" Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.474 [INFO][4909] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.477976 env[1220]: 2025-11-01 00:16:30.476 [INFO][4901] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0" Nov 1 00:16:30.478369 env[1220]: time="2025-11-01T00:16:30.478024923Z" level=info msg="TearDown network for sandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\" successfully" Nov 1 00:16:30.481492 env[1220]: time="2025-11-01T00:16:30.481071180Z" level=info msg="RemovePodSandbox \"87af6d7cd7c79472fd04d0048a345c6efb6fa8c487726d2f49c7c9675ac7aae0\" returns successfully" Nov 1 00:16:30.481645 env[1220]: time="2025-11-01T00:16:30.481588637Z" level=info msg="StopPodSandbox for \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\"" Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.512 [WARNING][4926] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--9ggfv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"1bea652b-fa9e-4d21-a870-250a69c0d5a9", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a", Pod:"goldmane-666569f655-9ggfv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic0f3c74bc6f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.512 [INFO][4926] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.512 [INFO][4926] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" iface="eth0" netns="" Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.512 [INFO][4926] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.512 [INFO][4926] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.529 [INFO][4936] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.529 [INFO][4936] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.529 [INFO][4936] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.538 [WARNING][4936] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.538 [INFO][4936] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.540 [INFO][4936] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.548575 env[1220]: 2025-11-01 00:16:30.543 [INFO][4926] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:30.548575 env[1220]: time="2025-11-01T00:16:30.548550856Z" level=info msg="TearDown network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\" successfully" Nov 1 00:16:30.549072 env[1220]: time="2025-11-01T00:16:30.548580737Z" level=info msg="StopPodSandbox for \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\" returns successfully" Nov 1 00:16:30.549612 env[1220]: time="2025-11-01T00:16:30.549475925Z" level=info msg="RemovePodSandbox for \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\"" Nov 1 00:16:30.549706 env[1220]: time="2025-11-01T00:16:30.549607330Z" level=info msg="Forcibly stopping sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\"" Nov 1 00:16:30.560643 env[1220]: time="2025-11-01T00:16:30.560598761Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:30.561479 env[1220]: time="2025-11-01T00:16:30.561429107Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:16:30.561686 kubelet[1946]: E1101 00:16:30.561635 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:16:30.561754 kubelet[1946]: E1101 00:16:30.561692 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:16:30.561880 kubelet[1946]: E1101 00:16:30.561825 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-kpp67,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-zbrhh_calico-system(81bfb214-06ca-4024-b7df-4955466b6e05): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:30.563322 kubelet[1946]: E1101 00:16:30.563255 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.582 [WARNING][4954] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--9ggfv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"1bea652b-fa9e-4d21-a870-250a69c0d5a9", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e09f160234d288b5b8540303f003317ef5296861aab52a39a47f53025fed207a", Pod:"goldmane-666569f655-9ggfv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic0f3c74bc6f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.582 [INFO][4954] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.583 [INFO][4954] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" iface="eth0" netns="" Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.583 [INFO][4954] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.583 [INFO][4954] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.600 [INFO][4962] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.600 [INFO][4962] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.600 [INFO][4962] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.608 [WARNING][4962] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.608 [INFO][4962] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" HandleID="k8s-pod-network.07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Workload="localhost-k8s-goldmane--666569f655--9ggfv-eth0" Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.609 [INFO][4962] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.613248 env[1220]: 2025-11-01 00:16:30.611 [INFO][4954] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c" Nov 1 00:16:30.613688 env[1220]: time="2025-11-01T00:16:30.613273083Z" level=info msg="TearDown network for sandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\" successfully" Nov 1 00:16:30.616036 env[1220]: time="2025-11-01T00:16:30.616009811Z" level=info msg="RemovePodSandbox \"07dcd88e6131f1fd8b4f8725068308567a50788486becd15403f06f457433f8c\" returns successfully" Nov 1 00:16:30.616484 env[1220]: time="2025-11-01T00:16:30.616441745Z" level=info msg="StopPodSandbox for \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\"" Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.647 [WARNING][4979] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0", GenerateName:"calico-apiserver-f475bc956-", Namespace:"calico-apiserver", SelfLink:"", UID:"e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f", ResourceVersion:"1135", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f475bc956", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb", Pod:"calico-apiserver-f475bc956-2vmq8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1a23c9a76dd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.647 [INFO][4979] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.647 [INFO][4979] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" iface="eth0" netns="" Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.647 [INFO][4979] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.647 [INFO][4979] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.664 [INFO][4988] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.664 [INFO][4988] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.665 [INFO][4988] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.672 [WARNING][4988] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.672 [INFO][4988] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.674 [INFO][4988] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.676833 env[1220]: 2025-11-01 00:16:30.675 [INFO][4979] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:30.677241 env[1220]: time="2025-11-01T00:16:30.676864635Z" level=info msg="TearDown network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\" successfully" Nov 1 00:16:30.677241 env[1220]: time="2025-11-01T00:16:30.676895276Z" level=info msg="StopPodSandbox for \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\" returns successfully" Nov 1 00:16:30.677444 env[1220]: time="2025-11-01T00:16:30.677399732Z" level=info msg="RemovePodSandbox for \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\"" Nov 1 00:16:30.677478 env[1220]: time="2025-11-01T00:16:30.677441013Z" level=info msg="Forcibly stopping sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\"" Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.710 [WARNING][5007] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0", GenerateName:"calico-apiserver-f475bc956-", Namespace:"calico-apiserver", SelfLink:"", UID:"e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f", ResourceVersion:"1135", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"f475bc956", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9415b9a5ab2b67a7698c32cb65cd5856d7fb70dd3131ffb06759845e528071cb", Pod:"calico-apiserver-f475bc956-2vmq8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1a23c9a76dd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.710 [INFO][5007] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.710 [INFO][5007] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" iface="eth0" netns="" Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.710 [INFO][5007] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.710 [INFO][5007] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.729 [INFO][5016] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.729 [INFO][5016] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.729 [INFO][5016] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.739 [WARNING][5016] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.739 [INFO][5016] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" HandleID="k8s-pod-network.f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Workload="localhost-k8s-calico--apiserver--f475bc956--2vmq8-eth0" Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.741 [INFO][5016] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.745370 env[1220]: 2025-11-01 00:16:30.743 [INFO][5007] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480" Nov 1 00:16:30.745977 env[1220]: time="2025-11-01T00:16:30.745401945Z" level=info msg="TearDown network for sandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\" successfully" Nov 1 00:16:30.748055 env[1220]: time="2025-11-01T00:16:30.748023868Z" level=info msg="RemovePodSandbox \"f7568c9ac4b134d727bcc9ef751768684ec148927860a14c6867c6438b852480\" returns successfully" Nov 1 00:16:30.748517 env[1220]: time="2025-11-01T00:16:30.748473483Z" level=info msg="StopPodSandbox for \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\"" Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.780 [WARNING][5034] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0", GenerateName:"calico-kube-controllers-7f6b964fd9-", Namespace:"calico-system", SelfLink:"", UID:"7b333081-da7b-416e-a1c3-ea55953cf8be", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7f6b964fd9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0", Pod:"calico-kube-controllers-7f6b964fd9-74jpn", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali30409352bb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.780 [INFO][5034] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.780 [INFO][5034] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" iface="eth0" netns="" Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.780 [INFO][5034] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.780 [INFO][5034] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.798 [INFO][5042] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.798 [INFO][5042] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.798 [INFO][5042] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.807 [WARNING][5042] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.807 [INFO][5042] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.808 [INFO][5042] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.812608 env[1220]: 2025-11-01 00:16:30.810 [INFO][5034] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:30.813040 env[1220]: time="2025-11-01T00:16:30.812602811Z" level=info msg="TearDown network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\" successfully" Nov 1 00:16:30.813040 env[1220]: time="2025-11-01T00:16:30.812631092Z" level=info msg="StopPodSandbox for \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\" returns successfully" Nov 1 00:16:30.814102 env[1220]: time="2025-11-01T00:16:30.814070858Z" level=info msg="RemovePodSandbox for \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\"" Nov 1 00:16:30.814169 env[1220]: time="2025-11-01T00:16:30.814110340Z" level=info msg="Forcibly stopping sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\"" Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.845 [WARNING][5061] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0", GenerateName:"calico-kube-controllers-7f6b964fd9-", Namespace:"calico-system", SelfLink:"", UID:"7b333081-da7b-416e-a1c3-ea55953cf8be", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 15, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7f6b964fd9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9d410c4a812a050896720b73f2e490c7353f027e07bab461b3faeb5d5f2626a0", Pod:"calico-kube-controllers-7f6b964fd9-74jpn", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali30409352bb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.846 [INFO][5061] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.846 [INFO][5061] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" iface="eth0" netns="" Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.846 [INFO][5061] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.846 [INFO][5061] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.864 [INFO][5071] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.864 [INFO][5071] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.864 [INFO][5071] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.872 [WARNING][5071] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.872 [INFO][5071] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" HandleID="k8s-pod-network.e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Workload="localhost-k8s-calico--kube--controllers--7f6b964fd9--74jpn-eth0" Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.874 [INFO][5071] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:16:30.877360 env[1220]: 2025-11-01 00:16:30.875 [INFO][5061] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6" Nov 1 00:16:30.877783 env[1220]: time="2025-11-01T00:16:30.877394241Z" level=info msg="TearDown network for sandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\" successfully" Nov 1 00:16:30.880414 env[1220]: time="2025-11-01T00:16:30.880381257Z" level=info msg="RemovePodSandbox \"e71710a1c4f883b884371d9859b49e2432c64e96207c5bf809291c6e1958e1b6\" returns successfully" Nov 1 00:16:31.367000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:31.367000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40030032e0 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:16:31.367000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:16:31.367000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:31.367000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003003300 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:16:31.367000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:16:31.367000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:31.367000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003003320 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:16:31.367000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:16:31.368000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:31.368000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40031004a0 a2=fc6 a3=0 items=0 ppid=1688 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c460,c816 key=(null) Nov 1 00:16:31.368000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:16:32.703345 env[1220]: time="2025-11-01T00:16:32.703298461Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:16:32.916135 env[1220]: time="2025-11-01T00:16:32.916065541Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:32.917154 env[1220]: time="2025-11-01T00:16:32.917106333Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:16:32.917338 kubelet[1946]: E1101 00:16:32.917293 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:32.917585 kubelet[1946]: E1101 00:16:32.917339 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:32.917585 kubelet[1946]: E1101 00:16:32.917451 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jnqqf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-f475bc956-2vmq8_calico-apiserver(e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:32.918657 kubelet[1946]: E1101 00:16:32.918624 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" podUID="e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f" Nov 1 00:16:35.379074 systemd[1]: Started sshd@14-10.0.0.59:22-10.0.0.1:53120.service. Nov 1 00:16:35.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.59:22-10.0.0.1:53120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:35.380536 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:16:35.380578 kernel: audit: type=1130 audit(1761956195.377:1398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.59:22-10.0.0.1:53120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:35.413000 audit[5086]: USER_ACCT pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.414571 sshd[5086]: Accepted publickey for core from 10.0.0.1 port 53120 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:35.415554 sshd[5086]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:35.414000 audit[5086]: CRED_ACQ pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.421065 kernel: audit: type=1101 audit(1761956195.413:1399): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.421115 kernel: audit: type=1103 audit(1761956195.414:1400): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.423532 kernel: audit: type=1006 audit(1761956195.414:1401): pid=5086 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:16:35.423588 kernel: audit: type=1300 audit(1761956195.414:1401): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca20ded0 a2=3 a3=1 items=0 ppid=1 pid=5086 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:35.414000 audit[5086]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca20ded0 a2=3 a3=1 items=0 ppid=1 pid=5086 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:35.423237 systemd-logind[1206]: New session 15 of user core. Nov 1 00:16:35.423902 systemd[1]: Started session-15.scope. Nov 1 00:16:35.414000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:35.427854 kernel: audit: type=1327 audit(1761956195.414:1401): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:35.427000 audit[5086]: USER_START pid=5086 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.431000 audit[5088]: CRED_ACQ pid=5088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.435742 kernel: audit: type=1105 audit(1761956195.427:1402): pid=5086 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.435800 kernel: audit: type=1103 audit(1761956195.431:1403): pid=5088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.555358 sshd[5086]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:35.555000 audit[5086]: USER_END pid=5086 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.558340 systemd-logind[1206]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:16:35.558502 systemd[1]: sshd@14-10.0.0.59:22-10.0.0.1:53120.service: Deactivated successfully. Nov 1 00:16:35.559273 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:16:35.560053 systemd-logind[1206]: Removed session 15. Nov 1 00:16:35.555000 audit[5086]: CRED_DISP pid=5086 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.563537 kernel: audit: type=1106 audit(1761956195.555:1404): pid=5086 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.563590 kernel: audit: type=1104 audit(1761956195.555:1405): pid=5086 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:35.555000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.59:22-10.0.0.1:53120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:37.704928 kubelet[1946]: E1101 00:16:37.704881 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-9ggfv" podUID="1bea652b-fa9e-4d21-a870-250a69c0d5a9" Nov 1 00:16:38.249099 kernel: hrtimer: interrupt took 13014894 ns Nov 1 00:16:38.703187 kubelet[1946]: E1101 00:16:38.703088 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-578679bc68-ccw69" podUID="8d91f72f-9342-481f-af2b-25b3e30c46e0" Nov 1 00:16:38.904757 kubelet[1946]: E1101 00:16:38.904712 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:40.560153 systemd[1]: Started sshd@15-10.0.0.59:22-10.0.0.1:55784.service. Nov 1 00:16:40.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.59:22-10.0.0.1:55784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:40.561434 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:16:40.561493 kernel: audit: type=1130 audit(1761956200.559:1407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.59:22-10.0.0.1:55784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:40.600000 audit[5129]: USER_ACCT pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.601516 sshd[5129]: Accepted publickey for core from 10.0.0.1 port 55784 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:40.603337 sshd[5129]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:40.601000 audit[5129]: CRED_ACQ pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.607636 systemd[1]: Started session-16.scope. Nov 1 00:16:40.608108 kernel: audit: type=1101 audit(1761956200.600:1408): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.608153 kernel: audit: type=1103 audit(1761956200.601:1409): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.608178 kernel: audit: type=1006 audit(1761956200.601:1410): pid=5129 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:16:40.608285 systemd-logind[1206]: New session 16 of user core. Nov 1 00:16:40.601000 audit[5129]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff36029d0 a2=3 a3=1 items=0 ppid=1 pid=5129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:40.613773 kernel: audit: type=1300 audit(1761956200.601:1410): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff36029d0 a2=3 a3=1 items=0 ppid=1 pid=5129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:40.613849 kernel: audit: type=1327 audit(1761956200.601:1410): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:40.601000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:40.611000 audit[5129]: USER_START pid=5129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.618778 kernel: audit: type=1105 audit(1761956200.611:1411): pid=5129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.612000 audit[5131]: CRED_ACQ pid=5131 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.621873 kernel: audit: type=1103 audit(1761956200.612:1412): pid=5131 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.725890 sshd[5129]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:40.727000 audit[5129]: USER_END pid=5129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.729929 systemd[1]: Started sshd@16-10.0.0.59:22-10.0.0.1:55798.service. Nov 1 00:16:40.730423 systemd[1]: sshd@15-10.0.0.59:22-10.0.0.1:55784.service: Deactivated successfully. Nov 1 00:16:40.731266 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:16:40.731821 systemd-logind[1206]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:16:40.727000 audit[5129]: CRED_DISP pid=5129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.732680 systemd-logind[1206]: Removed session 16. Nov 1 00:16:40.735544 kernel: audit: type=1106 audit(1761956200.727:1413): pid=5129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.735600 kernel: audit: type=1104 audit(1761956200.727:1414): pid=5129 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.59:22-10.0.0.1:55798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:40.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.59:22-10.0.0.1:55784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:40.766000 audit[5142]: USER_ACCT pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.767686 sshd[5142]: Accepted publickey for core from 10.0.0.1 port 55798 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:40.767000 audit[5142]: CRED_ACQ pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.767000 audit[5142]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc883a3e0 a2=3 a3=1 items=0 ppid=1 pid=5142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:40.767000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:40.769167 sshd[5142]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:40.772677 systemd-logind[1206]: New session 17 of user core. Nov 1 00:16:40.773047 systemd[1]: Started session-17.scope. Nov 1 00:16:40.776000 audit[5142]: USER_START pid=5142 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.777000 audit[5145]: CRED_ACQ pid=5145 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.972092 sshd[5142]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:40.971000 audit[5142]: USER_END pid=5142 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.971000 audit[5142]: CRED_DISP pid=5142 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:40.975688 systemd[1]: Started sshd@17-10.0.0.59:22-10.0.0.1:55808.service. Nov 1 00:16:40.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.59:22-10.0.0.1:55808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:40.978317 systemd[1]: sshd@16-10.0.0.59:22-10.0.0.1:55798.service: Deactivated successfully. Nov 1 00:16:40.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.59:22-10.0.0.1:55798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:40.979020 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:16:40.979566 systemd-logind[1206]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:16:40.980279 systemd-logind[1206]: Removed session 17. Nov 1 00:16:41.014000 audit[5153]: USER_ACCT pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.016156 sshd[5153]: Accepted publickey for core from 10.0.0.1 port 55808 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:41.016000 audit[5153]: CRED_ACQ pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.016000 audit[5153]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3060e60 a2=3 a3=1 items=0 ppid=1 pid=5153 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:41.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:41.017689 sshd[5153]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:41.021056 systemd-logind[1206]: New session 18 of user core. Nov 1 00:16:41.021585 systemd[1]: Started session-18.scope. Nov 1 00:16:41.023000 audit[5153]: USER_START pid=5153 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.024000 audit[5156]: CRED_ACQ pid=5156 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.607000 audit[5168]: NETFILTER_CFG table=filter:125 family=2 entries=26 op=nft_register_rule pid=5168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:41.607000 audit[5168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffe39ec730 a2=0 a3=1 items=0 ppid=2054 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:41.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:41.614000 audit[5168]: NETFILTER_CFG table=nat:126 family=2 entries=20 op=nft_register_rule pid=5168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:41.614000 audit[5168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffe39ec730 a2=0 a3=1 items=0 ppid=2054 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:41.614000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:41.621340 sshd[5153]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:41.623000 audit[5153]: USER_END pid=5153 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.623000 audit[5153]: CRED_DISP pid=5153 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.624677 systemd[1]: Started sshd@18-10.0.0.59:22-10.0.0.1:55822.service. Nov 1 00:16:41.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.59:22-10.0.0.1:55822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:41.633332 systemd[1]: sshd@17-10.0.0.59:22-10.0.0.1:55808.service: Deactivated successfully. Nov 1 00:16:41.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.59:22-10.0.0.1:55808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:41.634136 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:16:41.634000 audit[5172]: NETFILTER_CFG table=filter:127 family=2 entries=38 op=nft_register_rule pid=5172 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:41.636214 systemd-logind[1206]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:16:41.634000 audit[5172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffed73c040 a2=0 a3=1 items=0 ppid=2054 pid=5172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:41.634000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:41.637395 systemd-logind[1206]: Removed session 18. Nov 1 00:16:41.640000 audit[5172]: NETFILTER_CFG table=nat:128 family=2 entries=20 op=nft_register_rule pid=5172 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:41.640000 audit[5172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffed73c040 a2=0 a3=1 items=0 ppid=2054 pid=5172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:41.640000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:41.659000 audit[5170]: USER_ACCT pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.661123 sshd[5170]: Accepted publickey for core from 10.0.0.1 port 55822 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:41.661000 audit[5170]: CRED_ACQ pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.661000 audit[5170]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9f70770 a2=3 a3=1 items=0 ppid=1 pid=5170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:41.661000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:41.662420 sshd[5170]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:41.665584 systemd-logind[1206]: New session 19 of user core. Nov 1 00:16:41.666426 systemd[1]: Started session-19.scope. Nov 1 00:16:41.668000 audit[5170]: USER_START pid=5170 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.670000 audit[5175]: CRED_ACQ pid=5175 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.704193 kubelet[1946]: E1101 00:16:41.704157 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" podUID="7b333081-da7b-416e-a1c3-ea55953cf8be" Nov 1 00:16:41.901401 sshd[5170]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:41.902000 audit[5170]: USER_END pid=5170 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.902000 audit[5170]: CRED_DISP pid=5170 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.905536 systemd[1]: Started sshd@19-10.0.0.59:22-10.0.0.1:55824.service. Nov 1 00:16:41.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.59:22-10.0.0.1:55824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:41.906137 systemd[1]: sshd@18-10.0.0.59:22-10.0.0.1:55822.service: Deactivated successfully. Nov 1 00:16:41.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.59:22-10.0.0.1:55822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:41.907068 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:16:41.907647 systemd-logind[1206]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:16:41.908517 systemd-logind[1206]: Removed session 19. Nov 1 00:16:41.942000 audit[5183]: USER_ACCT pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.944032 sshd[5183]: Accepted publickey for core from 10.0.0.1 port 55824 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:41.943000 audit[5183]: CRED_ACQ pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.943000 audit[5183]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3f4d180 a2=3 a3=1 items=0 ppid=1 pid=5183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:41.943000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:41.945177 sshd[5183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:41.948238 systemd-logind[1206]: New session 20 of user core. Nov 1 00:16:41.949076 systemd[1]: Started session-20.scope. Nov 1 00:16:41.951000 audit[5183]: USER_START pid=5183 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:41.952000 audit[5186]: CRED_ACQ pid=5186 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:42.081219 sshd[5183]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:42.081000 audit[5183]: USER_END pid=5183 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:42.081000 audit[5183]: CRED_DISP pid=5183 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:42.083652 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:16:42.084214 systemd-logind[1206]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:16:42.084356 systemd[1]: sshd@19-10.0.0.59:22-10.0.0.1:55824.service: Deactivated successfully. Nov 1 00:16:42.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.59:22-10.0.0.1:55824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:42.085396 systemd-logind[1206]: Removed session 20. Nov 1 00:16:43.702455 kubelet[1946]: E1101 00:16:43.702416 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:44.702776 kubelet[1946]: E1101 00:16:44.702720 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" podUID="476f4117-f217-4ab0-8acb-437e73ee9d99" Nov 1 00:16:44.703351 kubelet[1946]: E1101 00:16:44.703304 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-zbrhh" podUID="81bfb214-06ca-4024-b7df-4955466b6e05" Nov 1 00:16:45.703390 kubelet[1946]: E1101 00:16:45.703340 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-2vmq8" podUID="e64d0b8e-9ec4-4adc-bd1b-6e6c033d8b5f" Nov 1 00:16:46.655000 audit[5199]: NETFILTER_CFG table=filter:129 family=2 entries=26 op=nft_register_rule pid=5199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:46.657261 kernel: kauditd_printk_skb: 57 callbacks suppressed Nov 1 00:16:46.657324 kernel: audit: type=1325 audit(1761956206.655:1456): table=filter:129 family=2 entries=26 op=nft_register_rule pid=5199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:46.655000 audit[5199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff059c750 a2=0 a3=1 items=0 ppid=2054 pid=5199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:46.663706 kernel: audit: type=1300 audit(1761956206.655:1456): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff059c750 a2=0 a3=1 items=0 ppid=2054 pid=5199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:46.663757 kernel: audit: type=1327 audit(1761956206.655:1456): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:46.655000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:46.666000 audit[5199]: NETFILTER_CFG table=nat:130 family=2 entries=104 op=nft_register_chain pid=5199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:46.666000 audit[5199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=fffff059c750 a2=0 a3=1 items=0 ppid=2054 pid=5199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:46.674410 kernel: audit: type=1325 audit(1761956206.666:1457): table=nat:130 family=2 entries=104 op=nft_register_chain pid=5199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:16:46.674456 kernel: audit: type=1300 audit(1761956206.666:1457): arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=fffff059c750 a2=0 a3=1 items=0 ppid=2054 pid=5199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:46.674486 kernel: audit: type=1327 audit(1761956206.666:1457): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:46.666000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:16:47.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.59:22-10.0.0.1:55832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:47.086107 systemd[1]: Started sshd@20-10.0.0.59:22-10.0.0.1:55832.service. Nov 1 00:16:47.091018 kernel: audit: type=1130 audit(1761956207.085:1458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.59:22-10.0.0.1:55832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:47.123000 audit[5201]: USER_ACCT pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:47.124667 sshd[5201]: Accepted publickey for core from 10.0.0.1 port 55832 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:47.126199 sshd[5201]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:47.124000 audit[5201]: CRED_ACQ pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:47.131273 kernel: audit: type=1101 audit(1761956207.123:1459): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:47.131333 kernel: audit: type=1103 audit(1761956207.124:1460): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:47.131359 kernel: audit: type=1006 audit(1761956207.124:1461): pid=5201 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Nov 1 00:16:47.124000 audit[5201]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe92a6cc0 a2=3 a3=1 items=0 ppid=1 pid=5201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:47.124000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:47.137529 systemd-logind[1206]: New session 21 of user core. Nov 1 00:16:47.138344 systemd[1]: Started session-21.scope. Nov 1 00:16:47.142000 audit[5201]: USER_START pid=5201 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:47.143000 audit[5203]: CRED_ACQ pid=5203 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:47.309325 sshd[5201]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:47.309000 audit[5201]: USER_END pid=5201 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:47.309000 audit[5201]: CRED_DISP pid=5201 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:47.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.59:22-10.0.0.1:55832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:47.311848 systemd[1]: sshd@20-10.0.0.59:22-10.0.0.1:55832.service: Deactivated successfully. Nov 1 00:16:47.312671 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:16:47.313411 systemd-logind[1206]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:16:47.314117 systemd-logind[1206]: Removed session 21. Nov 1 00:16:48.702737 kubelet[1946]: E1101 00:16:48.702691 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:49.702131 kubelet[1946]: E1101 00:16:49.702102 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:52.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.59:22-10.0.0.1:35862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:52.313421 systemd[1]: Started sshd@21-10.0.0.59:22-10.0.0.1:35862.service. Nov 1 00:16:52.314526 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:16:52.314588 kernel: audit: type=1130 audit(1761956212.312:1467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.59:22-10.0.0.1:35862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:52.346000 audit[5214]: USER_ACCT pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.347622 sshd[5214]: Accepted publickey for core from 10.0.0.1 port 35862 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:52.349568 sshd[5214]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:52.346000 audit[5214]: CRED_ACQ pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.354090 systemd[1]: Started session-22.scope. Nov 1 00:16:52.354829 kernel: audit: type=1101 audit(1761956212.346:1468): pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.354890 kernel: audit: type=1103 audit(1761956212.346:1469): pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.354913 kernel: audit: type=1006 audit(1761956212.346:1470): pid=5214 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Nov 1 00:16:52.354505 systemd-logind[1206]: New session 22 of user core. Nov 1 00:16:52.346000 audit[5214]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9bd1ce0 a2=3 a3=1 items=0 ppid=1 pid=5214 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:52.360380 kernel: audit: type=1300 audit(1761956212.346:1470): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9bd1ce0 a2=3 a3=1 items=0 ppid=1 pid=5214 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:52.346000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:52.361803 kernel: audit: type=1327 audit(1761956212.346:1470): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:52.355000 audit[5214]: USER_START pid=5214 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.365804 kernel: audit: type=1105 audit(1761956212.355:1471): pid=5214 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.355000 audit[5216]: CRED_ACQ pid=5216 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.369804 kernel: audit: type=1103 audit(1761956212.355:1472): pid=5216 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.486925 sshd[5214]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:52.486000 audit[5214]: USER_END pid=5214 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.489421 systemd[1]: sshd@21-10.0.0.59:22-10.0.0.1:35862.service: Deactivated successfully. Nov 1 00:16:52.490319 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:16:52.491021 systemd-logind[1206]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:16:52.486000 audit[5214]: CRED_DISP pid=5214 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.491752 systemd-logind[1206]: Removed session 22. Nov 1 00:16:52.494921 kernel: audit: type=1106 audit(1761956212.486:1473): pid=5214 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.494979 kernel: audit: type=1104 audit(1761956212.486:1474): pid=5214 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:52.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.59:22-10.0.0.1:35862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:52.703324 env[1220]: time="2025-11-01T00:16:52.703279591Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:16:52.891019 env[1220]: time="2025-11-01T00:16:52.890919898Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:52.892098 env[1220]: time="2025-11-01T00:16:52.892049612Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:16:52.892322 kubelet[1946]: E1101 00:16:52.892250 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:16:52.892579 kubelet[1946]: E1101 00:16:52.892337 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:16:52.892579 kubelet[1946]: E1101 00:16:52.892468 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-s28vx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-9ggfv_calico-system(1bea652b-fa9e-4d21-a870-250a69c0d5a9): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:52.893691 kubelet[1946]: E1101 00:16:52.893637 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-9ggfv" podUID="1bea652b-fa9e-4d21-a870-250a69c0d5a9" Nov 1 00:16:53.703044 kubelet[1946]: E1101 00:16:53.702975 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:16:53.704010 env[1220]: time="2025-11-01T00:16:53.703958621Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:16:53.914391 env[1220]: time="2025-11-01T00:16:53.914200423Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:53.915330 env[1220]: time="2025-11-01T00:16:53.915229298Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:16:53.915519 kubelet[1946]: E1101 00:16:53.915467 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:16:53.915781 kubelet[1946]: E1101 00:16:53.915520 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:16:53.915893 env[1220]: time="2025-11-01T00:16:53.915849855Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:16:53.916255 kubelet[1946]: E1101 00:16:53.916149 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:d95660f46ada42f9a137b4b31db0d45a,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-drpgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-578679bc68-ccw69_calico-system(8d91f72f-9342-481f-af2b-25b3e30c46e0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:54.129717 env[1220]: time="2025-11-01T00:16:54.129663545Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:54.130712 env[1220]: time="2025-11-01T00:16:54.130658101Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:16:54.131041 kubelet[1946]: E1101 00:16:54.130933 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:16:54.131138 kubelet[1946]: E1101 00:16:54.131046 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:16:54.131438 env[1220]: time="2025-11-01T00:16:54.131397819Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:16:54.131530 kubelet[1946]: E1101 00:16:54.131387 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5kxzc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7f6b964fd9-74jpn_calico-system(7b333081-da7b-416e-a1c3-ea55953cf8be): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:54.132937 kubelet[1946]: E1101 00:16:54.132900 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7f6b964fd9-74jpn" podUID="7b333081-da7b-416e-a1c3-ea55953cf8be" Nov 1 00:16:54.339831 env[1220]: time="2025-11-01T00:16:54.339778718Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:54.340695 env[1220]: time="2025-11-01T00:16:54.340651275Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:16:54.340940 kubelet[1946]: E1101 00:16:54.340897 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:16:54.341048 kubelet[1946]: E1101 00:16:54.340955 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:16:54.341132 kubelet[1946]: E1101 00:16:54.341091 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-drpgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-578679bc68-ccw69_calico-system(8d91f72f-9342-481f-af2b-25b3e30c46e0): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:54.342440 kubelet[1946]: E1101 00:16:54.342383 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-578679bc68-ccw69" podUID="8d91f72f-9342-481f-af2b-25b3e30c46e0" Nov 1 00:16:57.492229 systemd[1]: Started sshd@22-10.0.0.59:22-10.0.0.1:35866.service. Nov 1 00:16:57.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.59:22-10.0.0.1:35866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:57.493420 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:16:57.493501 kernel: audit: type=1130 audit(1761956217.491:1476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.59:22-10.0.0.1:35866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:57.530000 audit[5236]: USER_ACCT pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.532268 sshd[5236]: Accepted publickey for core from 10.0.0.1 port 35866 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:16:57.533579 sshd[5236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:57.531000 audit[5236]: CRED_ACQ pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.537608 systemd-logind[1206]: New session 23 of user core. Nov 1 00:16:57.538059 systemd[1]: Started session-23.scope. Nov 1 00:16:57.538367 kernel: audit: type=1101 audit(1761956217.530:1477): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.538436 kernel: audit: type=1103 audit(1761956217.531:1478): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.538467 kernel: audit: type=1006 audit(1761956217.531:1479): pid=5236 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:16:57.531000 audit[5236]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4c2bcd0 a2=3 a3=1 items=0 ppid=1 pid=5236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:57.543894 kernel: audit: type=1300 audit(1761956217.531:1479): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4c2bcd0 a2=3 a3=1 items=0 ppid=1 pid=5236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:57.543975 kernel: audit: type=1327 audit(1761956217.531:1479): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:57.531000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:57.539000 audit[5236]: USER_START pid=5236 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.549118 kernel: audit: type=1105 audit(1761956217.539:1480): pid=5236 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.549274 kernel: audit: type=1103 audit(1761956217.539:1481): pid=5238 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.539000 audit[5238]: CRED_ACQ pid=5238 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.669469 sshd[5236]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:57.669000 audit[5236]: USER_END pid=5236 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.671920 systemd-logind[1206]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:16:57.672190 systemd[1]: sshd@22-10.0.0.59:22-10.0.0.1:35866.service: Deactivated successfully. Nov 1 00:16:57.672926 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:16:57.673760 systemd-logind[1206]: Removed session 23. Nov 1 00:16:57.669000 audit[5236]: CRED_DISP pid=5236 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.677412 kernel: audit: type=1106 audit(1761956217.669:1482): pid=5236 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.677503 kernel: audit: type=1104 audit(1761956217.669:1483): pid=5236 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:16:57.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.59:22-10.0.0.1:35866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:58.703067 env[1220]: time="2025-11-01T00:16:58.703026675Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:16:58.907305 env[1220]: time="2025-11-01T00:16:58.907113004Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:58.908161 env[1220]: time="2025-11-01T00:16:58.908039643Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:16:58.908302 kubelet[1946]: E1101 00:16:58.908256 1946 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:58.908581 kubelet[1946]: E1101 00:16:58.908309 1946 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:58.908581 kubelet[1946]: E1101 00:16:58.908427 1946 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2qb6l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-f475bc956-k282f_calico-apiserver(476f4117-f217-4ab0-8acb-437e73ee9d99): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:58.909870 kubelet[1946]: E1101 00:16:58.909830 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-f475bc956-k282f" podUID="476f4117-f217-4ab0-8acb-437e73ee9d99"