Nov 1 00:08:22.692364 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Nov 1 00:08:22.692385 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Oct 31 23:12:38 -00 2025 Nov 1 00:08:22.692393 kernel: efi: EFI v2.70 by EDK II Nov 1 00:08:22.692399 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Nov 1 00:08:22.692404 kernel: random: crng init done Nov 1 00:08:22.692409 kernel: ACPI: Early table checksum verification disabled Nov 1 00:08:22.692415 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Nov 1 00:08:22.692422 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Nov 1 00:08:22.692428 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692433 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692438 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692444 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692449 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692455 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692462 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692468 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692474 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Nov 1 00:08:22.692480 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Nov 1 00:08:22.692485 kernel: NUMA: Failed to initialise from firmware Nov 1 00:08:22.692491 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Nov 1 00:08:22.692497 kernel: NUMA: NODE_DATA [mem 0xdcb0a900-0xdcb0ffff] Nov 1 00:08:22.692503 kernel: Zone ranges: Nov 1 00:08:22.692508 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Nov 1 00:08:22.692515 kernel: DMA32 empty Nov 1 00:08:22.692521 kernel: Normal empty Nov 1 00:08:22.692527 kernel: Movable zone start for each node Nov 1 00:08:22.692532 kernel: Early memory node ranges Nov 1 00:08:22.692538 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Nov 1 00:08:22.692543 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Nov 1 00:08:22.692549 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Nov 1 00:08:22.692555 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Nov 1 00:08:22.692567 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Nov 1 00:08:22.692573 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Nov 1 00:08:22.692578 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Nov 1 00:08:22.692584 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Nov 1 00:08:22.692591 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Nov 1 00:08:22.692598 kernel: psci: probing for conduit method from ACPI. Nov 1 00:08:22.692603 kernel: psci: PSCIv1.1 detected in firmware. Nov 1 00:08:22.692609 kernel: psci: Using standard PSCI v0.2 function IDs Nov 1 00:08:22.692615 kernel: psci: Trusted OS migration not required Nov 1 00:08:22.692623 kernel: psci: SMC Calling Convention v1.1 Nov 1 00:08:22.692629 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Nov 1 00:08:22.692636 kernel: ACPI: SRAT not present Nov 1 00:08:22.692643 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Nov 1 00:08:22.692649 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Nov 1 00:08:22.692655 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Nov 1 00:08:22.692661 kernel: Detected PIPT I-cache on CPU0 Nov 1 00:08:22.692667 kernel: CPU features: detected: GIC system register CPU interface Nov 1 00:08:22.692673 kernel: CPU features: detected: Hardware dirty bit management Nov 1 00:08:22.692679 kernel: CPU features: detected: Spectre-v4 Nov 1 00:08:22.692685 kernel: CPU features: detected: Spectre-BHB Nov 1 00:08:22.692692 kernel: CPU features: kernel page table isolation forced ON by KASLR Nov 1 00:08:22.692699 kernel: CPU features: detected: Kernel page table isolation (KPTI) Nov 1 00:08:22.692705 kernel: CPU features: detected: ARM erratum 1418040 Nov 1 00:08:22.692711 kernel: CPU features: detected: SSBS not fully self-synchronizing Nov 1 00:08:22.692717 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Nov 1 00:08:22.692723 kernel: Policy zone: DMA Nov 1 00:08:22.692730 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:08:22.692736 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:08:22.692742 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:08:22.692748 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:08:22.692755 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:08:22.692762 kernel: Memory: 2457336K/2572288K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 114952K reserved, 0K cma-reserved) Nov 1 00:08:22.692778 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Nov 1 00:08:22.692785 kernel: trace event string verifier disabled Nov 1 00:08:22.692791 kernel: rcu: Preemptible hierarchical RCU implementation. Nov 1 00:08:22.692797 kernel: rcu: RCU event tracing is enabled. Nov 1 00:08:22.692804 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Nov 1 00:08:22.692810 kernel: Trampoline variant of Tasks RCU enabled. Nov 1 00:08:22.692816 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:08:22.692822 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:08:22.692829 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Nov 1 00:08:22.692835 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Nov 1 00:08:22.692842 kernel: GICv3: 256 SPIs implemented Nov 1 00:08:22.692848 kernel: GICv3: 0 Extended SPIs implemented Nov 1 00:08:22.692855 kernel: GICv3: Distributor has no Range Selector support Nov 1 00:08:22.692861 kernel: Root IRQ handler: gic_handle_irq Nov 1 00:08:22.692867 kernel: GICv3: 16 PPIs implemented Nov 1 00:08:22.692873 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Nov 1 00:08:22.692879 kernel: ACPI: SRAT not present Nov 1 00:08:22.692885 kernel: ITS [mem 0x08080000-0x0809ffff] Nov 1 00:08:22.692891 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Nov 1 00:08:22.692898 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Nov 1 00:08:22.692904 kernel: GICv3: using LPI property table @0x00000000400d0000 Nov 1 00:08:22.692910 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Nov 1 00:08:22.692917 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:08:22.692923 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Nov 1 00:08:22.692929 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Nov 1 00:08:22.692935 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Nov 1 00:08:22.692941 kernel: arm-pv: using stolen time PV Nov 1 00:08:22.692948 kernel: Console: colour dummy device 80x25 Nov 1 00:08:22.692954 kernel: ACPI: Core revision 20210730 Nov 1 00:08:22.692960 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Nov 1 00:08:22.692967 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:08:22.692973 kernel: LSM: Security Framework initializing Nov 1 00:08:22.692980 kernel: SELinux: Initializing. Nov 1 00:08:22.692986 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:08:22.692996 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:08:22.693003 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:08:22.693009 kernel: Platform MSI: ITS@0x8080000 domain created Nov 1 00:08:22.693015 kernel: PCI/MSI: ITS@0x8080000 domain created Nov 1 00:08:22.693022 kernel: Remapping and enabling EFI services. Nov 1 00:08:22.693028 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:08:22.693034 kernel: Detected PIPT I-cache on CPU1 Nov 1 00:08:22.693041 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Nov 1 00:08:22.693048 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Nov 1 00:08:22.693054 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:08:22.693060 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Nov 1 00:08:22.693067 kernel: Detected PIPT I-cache on CPU2 Nov 1 00:08:22.693073 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Nov 1 00:08:22.693079 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Nov 1 00:08:22.693086 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:08:22.693092 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Nov 1 00:08:22.693098 kernel: Detected PIPT I-cache on CPU3 Nov 1 00:08:22.693106 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Nov 1 00:08:22.693112 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Nov 1 00:08:22.693118 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:08:22.693125 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Nov 1 00:08:22.693135 kernel: smp: Brought up 1 node, 4 CPUs Nov 1 00:08:22.693142 kernel: SMP: Total of 4 processors activated. Nov 1 00:08:22.693149 kernel: CPU features: detected: 32-bit EL0 Support Nov 1 00:08:22.693155 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Nov 1 00:08:22.693162 kernel: CPU features: detected: Common not Private translations Nov 1 00:08:22.693168 kernel: CPU features: detected: CRC32 instructions Nov 1 00:08:22.693181 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Nov 1 00:08:22.693188 kernel: CPU features: detected: LSE atomic instructions Nov 1 00:08:22.693196 kernel: CPU features: detected: Privileged Access Never Nov 1 00:08:22.693203 kernel: CPU features: detected: RAS Extension Support Nov 1 00:08:22.693209 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Nov 1 00:08:22.693216 kernel: CPU: All CPU(s) started at EL1 Nov 1 00:08:22.693223 kernel: alternatives: patching kernel code Nov 1 00:08:22.693230 kernel: devtmpfs: initialized Nov 1 00:08:22.693236 kernel: KASLR enabled Nov 1 00:08:22.693243 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:08:22.693250 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Nov 1 00:08:22.693256 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:08:22.693263 kernel: SMBIOS 3.0.0 present. Nov 1 00:08:22.693269 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Nov 1 00:08:22.693276 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:08:22.693283 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Nov 1 00:08:22.693290 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Nov 1 00:08:22.693297 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Nov 1 00:08:22.693304 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:08:22.693311 kernel: audit: type=2000 audit(0.032:1): state=initialized audit_enabled=0 res=1 Nov 1 00:08:22.693317 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:08:22.693324 kernel: cpuidle: using governor menu Nov 1 00:08:22.693330 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Nov 1 00:08:22.693337 kernel: ASID allocator initialised with 32768 entries Nov 1 00:08:22.693343 kernel: ACPI: bus type PCI registered Nov 1 00:08:22.693351 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:08:22.693357 kernel: Serial: AMBA PL011 UART driver Nov 1 00:08:22.693364 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:08:22.693371 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Nov 1 00:08:22.693377 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:08:22.693384 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Nov 1 00:08:22.693390 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:08:22.693397 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Nov 1 00:08:22.693403 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:08:22.693411 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:08:22.693417 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:08:22.693424 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:08:22.693430 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:08:22.693437 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:08:22.693444 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:08:22.693450 kernel: ACPI: Interpreter enabled Nov 1 00:08:22.693457 kernel: ACPI: Using GIC for interrupt routing Nov 1 00:08:22.693463 kernel: ACPI: MCFG table detected, 1 entries Nov 1 00:08:22.693471 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Nov 1 00:08:22.693478 kernel: printk: console [ttyAMA0] enabled Nov 1 00:08:22.693484 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Nov 1 00:08:22.693612 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Nov 1 00:08:22.693679 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Nov 1 00:08:22.693739 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Nov 1 00:08:22.693810 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Nov 1 00:08:22.693873 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Nov 1 00:08:22.693882 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Nov 1 00:08:22.693888 kernel: PCI host bridge to bus 0000:00 Nov 1 00:08:22.693955 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Nov 1 00:08:22.694010 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Nov 1 00:08:22.694064 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Nov 1 00:08:22.694117 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Nov 1 00:08:22.694200 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Nov 1 00:08:22.694299 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Nov 1 00:08:22.694369 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Nov 1 00:08:22.694431 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Nov 1 00:08:22.694492 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Nov 1 00:08:22.694553 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Nov 1 00:08:22.694626 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Nov 1 00:08:22.694696 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Nov 1 00:08:22.694753 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Nov 1 00:08:22.694817 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Nov 1 00:08:22.694874 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Nov 1 00:08:22.694882 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Nov 1 00:08:22.694889 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Nov 1 00:08:22.694896 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Nov 1 00:08:22.694904 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Nov 1 00:08:22.694911 kernel: iommu: Default domain type: Translated Nov 1 00:08:22.694918 kernel: iommu: DMA domain TLB invalidation policy: strict mode Nov 1 00:08:22.694924 kernel: vgaarb: loaded Nov 1 00:08:22.694931 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:08:22.694938 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:08:22.694945 kernel: PTP clock support registered Nov 1 00:08:22.694951 kernel: Registered efivars operations Nov 1 00:08:22.694958 kernel: clocksource: Switched to clocksource arch_sys_counter Nov 1 00:08:22.694965 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:08:22.694974 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:08:22.694980 kernel: pnp: PnP ACPI init Nov 1 00:08:22.695051 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Nov 1 00:08:22.695062 kernel: pnp: PnP ACPI: found 1 devices Nov 1 00:08:22.695068 kernel: NET: Registered PF_INET protocol family Nov 1 00:08:22.695075 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:08:22.695082 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Nov 1 00:08:22.695089 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:08:22.695100 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:08:22.695107 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Nov 1 00:08:22.695114 kernel: TCP: Hash tables configured (established 32768 bind 32768) Nov 1 00:08:22.695121 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:08:22.695128 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:08:22.695134 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:08:22.695141 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:08:22.695147 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Nov 1 00:08:22.695154 kernel: kvm [1]: HYP mode not available Nov 1 00:08:22.695162 kernel: Initialise system trusted keyrings Nov 1 00:08:22.695168 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Nov 1 00:08:22.695183 kernel: Key type asymmetric registered Nov 1 00:08:22.695190 kernel: Asymmetric key parser 'x509' registered Nov 1 00:08:22.695197 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:08:22.695203 kernel: io scheduler mq-deadline registered Nov 1 00:08:22.695210 kernel: io scheduler kyber registered Nov 1 00:08:22.695216 kernel: io scheduler bfq registered Nov 1 00:08:22.695223 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Nov 1 00:08:22.695231 kernel: ACPI: button: Power Button [PWRB] Nov 1 00:08:22.695238 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Nov 1 00:08:22.695306 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Nov 1 00:08:22.695315 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:08:22.695321 kernel: thunder_xcv, ver 1.0 Nov 1 00:08:22.695328 kernel: thunder_bgx, ver 1.0 Nov 1 00:08:22.695334 kernel: nicpf, ver 1.0 Nov 1 00:08:22.695341 kernel: nicvf, ver 1.0 Nov 1 00:08:22.695410 kernel: rtc-efi rtc-efi.0: registered as rtc0 Nov 1 00:08:22.695470 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-11-01T00:08:22 UTC (1761955702) Nov 1 00:08:22.695479 kernel: hid: raw HID events driver (C) Jiri Kosina Nov 1 00:08:22.695486 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:08:22.695493 kernel: Segment Routing with IPv6 Nov 1 00:08:22.695499 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:08:22.695506 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:08:22.695512 kernel: Key type dns_resolver registered Nov 1 00:08:22.695519 kernel: registered taskstats version 1 Nov 1 00:08:22.695527 kernel: Loading compiled-in X.509 certificates Nov 1 00:08:22.695534 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 4aa5071b9a6f96878595e36d4bd5862a671c915d' Nov 1 00:08:22.695540 kernel: Key type .fscrypt registered Nov 1 00:08:22.695547 kernel: Key type fscrypt-provisioning registered Nov 1 00:08:22.695553 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:08:22.695565 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:08:22.695572 kernel: ima: No architecture policies found Nov 1 00:08:22.695578 kernel: clk: Disabling unused clocks Nov 1 00:08:22.695585 kernel: Freeing unused kernel memory: 36416K Nov 1 00:08:22.695593 kernel: Run /init as init process Nov 1 00:08:22.695600 kernel: with arguments: Nov 1 00:08:22.695606 kernel: /init Nov 1 00:08:22.695613 kernel: with environment: Nov 1 00:08:22.695619 kernel: HOME=/ Nov 1 00:08:22.695625 kernel: TERM=linux Nov 1 00:08:22.695632 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:08:22.695640 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:08:22.695650 systemd[1]: Detected virtualization kvm. Nov 1 00:08:22.695658 systemd[1]: Detected architecture arm64. Nov 1 00:08:22.695664 systemd[1]: Running in initrd. Nov 1 00:08:22.695671 systemd[1]: No hostname configured, using default hostname. Nov 1 00:08:22.695678 systemd[1]: Hostname set to . Nov 1 00:08:22.695686 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:08:22.695693 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:08:22.695700 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:08:22.695708 systemd[1]: Reached target cryptsetup.target. Nov 1 00:08:22.695715 systemd[1]: Reached target paths.target. Nov 1 00:08:22.695723 systemd[1]: Reached target slices.target. Nov 1 00:08:22.695730 systemd[1]: Reached target swap.target. Nov 1 00:08:22.695744 systemd[1]: Reached target timers.target. Nov 1 00:08:22.695753 systemd[1]: Listening on iscsid.socket. Nov 1 00:08:22.695761 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:08:22.695786 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:08:22.695795 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:08:22.695802 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:08:22.695811 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:08:22.695818 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:08:22.695826 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:08:22.695833 systemd[1]: Reached target sockets.target. Nov 1 00:08:22.695840 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:08:22.695847 systemd[1]: Finished network-cleanup.service. Nov 1 00:08:22.695856 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:08:22.695863 systemd[1]: Starting systemd-journald.service... Nov 1 00:08:22.695870 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:08:22.695877 systemd[1]: Starting systemd-resolved.service... Nov 1 00:08:22.695884 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:08:22.695891 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:08:22.695899 kernel: audit: type=1130 audit(1761955702.691:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.695906 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:08:22.695913 kernel: audit: type=1130 audit(1761955702.695:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.695926 systemd-journald[291]: Journal started Nov 1 00:08:22.695965 systemd-journald[291]: Runtime Journal (/run/log/journal/faa444b0e3524414bab89442d12df562) is 6.0M, max 48.7M, 42.6M free. Nov 1 00:08:22.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.707057 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:08:22.707099 systemd[1]: Started systemd-journald.service. Nov 1 00:08:22.707114 kernel: audit: type=1130 audit(1761955702.702:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.707126 kernel: audit: type=1130 audit(1761955702.705:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.699212 systemd-modules-load[292]: Inserted module 'overlay' Nov 1 00:08:22.714637 kernel: audit: type=1130 audit(1761955702.710:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.702849 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:08:22.706946 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:08:22.709907 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:08:22.713831 systemd-resolved[293]: Positive Trust Anchors: Nov 1 00:08:22.713838 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:08:22.713865 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:08:22.718031 systemd-resolved[293]: Defaulting to hostname 'linux'. Nov 1 00:08:22.729485 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:08:22.729506 kernel: audit: type=1130 audit(1761955702.728:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.720300 systemd[1]: Started systemd-resolved.service. Nov 1 00:08:22.729685 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:08:22.736737 kernel: audit: type=1130 audit(1761955702.733:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.733588 systemd[1]: Reached target nss-lookup.target. Nov 1 00:08:22.738334 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:08:22.740344 kernel: Bridge firewalling registered Nov 1 00:08:22.739603 systemd-modules-load[292]: Inserted module 'br_netfilter' Nov 1 00:08:22.747264 dracut-cmdline[307]: dracut-dracut-053 Nov 1 00:08:22.749448 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:08:22.755796 kernel: SCSI subsystem initialized Nov 1 00:08:22.764634 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:08:22.764665 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:08:22.764675 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:08:22.766715 systemd-modules-load[292]: Inserted module 'dm_multipath' Nov 1 00:08:22.767507 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:08:22.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.769197 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:08:22.773170 kernel: audit: type=1130 audit(1761955702.768:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.778396 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:08:22.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.782791 kernel: audit: type=1130 audit(1761955702.778:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.811793 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:08:22.823795 kernel: iscsi: registered transport (tcp) Nov 1 00:08:22.838795 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:08:22.838813 kernel: QLogic iSCSI HBA Driver Nov 1 00:08:22.872120 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:08:22.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:22.873849 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:08:22.915807 kernel: raid6: neonx8 gen() 13664 MB/s Nov 1 00:08:22.932795 kernel: raid6: neonx8 xor() 10751 MB/s Nov 1 00:08:22.949796 kernel: raid6: neonx4 gen() 13444 MB/s Nov 1 00:08:22.966791 kernel: raid6: neonx4 xor() 11108 MB/s Nov 1 00:08:22.983794 kernel: raid6: neonx2 gen() 12864 MB/s Nov 1 00:08:23.000791 kernel: raid6: neonx2 xor() 10220 MB/s Nov 1 00:08:23.017791 kernel: raid6: neonx1 gen() 10532 MB/s Nov 1 00:08:23.034796 kernel: raid6: neonx1 xor() 8698 MB/s Nov 1 00:08:23.051796 kernel: raid6: int64x8 gen() 6222 MB/s Nov 1 00:08:23.068792 kernel: raid6: int64x8 xor() 3519 MB/s Nov 1 00:08:23.085791 kernel: raid6: int64x4 gen() 7187 MB/s Nov 1 00:08:23.102794 kernel: raid6: int64x4 xor() 3821 MB/s Nov 1 00:08:23.119789 kernel: raid6: int64x2 gen() 6120 MB/s Nov 1 00:08:23.136792 kernel: raid6: int64x2 xor() 3295 MB/s Nov 1 00:08:23.153791 kernel: raid6: int64x1 gen() 5015 MB/s Nov 1 00:08:23.170960 kernel: raid6: int64x1 xor() 2617 MB/s Nov 1 00:08:23.170980 kernel: raid6: using algorithm neonx8 gen() 13664 MB/s Nov 1 00:08:23.170989 kernel: raid6: .... xor() 10751 MB/s, rmw enabled Nov 1 00:08:23.172129 kernel: raid6: using neon recovery algorithm Nov 1 00:08:23.182842 kernel: xor: measuring software checksum speed Nov 1 00:08:23.182870 kernel: 8regs : 16530 MB/sec Nov 1 00:08:23.184178 kernel: 32regs : 20697 MB/sec Nov 1 00:08:23.184189 kernel: arm64_neon : 25672 MB/sec Nov 1 00:08:23.184197 kernel: xor: using function: arm64_neon (25672 MB/sec) Nov 1 00:08:23.236800 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Nov 1 00:08:23.246840 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:08:23.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:23.247000 audit: BPF prog-id=7 op=LOAD Nov 1 00:08:23.247000 audit: BPF prog-id=8 op=LOAD Nov 1 00:08:23.248759 systemd[1]: Starting systemd-udevd.service... Nov 1 00:08:23.260555 systemd-udevd[490]: Using default interface naming scheme 'v252'. Nov 1 00:08:23.263940 systemd[1]: Started systemd-udevd.service. Nov 1 00:08:23.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:23.265534 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:08:23.276608 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Nov 1 00:08:23.303128 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:08:23.304749 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:08:23.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:23.338112 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:08:23.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:23.366248 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Nov 1 00:08:23.370139 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Nov 1 00:08:23.370155 kernel: GPT:9289727 != 19775487 Nov 1 00:08:23.370179 kernel: GPT:Alternate GPT header not at the end of the disk. Nov 1 00:08:23.370190 kernel: GPT:9289727 != 19775487 Nov 1 00:08:23.370198 kernel: GPT: Use GNU Parted to correct GPT errors. Nov 1 00:08:23.370206 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:08:23.385804 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (549) Nov 1 00:08:23.386045 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:08:23.391459 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:08:23.394343 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:08:23.395468 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:08:23.403998 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:08:23.406505 systemd[1]: Starting disk-uuid.service... Nov 1 00:08:23.412438 disk-uuid[561]: Primary Header is updated. Nov 1 00:08:23.412438 disk-uuid[561]: Secondary Entries is updated. Nov 1 00:08:23.412438 disk-uuid[561]: Secondary Header is updated. Nov 1 00:08:23.416794 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:08:23.419787 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:08:23.422797 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:08:24.422374 disk-uuid[562]: The operation has completed successfully. Nov 1 00:08:24.423582 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Nov 1 00:08:24.445682 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:08:24.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.445787 systemd[1]: Finished disk-uuid.service. Nov 1 00:08:24.447391 systemd[1]: Starting verity-setup.service... Nov 1 00:08:24.459863 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Nov 1 00:08:24.478631 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:08:24.480960 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:08:24.482745 systemd[1]: Finished verity-setup.service. Nov 1 00:08:24.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.528636 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:08:24.530100 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:08:24.529603 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:08:24.530348 systemd[1]: Starting ignition-setup.service... Nov 1 00:08:24.532901 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:08:24.542860 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:08:24.542901 kernel: BTRFS info (device vda6): using free space tree Nov 1 00:08:24.542911 kernel: BTRFS info (device vda6): has skinny extents Nov 1 00:08:24.554920 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:08:24.560665 systemd[1]: Finished ignition-setup.service. Nov 1 00:08:24.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.562445 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:08:24.615331 ignition[657]: Ignition 2.14.0 Nov 1 00:08:24.615345 ignition[657]: Stage: fetch-offline Nov 1 00:08:24.615396 ignition[657]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:08:24.615406 ignition[657]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:08:24.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.619698 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:08:24.615568 ignition[657]: parsed url from cmdline: "" Nov 1 00:08:24.615572 ignition[657]: no config URL provided Nov 1 00:08:24.615576 ignition[657]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:08:24.622000 audit: BPF prog-id=9 op=LOAD Nov 1 00:08:24.622804 systemd[1]: Starting systemd-networkd.service... Nov 1 00:08:24.615584 ignition[657]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:08:24.615604 ignition[657]: op(1): [started] loading QEMU firmware config module Nov 1 00:08:24.615608 ignition[657]: op(1): executing: "modprobe" "qemu_fw_cfg" Nov 1 00:08:24.621203 ignition[657]: op(1): [finished] loading QEMU firmware config module Nov 1 00:08:24.645881 systemd-networkd[741]: lo: Link UP Nov 1 00:08:24.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.645894 systemd-networkd[741]: lo: Gained carrier Nov 1 00:08:24.646305 systemd-networkd[741]: Enumeration completed Nov 1 00:08:24.646499 systemd-networkd[741]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:08:24.646827 systemd[1]: Started systemd-networkd.service. Nov 1 00:08:24.648035 systemd[1]: Reached target network.target. Nov 1 00:08:24.648289 systemd-networkd[741]: eth0: Link UP Nov 1 00:08:24.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.648293 systemd-networkd[741]: eth0: Gained carrier Nov 1 00:08:24.649628 systemd[1]: Starting iscsiuio.service... Nov 1 00:08:24.656559 systemd[1]: Started iscsiuio.service. Nov 1 00:08:24.658197 systemd[1]: Starting iscsid.service... Nov 1 00:08:24.662503 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:08:24.662503 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:08:24.662503 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:08:24.662503 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:08:24.662503 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:08:24.662503 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:08:24.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.664313 systemd[1]: Started iscsid.service. Nov 1 00:08:24.665907 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:08:24.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.674872 systemd-networkd[741]: eth0: DHCPv4 address 10.0.0.24/16, gateway 10.0.0.1 acquired from 10.0.0.1 Nov 1 00:08:24.676900 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:08:24.677961 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:08:24.678973 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:08:24.681267 systemd[1]: Reached target remote-fs.target. Nov 1 00:08:24.683519 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:08:24.691257 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:08:24.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.703050 ignition[657]: parsing config with SHA512: ac6b4ca788628f40d754b7b37024eb7319c9649c80f744bbe1ca953c8d18cc2749b75857360d5b8a9be676de9acf330a4810e8b876017ed8554225eb1735d1ff Nov 1 00:08:24.710127 unknown[657]: fetched base config from "system" Nov 1 00:08:24.710140 unknown[657]: fetched user config from "qemu" Nov 1 00:08:24.710639 ignition[657]: fetch-offline: fetch-offline passed Nov 1 00:08:24.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.711947 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:08:24.710696 ignition[657]: Ignition finished successfully Nov 1 00:08:24.713531 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Nov 1 00:08:24.714355 systemd[1]: Starting ignition-kargs.service... Nov 1 00:08:24.722983 ignition[761]: Ignition 2.14.0 Nov 1 00:08:24.722993 ignition[761]: Stage: kargs Nov 1 00:08:24.723086 ignition[761]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:08:24.725365 systemd[1]: Finished ignition-kargs.service. Nov 1 00:08:24.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.723096 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:08:24.723921 ignition[761]: kargs: kargs passed Nov 1 00:08:24.727849 systemd[1]: Starting ignition-disks.service... Nov 1 00:08:24.723967 ignition[761]: Ignition finished successfully Nov 1 00:08:24.734688 ignition[767]: Ignition 2.14.0 Nov 1 00:08:24.734698 ignition[767]: Stage: disks Nov 1 00:08:24.734819 ignition[767]: no configs at "/usr/lib/ignition/base.d" Nov 1 00:08:24.734829 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:08:24.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.736513 systemd[1]: Finished ignition-disks.service. Nov 1 00:08:24.735658 ignition[767]: disks: disks passed Nov 1 00:08:24.738151 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:08:24.735704 ignition[767]: Ignition finished successfully Nov 1 00:08:24.739820 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:08:24.741369 systemd[1]: Reached target local-fs.target. Nov 1 00:08:24.742677 systemd[1]: Reached target sysinit.target. Nov 1 00:08:24.744269 systemd[1]: Reached target basic.target. Nov 1 00:08:24.746538 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:08:24.757698 systemd-fsck[775]: ROOT: clean, 637/553520 files, 56031/553472 blocks Nov 1 00:08:24.787625 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:08:24.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.791489 systemd[1]: Mounting sysroot.mount... Nov 1 00:08:24.798801 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:08:24.798977 systemd[1]: Mounted sysroot.mount. Nov 1 00:08:24.799824 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:08:24.802312 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:08:24.803210 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Nov 1 00:08:24.803250 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:08:24.803273 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:08:24.805214 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:08:24.807260 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:08:24.811794 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:08:24.815490 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:08:24.819957 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:08:24.823809 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:08:24.850584 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:08:24.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.852412 systemd[1]: Starting ignition-mount.service... Nov 1 00:08:24.853867 systemd[1]: Starting sysroot-boot.service... Nov 1 00:08:24.858705 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Nov 1 00:08:24.868626 ignition[828]: INFO : Ignition 2.14.0 Nov 1 00:08:24.868626 ignition[828]: INFO : Stage: mount Nov 1 00:08:24.870271 ignition[828]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:08:24.870271 ignition[828]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:08:24.870271 ignition[828]: INFO : mount: mount passed Nov 1 00:08:24.870271 ignition[828]: INFO : Ignition finished successfully Nov 1 00:08:24.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:24.870015 systemd[1]: Finished sysroot-boot.service. Nov 1 00:08:24.871689 systemd[1]: Finished ignition-mount.service. Nov 1 00:08:25.490451 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:08:25.496804 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (836) Nov 1 00:08:25.496848 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:08:25.499207 kernel: BTRFS info (device vda6): using free space tree Nov 1 00:08:25.499222 kernel: BTRFS info (device vda6): has skinny extents Nov 1 00:08:25.502028 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:08:25.503689 systemd[1]: Starting ignition-files.service... Nov 1 00:08:25.517774 ignition[856]: INFO : Ignition 2.14.0 Nov 1 00:08:25.517774 ignition[856]: INFO : Stage: files Nov 1 00:08:25.519519 ignition[856]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:08:25.519519 ignition[856]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:08:25.519519 ignition[856]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:08:25.523414 ignition[856]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:08:25.523414 ignition[856]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:08:25.526339 ignition[856]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:08:25.526339 ignition[856]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:08:25.529145 ignition[856]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:08:25.529145 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Nov 1 00:08:25.529145 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Nov 1 00:08:25.526500 unknown[856]: wrote ssh authorized keys file for user: core Nov 1 00:08:25.585078 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Nov 1 00:08:25.663969 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:08:25.666066 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:08:25.682035 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:08:25.682035 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:08:25.682035 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:08:25.682035 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:08:25.682035 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Nov 1 00:08:26.035695 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Nov 1 00:08:26.156931 systemd-networkd[741]: eth0: Gained IPv6LL Nov 1 00:08:26.368712 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:08:26.368712 ignition[856]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Nov 1 00:08:26.372204 ignition[856]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Nov 1 00:08:26.421213 ignition[856]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Nov 1 00:08:26.423618 ignition[856]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Nov 1 00:08:26.423618 ignition[856]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:08:26.423618 ignition[856]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:08:26.423618 ignition[856]: INFO : files: files passed Nov 1 00:08:26.423618 ignition[856]: INFO : Ignition finished successfully Nov 1 00:08:26.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.425374 systemd[1]: Finished ignition-files.service. Nov 1 00:08:26.428478 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:08:26.434900 initrd-setup-root-after-ignition[881]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Nov 1 00:08:26.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.430010 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:08:26.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.439667 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:08:26.430635 systemd[1]: Starting ignition-quench.service... Nov 1 00:08:26.433618 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:08:26.433698 systemd[1]: Finished ignition-quench.service. Nov 1 00:08:26.436423 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:08:26.437787 systemd[1]: Reached target ignition-complete.target. Nov 1 00:08:26.441117 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:08:26.453427 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:08:26.453518 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:08:26.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.455356 systemd[1]: Reached target initrd-fs.target. Nov 1 00:08:26.456587 systemd[1]: Reached target initrd.target. Nov 1 00:08:26.457954 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:08:26.458640 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:08:26.468615 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:08:26.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.470199 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:08:26.478047 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:08:26.478949 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:08:26.480411 systemd[1]: Stopped target timers.target. Nov 1 00:08:26.481744 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:08:26.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.481862 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:08:26.483210 systemd[1]: Stopped target initrd.target. Nov 1 00:08:26.484585 systemd[1]: Stopped target basic.target. Nov 1 00:08:26.485884 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:08:26.487307 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:08:26.488701 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:08:26.490275 systemd[1]: Stopped target remote-fs.target. Nov 1 00:08:26.491614 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:08:26.493100 systemd[1]: Stopped target sysinit.target. Nov 1 00:08:26.494394 systemd[1]: Stopped target local-fs.target. Nov 1 00:08:26.495702 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:08:26.497049 systemd[1]: Stopped target swap.target. Nov 1 00:08:26.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.498266 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:08:26.498367 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:08:26.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.499678 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:08:26.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.500849 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:08:26.500948 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:08:26.502532 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:08:26.502627 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:08:26.503935 systemd[1]: Stopped target paths.target. Nov 1 00:08:26.505184 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:08:26.506824 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:08:26.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.508646 systemd[1]: Stopped target slices.target. Nov 1 00:08:26.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.510031 systemd[1]: Stopped target sockets.target. Nov 1 00:08:26.511335 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:08:26.517540 iscsid[746]: iscsid shutting down. Nov 1 00:08:26.511442 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:08:26.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.513142 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:08:26.513244 systemd[1]: Stopped ignition-files.service. Nov 1 00:08:26.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.524504 ignition[897]: INFO : Ignition 2.14.0 Nov 1 00:08:26.524504 ignition[897]: INFO : Stage: umount Nov 1 00:08:26.524504 ignition[897]: INFO : no configs at "/usr/lib/ignition/base.d" Nov 1 00:08:26.524504 ignition[897]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Nov 1 00:08:26.524504 ignition[897]: INFO : umount: umount passed Nov 1 00:08:26.524504 ignition[897]: INFO : Ignition finished successfully Nov 1 00:08:26.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.515373 systemd[1]: Stopping ignition-mount.service... Nov 1 00:08:26.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.516642 systemd[1]: Stopping iscsid.service... Nov 1 00:08:26.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.518035 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:08:26.518144 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:08:26.520170 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:08:26.520864 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:08:26.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.520995 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:08:26.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.521946 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:08:26.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.522031 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:08:26.525107 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:08:26.525208 systemd[1]: Stopped iscsid.service. Nov 1 00:08:26.526465 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:08:26.526528 systemd[1]: Closed iscsid.socket. Nov 1 00:08:26.527557 systemd[1]: Stopping iscsiuio.service... Nov 1 00:08:26.529044 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:08:26.529121 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:08:26.531480 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:08:26.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.531836 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:08:26.555000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.531915 systemd[1]: Stopped iscsiuio.service. Nov 1 00:08:26.533736 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:08:26.533824 systemd[1]: Stopped ignition-mount.service. Nov 1 00:08:26.535814 systemd[1]: Stopped target network.target. Nov 1 00:08:26.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.537553 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:08:26.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.563000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:08:26.537592 systemd[1]: Closed iscsiuio.socket. Nov 1 00:08:26.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.538920 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:08:26.538966 systemd[1]: Stopped ignition-disks.service. Nov 1 00:08:26.540287 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:08:26.540326 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:08:26.541908 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:08:26.541945 systemd[1]: Stopped ignition-setup.service. Nov 1 00:08:26.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.543548 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:08:26.545100 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:08:26.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.550850 systemd-networkd[741]: eth0: DHCPv6 lease lost Nov 1 00:08:26.575000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:08:26.551814 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:08:26.551903 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:08:26.554728 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:08:26.554856 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:08:26.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.556364 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:08:26.556390 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:08:26.558141 systemd[1]: Stopping network-cleanup.service... Nov 1 00:08:26.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.559649 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:08:26.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.559704 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:08:26.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.561379 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:08:26.561419 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:08:26.589000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.563738 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:08:26.563788 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:08:26.567504 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:08:26.569197 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:08:26.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.569635 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:08:26.569715 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:08:26.571271 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:08:26.571316 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:08:26.573862 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:08:26.573948 systemd[1]: Stopped network-cleanup.service. Nov 1 00:08:26.578622 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:08:26.578729 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:08:26.580394 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:08:26.580430 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:08:26.581583 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:08:26.581616 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:08:26.583193 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:08:26.583233 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:08:26.584544 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:08:26.584583 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:08:26.585924 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:08:26.585963 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:08:26.613971 systemd-journald[291]: Received SIGTERM from PID 1 (n/a). Nov 1 00:08:26.588167 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:08:26.588972 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:08:26.589029 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:08:26.593195 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:08:26.593279 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:08:26.594898 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:08:26.597308 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:08:26.603273 systemd[1]: Switching root. Nov 1 00:08:26.620830 systemd-journald[291]: Journal stopped Nov 1 00:08:28.606244 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:08:28.606306 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:08:28.606319 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:08:28.606328 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:08:28.606340 kernel: SELinux: policy capability open_perms=1 Nov 1 00:08:28.606350 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:08:28.606359 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:08:28.606369 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:08:28.606378 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:08:28.606387 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:08:28.606396 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:08:28.606407 systemd[1]: Successfully loaded SELinux policy in 33.752ms. Nov 1 00:08:28.606433 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.753ms. Nov 1 00:08:28.606445 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:08:28.606456 systemd[1]: Detected virtualization kvm. Nov 1 00:08:28.606466 systemd[1]: Detected architecture arm64. Nov 1 00:08:28.606476 systemd[1]: Detected first boot. Nov 1 00:08:28.606487 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:08:28.606497 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:08:28.606507 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:08:28.606519 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:08:28.606530 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:08:28.606541 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:08:28.606558 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:08:28.606569 kernel: kauditd_printk_skb: 82 callbacks suppressed Nov 1 00:08:28.606580 kernel: audit: type=1334 audit(1761955708.472:86): prog-id=12 op=LOAD Nov 1 00:08:28.606590 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:08:28.606600 kernel: audit: type=1334 audit(1761955708.472:87): prog-id=3 op=UNLOAD Nov 1 00:08:28.606610 kernel: audit: type=1334 audit(1761955708.472:88): prog-id=13 op=LOAD Nov 1 00:08:28.606619 kernel: audit: type=1334 audit(1761955708.472:89): prog-id=14 op=LOAD Nov 1 00:08:28.606628 kernel: audit: type=1334 audit(1761955708.472:90): prog-id=4 op=UNLOAD Nov 1 00:08:28.606638 kernel: audit: type=1334 audit(1761955708.472:91): prog-id=5 op=UNLOAD Nov 1 00:08:28.606647 kernel: audit: type=1334 audit(1761955708.472:92): prog-id=15 op=LOAD Nov 1 00:08:28.606658 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:08:28.606669 kernel: audit: type=1334 audit(1761955708.472:93): prog-id=12 op=UNLOAD Nov 1 00:08:28.606679 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:08:28.606689 kernel: audit: type=1334 audit(1761955708.472:94): prog-id=16 op=LOAD Nov 1 00:08:28.606700 kernel: audit: type=1334 audit(1761955708.472:95): prog-id=17 op=LOAD Nov 1 00:08:28.606711 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:08:28.606722 systemd[1]: Created slice system-getty.slice. Nov 1 00:08:28.606732 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:08:28.606744 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:08:28.606756 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:08:28.606791 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:08:28.606803 systemd[1]: Created slice user.slice. Nov 1 00:08:28.606814 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:08:28.606825 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:08:28.606835 systemd[1]: Set up automount boot.automount. Nov 1 00:08:28.606845 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:08:28.606856 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:08:28.606866 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:08:28.606878 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:08:28.606888 systemd[1]: Reached target integritysetup.target. Nov 1 00:08:28.606899 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:08:28.606910 systemd[1]: Reached target remote-fs.target. Nov 1 00:08:28.606921 systemd[1]: Reached target slices.target. Nov 1 00:08:28.606931 systemd[1]: Reached target swap.target. Nov 1 00:08:28.606941 systemd[1]: Reached target torcx.target. Nov 1 00:08:28.606951 systemd[1]: Reached target veritysetup.target. Nov 1 00:08:28.606966 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:08:28.606977 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:08:28.606988 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:08:28.606999 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:08:28.607009 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:08:28.607019 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:08:28.607029 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:08:28.607040 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:08:28.607051 systemd[1]: Mounting media.mount... Nov 1 00:08:28.607061 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:08:28.607071 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:08:28.607083 systemd[1]: Mounting tmp.mount... Nov 1 00:08:28.607093 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:08:28.607104 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:08:28.607115 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:08:28.607126 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:08:28.607144 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:08:28.607156 systemd[1]: Starting modprobe@drm.service... Nov 1 00:08:28.607167 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:08:28.607178 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:08:28.607190 systemd[1]: Starting modprobe@loop.service... Nov 1 00:08:28.607201 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:08:28.607212 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:08:28.607223 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:08:28.607233 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:08:28.607244 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:08:28.607254 kernel: fuse: init (API version 7.34) Nov 1 00:08:28.607263 systemd[1]: Stopped systemd-journald.service. Nov 1 00:08:28.607274 kernel: loop: module loaded Nov 1 00:08:28.607285 systemd[1]: Starting systemd-journald.service... Nov 1 00:08:28.607295 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:08:28.607305 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:08:28.607316 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:08:28.607326 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:08:28.607337 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:08:28.607348 systemd[1]: Stopped verity-setup.service. Nov 1 00:08:28.607358 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:08:28.607368 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:08:28.607380 systemd[1]: Mounted media.mount. Nov 1 00:08:28.607390 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:08:28.607403 systemd-journald[1005]: Journal started Nov 1 00:08:28.607446 systemd-journald[1005]: Runtime Journal (/run/log/journal/faa444b0e3524414bab89442d12df562) is 6.0M, max 48.7M, 42.6M free. Nov 1 00:08:26.669000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:08:26.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:08:26.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:08:26.751000 audit: BPF prog-id=10 op=LOAD Nov 1 00:08:26.751000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:08:26.751000 audit: BPF prog-id=11 op=LOAD Nov 1 00:08:26.751000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:08:26.785000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:08:26.785000 audit[930]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:26.785000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:08:26.786000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:08:26.786000 audit[930]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5979 a2=1ed a3=0 items=2 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:26.786000 audit: CWD cwd="/" Nov 1 00:08:26.786000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:08:26.786000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:08:26.786000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:08:28.472000 audit: BPF prog-id=12 op=LOAD Nov 1 00:08:28.472000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:08:28.472000 audit: BPF prog-id=13 op=LOAD Nov 1 00:08:28.472000 audit: BPF prog-id=14 op=LOAD Nov 1 00:08:28.472000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:08:28.472000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:08:28.472000 audit: BPF prog-id=15 op=LOAD Nov 1 00:08:28.472000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:08:28.472000 audit: BPF prog-id=16 op=LOAD Nov 1 00:08:28.472000 audit: BPF prog-id=17 op=LOAD Nov 1 00:08:28.472000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:08:28.472000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:08:28.473000 audit: BPF prog-id=18 op=LOAD Nov 1 00:08:28.473000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:08:28.473000 audit: BPF prog-id=19 op=LOAD Nov 1 00:08:28.473000 audit: BPF prog-id=20 op=LOAD Nov 1 00:08:28.473000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:08:28.473000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:08:28.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.485000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:08:28.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.581000 audit: BPF prog-id=21 op=LOAD Nov 1 00:08:28.582000 audit: BPF prog-id=22 op=LOAD Nov 1 00:08:28.582000 audit: BPF prog-id=23 op=LOAD Nov 1 00:08:28.582000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:08:28.582000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:08:28.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.605000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:08:28.605000 audit[1005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffe5e717f0 a2=4000 a3=1 items=0 ppid=1 pid=1005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:28.605000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:08:28.470970 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:08:26.784225 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:08:28.470982 systemd[1]: Unnecessary job was removed for dev-vda6.device. Nov 1 00:08:26.784494 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:08:28.474289 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:08:26.784654 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:08:26.784684 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:08:26.784694 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:08:26.784726 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:08:26.784738 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:08:26.784942 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:08:26.784976 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:08:26.784989 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:08:26.785409 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:08:26.785443 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:08:26.785461 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:08:26.785474 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:08:28.609805 systemd[1]: Started systemd-journald.service. Nov 1 00:08:26.785490 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:08:28.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:26.785503 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:08:28.208462 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:28Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:08:28.208710 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:28Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:08:28.208830 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:28Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:08:28.208987 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:28Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:08:28.209038 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:28Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:08:28.209093 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-11-01T00:08:28Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:08:28.610363 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:08:28.611332 systemd[1]: Mounted tmp.mount. Nov 1 00:08:28.612266 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:08:28.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.613395 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:08:28.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.614480 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:08:28.614629 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:08:28.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.615750 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:08:28.615996 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:08:28.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.617021 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:08:28.617179 systemd[1]: Finished modprobe@drm.service. Nov 1 00:08:28.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.618217 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:08:28.618352 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:08:28.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.619553 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:08:28.619695 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:08:28.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.620877 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:08:28.621038 systemd[1]: Finished modprobe@loop.service. Nov 1 00:08:28.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.622106 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:08:28.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.623257 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:08:28.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.624550 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:08:28.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.626016 systemd[1]: Reached target network-pre.target. Nov 1 00:08:28.627892 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:08:28.629819 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:08:28.630566 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:08:28.632408 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:08:28.634562 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:08:28.635547 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:08:28.636684 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:08:28.637574 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:08:28.638606 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:08:28.640487 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:08:28.640651 systemd-journald[1005]: Time spent on flushing to /var/log/journal/faa444b0e3524414bab89442d12df562 is 19.043ms for 1002 entries. Nov 1 00:08:28.640651 systemd-journald[1005]: System Journal (/var/log/journal/faa444b0e3524414bab89442d12df562) is 8.0M, max 195.6M, 187.6M free. Nov 1 00:08:28.678676 systemd-journald[1005]: Received client request to flush runtime journal. Nov 1 00:08:28.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:28.644338 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:08:28.645731 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:08:28.647200 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:08:28.679783 udevadm[1031]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Nov 1 00:08:28.649077 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:08:28.652859 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:08:28.654250 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:08:28.666388 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:08:28.668488 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:08:28.679507 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:08:28.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.011149 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:08:29.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.011000 audit: BPF prog-id=24 op=LOAD Nov 1 00:08:29.011000 audit: BPF prog-id=25 op=LOAD Nov 1 00:08:29.011000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:08:29.011000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:08:29.013341 systemd[1]: Starting systemd-udevd.service... Nov 1 00:08:29.028629 systemd-udevd[1035]: Using default interface naming scheme 'v252'. Nov 1 00:08:29.047906 systemd[1]: Started systemd-udevd.service. Nov 1 00:08:29.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.049000 audit: BPF prog-id=26 op=LOAD Nov 1 00:08:29.053415 systemd[1]: Starting systemd-networkd.service... Nov 1 00:08:29.060000 audit: BPF prog-id=27 op=LOAD Nov 1 00:08:29.060000 audit: BPF prog-id=28 op=LOAD Nov 1 00:08:29.060000 audit: BPF prog-id=29 op=LOAD Nov 1 00:08:29.061840 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:08:29.069873 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Nov 1 00:08:29.088610 systemd[1]: Started systemd-userdbd.service. Nov 1 00:08:29.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.102241 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:08:29.134982 systemd-networkd[1051]: lo: Link UP Nov 1 00:08:29.134991 systemd-networkd[1051]: lo: Gained carrier Nov 1 00:08:29.135387 systemd-networkd[1051]: Enumeration completed Nov 1 00:08:29.135493 systemd[1]: Started systemd-networkd.service. Nov 1 00:08:29.135497 systemd-networkd[1051]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:08:29.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.137562 systemd-networkd[1051]: eth0: Link UP Nov 1 00:08:29.137574 systemd-networkd[1051]: eth0: Gained carrier Nov 1 00:08:29.148192 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:08:29.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.153354 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:08:29.156904 systemd-networkd[1051]: eth0: DHCPv4 address 10.0.0.24/16, gateway 10.0.0.1 acquired from 10.0.0.1 Nov 1 00:08:29.163412 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:08:29.186701 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:08:29.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.187835 systemd[1]: Reached target cryptsetup.target. Nov 1 00:08:29.189731 systemd[1]: Starting lvm2-activation.service... Nov 1 00:08:29.193132 lvm[1069]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:08:29.214551 systemd[1]: Finished lvm2-activation.service. Nov 1 00:08:29.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.215559 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:08:29.216472 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:08:29.216502 systemd[1]: Reached target local-fs.target. Nov 1 00:08:29.217366 systemd[1]: Reached target machines.target. Nov 1 00:08:29.219330 systemd[1]: Starting ldconfig.service... Nov 1 00:08:29.220502 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.220557 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:08:29.221538 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:08:29.223652 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:08:29.228009 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:08:29.230007 systemd[1]: Starting systemd-sysext.service... Nov 1 00:08:29.231151 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1071 (bootctl) Nov 1 00:08:29.232119 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:08:29.245495 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:08:29.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.249886 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:08:29.255572 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:08:29.255853 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:08:29.331799 kernel: loop0: detected capacity change from 0 to 211168 Nov 1 00:08:29.347791 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:08:29.357071 systemd-fsck[1081]: fsck.fat 4.2 (2021-01-31) Nov 1 00:08:29.357071 systemd-fsck[1081]: /dev/vda1: 236 files, 117310/258078 clusters Nov 1 00:08:29.358650 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:08:29.362176 systemd[1]: Mounting boot.mount... Nov 1 00:08:29.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.370922 systemd[1]: Mounted boot.mount. Nov 1 00:08:29.372799 kernel: loop1: detected capacity change from 0 to 211168 Nov 1 00:08:29.380999 (sd-sysext)[1085]: Using extensions 'kubernetes'. Nov 1 00:08:29.381380 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:08:29.381700 (sd-sysext)[1085]: Merged extensions into '/usr'. Nov 1 00:08:29.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.400289 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:08:29.401437 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.402719 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:08:29.404836 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:08:29.406911 systemd[1]: Starting modprobe@loop.service... Nov 1 00:08:29.409020 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.409173 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:08:29.411231 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:08:29.412578 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:08:29.412707 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:08:29.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.414001 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:08:29.414116 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:08:29.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.415379 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:08:29.415493 systemd[1]: Finished modprobe@loop.service. Nov 1 00:08:29.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.416745 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:08:29.416859 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.417875 systemd[1]: Finished systemd-sysext.service. Nov 1 00:08:29.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.419879 systemd[1]: Starting ensure-sysext.service... Nov 1 00:08:29.421786 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:08:29.425907 systemd[1]: Reloading. Nov 1 00:08:29.449776 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:08:29.452852 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:08:29.456637 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:08:29.463156 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-11-01T00:08:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:08:29.463184 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-11-01T00:08:29Z" level=info msg="torcx already run" Nov 1 00:08:29.545262 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:08:29.545282 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:08:29.555304 ldconfig[1070]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:08:29.560804 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:08:29.602000 audit: BPF prog-id=30 op=LOAD Nov 1 00:08:29.602000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:08:29.603000 audit: BPF prog-id=31 op=LOAD Nov 1 00:08:29.603000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:08:29.603000 audit: BPF prog-id=32 op=LOAD Nov 1 00:08:29.603000 audit: BPF prog-id=33 op=LOAD Nov 1 00:08:29.603000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:08:29.603000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:08:29.605000 audit: BPF prog-id=34 op=LOAD Nov 1 00:08:29.605000 audit: BPF prog-id=35 op=LOAD Nov 1 00:08:29.605000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:08:29.605000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:08:29.605000 audit: BPF prog-id=36 op=LOAD Nov 1 00:08:29.605000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:08:29.605000 audit: BPF prog-id=37 op=LOAD Nov 1 00:08:29.605000 audit: BPF prog-id=38 op=LOAD Nov 1 00:08:29.605000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:08:29.605000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:08:29.617165 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.618265 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:08:29.620170 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:08:29.621987 systemd[1]: Starting modprobe@loop.service... Nov 1 00:08:29.622746 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.622902 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:08:29.623647 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:08:29.623788 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:08:29.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.624944 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:08:29.625052 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:08:29.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.626257 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:08:29.626363 systemd[1]: Finished modprobe@loop.service. Nov 1 00:08:29.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.627526 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:08:29.627614 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.628871 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.629948 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:08:29.631832 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:08:29.633753 systemd[1]: Starting modprobe@loop.service... Nov 1 00:08:29.634524 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.634650 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:08:29.635399 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:08:29.635526 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:08:29.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.636759 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:08:29.636888 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:08:29.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.638078 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:08:29.638200 systemd[1]: Finished modprobe@loop.service. Nov 1 00:08:29.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.639401 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:08:29.639491 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.641984 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.643365 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:08:29.645309 systemd[1]: Starting modprobe@drm.service... Nov 1 00:08:29.647094 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:08:29.649073 systemd[1]: Starting modprobe@loop.service... Nov 1 00:08:29.649932 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.650057 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:08:29.651219 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:08:29.653154 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:08:29.653275 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:08:29.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.654498 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:08:29.654608 systemd[1]: Finished modprobe@drm.service. Nov 1 00:08:29.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.655806 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:08:29.655920 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:08:29.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.657097 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:08:29.657220 systemd[1]: Finished modprobe@loop.service. Nov 1 00:08:29.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.659594 systemd[1]: Finished ensure-sysext.service. Nov 1 00:08:29.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.660545 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:08:29.660581 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.663299 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:08:29.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.665312 systemd[1]: Starting audit-rules.service... Nov 1 00:08:29.667210 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:08:29.669154 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:08:29.670000 audit: BPF prog-id=39 op=LOAD Nov 1 00:08:29.671704 systemd[1]: Starting systemd-resolved.service... Nov 1 00:08:29.672000 audit: BPF prog-id=40 op=LOAD Nov 1 00:08:29.674121 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:08:29.676079 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:08:29.677547 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:08:29.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.678921 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:08:29.680000 audit[1173]: SYSTEM_BOOT pid=1173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.686214 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:08:29.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.688387 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:08:29.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:29.697000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:08:29.697000 audit[1183]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd477a0e0 a2=420 a3=0 items=0 ppid=1163 pid=1183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:29.697000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:08:29.699039 augenrules[1183]: No rules Nov 1 00:08:29.699966 systemd[1]: Finished audit-rules.service. Nov 1 00:08:29.719927 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:08:29.720910 systemd-timesyncd[1170]: Contacted time server 10.0.0.1:123 (10.0.0.1). Nov 1 00:08:29.720974 systemd-timesyncd[1170]: Initial clock synchronization to Sat 2025-11-01 00:08:29.900284 UTC. Nov 1 00:08:29.721209 systemd[1]: Reached target time-set.target. Nov 1 00:08:29.721362 systemd-resolved[1167]: Positive Trust Anchors: Nov 1 00:08:29.721372 systemd-resolved[1167]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:08:29.721400 systemd-resolved[1167]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:08:29.734528 systemd-resolved[1167]: Defaulting to hostname 'linux'. Nov 1 00:08:29.735997 systemd[1]: Started systemd-resolved.service. Nov 1 00:08:29.736918 systemd[1]: Reached target network.target. Nov 1 00:08:29.737693 systemd[1]: Reached target nss-lookup.target. Nov 1 00:08:29.741198 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:08:29.741744 systemd[1]: Finished ldconfig.service. Nov 1 00:08:29.742760 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:08:29.744935 systemd[1]: Starting systemd-update-done.service... Nov 1 00:08:29.751384 systemd[1]: Finished systemd-update-done.service. Nov 1 00:08:29.752382 systemd[1]: Reached target sysinit.target. Nov 1 00:08:29.753486 systemd[1]: Started motdgen.path. Nov 1 00:08:29.754251 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:08:29.755587 systemd[1]: Started logrotate.timer. Nov 1 00:08:29.756473 systemd[1]: Started mdadm.timer. Nov 1 00:08:29.757208 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:08:29.758111 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:08:29.758157 systemd[1]: Reached target paths.target. Nov 1 00:08:29.758909 systemd[1]: Reached target timers.target. Nov 1 00:08:29.760016 systemd[1]: Listening on dbus.socket. Nov 1 00:08:29.761880 systemd[1]: Starting docker.socket... Nov 1 00:08:29.765177 systemd[1]: Listening on sshd.socket. Nov 1 00:08:29.766040 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:08:29.766469 systemd[1]: Listening on docker.socket. Nov 1 00:08:29.767459 systemd[1]: Reached target sockets.target. Nov 1 00:08:29.768301 systemd[1]: Reached target basic.target. Nov 1 00:08:29.769115 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.769162 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:08:29.770171 systemd[1]: Starting containerd.service... Nov 1 00:08:29.771961 systemd[1]: Starting dbus.service... Nov 1 00:08:29.773664 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:08:29.775561 systemd[1]: Starting extend-filesystems.service... Nov 1 00:08:29.778208 jq[1195]: false Nov 1 00:08:29.776604 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:08:29.777596 systemd[1]: Starting motdgen.service... Nov 1 00:08:29.779646 systemd[1]: Starting prepare-helm.service... Nov 1 00:08:29.782041 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:08:29.784547 systemd[1]: Starting sshd-keygen.service... Nov 1 00:08:29.787443 systemd[1]: Starting systemd-logind.service... Nov 1 00:08:29.788261 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:08:29.788359 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:08:29.788763 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:08:29.789479 systemd[1]: Starting update-engine.service... Nov 1 00:08:29.791462 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:08:29.800229 extend-filesystems[1196]: Found loop1 Nov 1 00:08:29.800229 extend-filesystems[1196]: Found vda Nov 1 00:08:29.800229 extend-filesystems[1196]: Found vda1 Nov 1 00:08:29.800229 extend-filesystems[1196]: Found vda2 Nov 1 00:08:29.800229 extend-filesystems[1196]: Found vda3 Nov 1 00:08:29.800229 extend-filesystems[1196]: Found usr Nov 1 00:08:29.800229 extend-filesystems[1196]: Found vda4 Nov 1 00:08:29.800229 extend-filesystems[1196]: Found vda6 Nov 1 00:08:29.800229 extend-filesystems[1196]: Found vda7 Nov 1 00:08:29.800229 extend-filesystems[1196]: Found vda9 Nov 1 00:08:29.800229 extend-filesystems[1196]: Checking size of /dev/vda9 Nov 1 00:08:29.811555 jq[1210]: true Nov 1 00:08:29.795458 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:08:29.813202 tar[1214]: linux-arm64/LICENSE Nov 1 00:08:29.813202 tar[1214]: linux-arm64/helm Nov 1 00:08:29.795628 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:08:29.796617 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:08:29.815120 jq[1215]: true Nov 1 00:08:29.796808 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:08:29.837953 extend-filesystems[1196]: Resized partition /dev/vda9 Nov 1 00:08:29.823039 systemd[1]: Started dbus.service. Nov 1 00:08:29.822890 dbus-daemon[1194]: [system] SELinux support is enabled Nov 1 00:08:29.825867 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:08:29.826025 systemd[1]: Finished motdgen.service. Nov 1 00:08:29.826995 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:08:29.827018 systemd[1]: Reached target system-config.target. Nov 1 00:08:29.827940 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:08:29.827958 systemd[1]: Reached target user-config.target. Nov 1 00:08:29.845130 extend-filesystems[1244]: resize2fs 1.46.5 (30-Dec-2021) Nov 1 00:08:29.856807 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Nov 1 00:08:29.864008 update_engine[1208]: I1101 00:08:29.863693 1208 main.cc:92] Flatcar Update Engine starting Nov 1 00:08:29.875455 update_engine[1208]: I1101 00:08:29.866029 1208 update_check_scheduler.cc:74] Next update check in 11m20s Nov 1 00:08:29.866012 systemd[1]: Started update-engine.service. Nov 1 00:08:29.868741 systemd[1]: Started locksmithd.service. Nov 1 00:08:29.877063 env[1216]: time="2025-11-01T00:08:29.877016800Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:08:29.879073 systemd-logind[1206]: Watching system buttons on /dev/input/event0 (Power Button) Nov 1 00:08:29.879282 systemd-logind[1206]: New seat seat0. Nov 1 00:08:29.886544 bash[1241]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:08:29.886870 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:08:29.889321 systemd[1]: Started systemd-logind.service. Nov 1 00:08:29.904794 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Nov 1 00:08:29.904849 env[1216]: time="2025-11-01T00:08:29.903402200Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:08:29.904849 env[1216]: time="2025-11-01T00:08:29.904527320Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:08:29.905071 extend-filesystems[1244]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Nov 1 00:08:29.905071 extend-filesystems[1244]: old_desc_blocks = 1, new_desc_blocks = 1 Nov 1 00:08:29.905071 extend-filesystems[1244]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Nov 1 00:08:29.908706 extend-filesystems[1196]: Resized filesystem in /dev/vda9 Nov 1 00:08:29.910465 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:08:29.910630 systemd[1]: Finished extend-filesystems.service. Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912102280Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912144480Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912370280Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912387440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912400160Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912409440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912480760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912742400Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912900440Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:08:29.913114 env[1216]: time="2025-11-01T00:08:29.912916760Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:08:29.913397 env[1216]: time="2025-11-01T00:08:29.912969040Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:08:29.913397 env[1216]: time="2025-11-01T00:08:29.912979840Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:08:29.917043 env[1216]: time="2025-11-01T00:08:29.917018400Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:08:29.917147 env[1216]: time="2025-11-01T00:08:29.917131240Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:08:29.917226 env[1216]: time="2025-11-01T00:08:29.917211560Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:08:29.917309 env[1216]: time="2025-11-01T00:08:29.917295080Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.917378 env[1216]: time="2025-11-01T00:08:29.917364520Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.917448 env[1216]: time="2025-11-01T00:08:29.917433600Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.917514 env[1216]: time="2025-11-01T00:08:29.917501320Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.917926 env[1216]: time="2025-11-01T00:08:29.917899760Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.918015 env[1216]: time="2025-11-01T00:08:29.917999000Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.918073 env[1216]: time="2025-11-01T00:08:29.918060080Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.918144 env[1216]: time="2025-11-01T00:08:29.918118240Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.918207 env[1216]: time="2025-11-01T00:08:29.918193080Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:08:29.918400 env[1216]: time="2025-11-01T00:08:29.918377960Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:08:29.918552 env[1216]: time="2025-11-01T00:08:29.918532920Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:08:29.918850 env[1216]: time="2025-11-01T00:08:29.918827200Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:08:29.918934 env[1216]: time="2025-11-01T00:08:29.918920640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.918994 env[1216]: time="2025-11-01T00:08:29.918980960Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:08:29.919193 env[1216]: time="2025-11-01T00:08:29.919175640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919279 env[1216]: time="2025-11-01T00:08:29.919262640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919336 env[1216]: time="2025-11-01T00:08:29.919323080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919390 env[1216]: time="2025-11-01T00:08:29.919377320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919444 env[1216]: time="2025-11-01T00:08:29.919431760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919499 env[1216]: time="2025-11-01T00:08:29.919486800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919558 env[1216]: time="2025-11-01T00:08:29.919544480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919614 env[1216]: time="2025-11-01T00:08:29.919600440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919682 env[1216]: time="2025-11-01T00:08:29.919668040Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:08:29.919890 env[1216]: time="2025-11-01T00:08:29.919868920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.919966 env[1216]: time="2025-11-01T00:08:29.919951320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.920039 env[1216]: time="2025-11-01T00:08:29.920025840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.920096 env[1216]: time="2025-11-01T00:08:29.920083880Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:08:29.920170 env[1216]: time="2025-11-01T00:08:29.920153160Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:08:29.920231 env[1216]: time="2025-11-01T00:08:29.920212240Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:08:29.920295 env[1216]: time="2025-11-01T00:08:29.920280960Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:08:29.920379 env[1216]: time="2025-11-01T00:08:29.920365840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:08:29.920664 env[1216]: time="2025-11-01T00:08:29.920610040Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:08:29.921290 env[1216]: time="2025-11-01T00:08:29.921023480Z" level=info msg="Connect containerd service" Nov 1 00:08:29.921290 env[1216]: time="2025-11-01T00:08:29.921080960Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:08:29.921955 env[1216]: time="2025-11-01T00:08:29.921919320Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:08:29.922326 env[1216]: time="2025-11-01T00:08:29.922303200Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:08:29.922494 env[1216]: time="2025-11-01T00:08:29.922475880Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:08:29.922609 env[1216]: time="2025-11-01T00:08:29.922596280Z" level=info msg="containerd successfully booted in 0.049684s" Nov 1 00:08:29.922661 systemd[1]: Started containerd.service. Nov 1 00:08:29.923855 env[1216]: time="2025-11-01T00:08:29.923825000Z" level=info msg="Start subscribing containerd event" Nov 1 00:08:29.923954 env[1216]: time="2025-11-01T00:08:29.923939560Z" level=info msg="Start recovering state" Nov 1 00:08:29.924051 env[1216]: time="2025-11-01T00:08:29.924038800Z" level=info msg="Start event monitor" Nov 1 00:08:29.924117 env[1216]: time="2025-11-01T00:08:29.924104560Z" level=info msg="Start snapshots syncer" Nov 1 00:08:29.924212 env[1216]: time="2025-11-01T00:08:29.924187920Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:08:29.924279 env[1216]: time="2025-11-01T00:08:29.924266080Z" level=info msg="Start streaming server" Nov 1 00:08:29.940969 locksmithd[1247]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:08:30.246011 tar[1214]: linux-arm64/README.md Nov 1 00:08:30.250527 systemd[1]: Finished prepare-helm.service. Nov 1 00:08:30.316987 systemd-networkd[1051]: eth0: Gained IPv6LL Nov 1 00:08:30.318782 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:08:30.320075 systemd[1]: Reached target network-online.target. Nov 1 00:08:30.322553 systemd[1]: Starting kubelet.service... Nov 1 00:08:30.942988 systemd[1]: Started kubelet.service. Nov 1 00:08:31.330144 kubelet[1262]: E1101 00:08:31.330023 1262 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:08:31.332046 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:08:31.332176 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:08:33.352961 sshd_keygen[1211]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:08:33.370401 systemd[1]: Finished sshd-keygen.service. Nov 1 00:08:33.372852 systemd[1]: Starting issuegen.service... Nov 1 00:08:33.377660 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:08:33.377847 systemd[1]: Finished issuegen.service. Nov 1 00:08:33.379952 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:08:33.386015 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:08:33.388184 systemd[1]: Started getty@tty1.service. Nov 1 00:08:33.390191 systemd[1]: Started serial-getty@ttyAMA0.service. Nov 1 00:08:33.391275 systemd[1]: Reached target getty.target. Nov 1 00:08:33.392159 systemd[1]: Reached target multi-user.target. Nov 1 00:08:33.394230 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:08:33.400980 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:08:33.401145 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:08:33.402242 systemd[1]: Startup finished in 588ms (kernel) + 4.079s (initrd) + 6.768s (userspace) = 11.436s. Nov 1 00:08:34.921220 systemd[1]: Created slice system-sshd.slice. Nov 1 00:08:34.922719 systemd[1]: Started sshd@0-10.0.0.24:22-10.0.0.1:55496.service. Nov 1 00:08:34.968516 sshd[1284]: Accepted publickey for core from 10.0.0.1 port 55496 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:08:34.970503 sshd[1284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:08:34.979292 systemd-logind[1206]: New session 1 of user core. Nov 1 00:08:34.980447 systemd[1]: Created slice user-500.slice. Nov 1 00:08:34.981662 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:08:34.990620 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:08:34.992002 systemd[1]: Starting user@500.service... Nov 1 00:08:34.994758 (systemd)[1287]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:08:35.054970 systemd[1287]: Queued start job for default target default.target. Nov 1 00:08:35.055450 systemd[1287]: Reached target paths.target. Nov 1 00:08:35.055481 systemd[1287]: Reached target sockets.target. Nov 1 00:08:35.055493 systemd[1287]: Reached target timers.target. Nov 1 00:08:35.055503 systemd[1287]: Reached target basic.target. Nov 1 00:08:35.055543 systemd[1287]: Reached target default.target. Nov 1 00:08:35.055567 systemd[1287]: Startup finished in 55ms. Nov 1 00:08:35.056055 systemd[1]: Started user@500.service. Nov 1 00:08:35.057006 systemd[1]: Started session-1.scope. Nov 1 00:08:35.109098 systemd[1]: Started sshd@1-10.0.0.24:22-10.0.0.1:55498.service. Nov 1 00:08:35.149044 sshd[1296]: Accepted publickey for core from 10.0.0.1 port 55498 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:08:35.150293 sshd[1296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:08:35.154854 systemd-logind[1206]: New session 2 of user core. Nov 1 00:08:35.155137 systemd[1]: Started session-2.scope. Nov 1 00:08:35.209208 sshd[1296]: pam_unix(sshd:session): session closed for user core Nov 1 00:08:35.212638 systemd[1]: sshd@1-10.0.0.24:22-10.0.0.1:55498.service: Deactivated successfully. Nov 1 00:08:35.213220 systemd[1]: session-2.scope: Deactivated successfully. Nov 1 00:08:35.213735 systemd-logind[1206]: Session 2 logged out. Waiting for processes to exit. Nov 1 00:08:35.214719 systemd[1]: Started sshd@2-10.0.0.24:22-10.0.0.1:55504.service. Nov 1 00:08:35.215404 systemd-logind[1206]: Removed session 2. Nov 1 00:08:35.255143 sshd[1302]: Accepted publickey for core from 10.0.0.1 port 55504 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:08:35.256458 sshd[1302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:08:35.260408 systemd-logind[1206]: New session 3 of user core. Nov 1 00:08:35.260863 systemd[1]: Started session-3.scope. Nov 1 00:08:35.313219 sshd[1302]: pam_unix(sshd:session): session closed for user core Nov 1 00:08:35.316866 systemd[1]: sshd@2-10.0.0.24:22-10.0.0.1:55504.service: Deactivated successfully. Nov 1 00:08:35.318273 systemd[1]: session-3.scope: Deactivated successfully. Nov 1 00:08:35.319673 systemd-logind[1206]: Session 3 logged out. Waiting for processes to exit. Nov 1 00:08:35.319944 systemd[1]: Started sshd@3-10.0.0.24:22-10.0.0.1:55520.service. Nov 1 00:08:35.320940 systemd-logind[1206]: Removed session 3. Nov 1 00:08:35.360409 sshd[1308]: Accepted publickey for core from 10.0.0.1 port 55520 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:08:35.361624 sshd[1308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:08:35.364917 systemd-logind[1206]: New session 4 of user core. Nov 1 00:08:35.365745 systemd[1]: Started session-4.scope. Nov 1 00:08:35.419723 sshd[1308]: pam_unix(sshd:session): session closed for user core Nov 1 00:08:35.423844 systemd[1]: sshd@3-10.0.0.24:22-10.0.0.1:55520.service: Deactivated successfully. Nov 1 00:08:35.424449 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:08:35.425010 systemd-logind[1206]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:08:35.426094 systemd[1]: Started sshd@4-10.0.0.24:22-10.0.0.1:55522.service. Nov 1 00:08:35.427005 systemd-logind[1206]: Removed session 4. Nov 1 00:08:35.466081 sshd[1314]: Accepted publickey for core from 10.0.0.1 port 55522 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:08:35.468081 sshd[1314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:08:35.471403 systemd-logind[1206]: New session 5 of user core. Nov 1 00:08:35.472246 systemd[1]: Started session-5.scope. Nov 1 00:08:35.530529 sudo[1317]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:08:35.530770 sudo[1317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:08:35.542983 dbus-daemon[1194]: avc: received setenforce notice (enforcing=1) Nov 1 00:08:35.543937 sudo[1317]: pam_unix(sudo:session): session closed for user root Nov 1 00:08:35.546081 sshd[1314]: pam_unix(sshd:session): session closed for user core Nov 1 00:08:35.548976 systemd[1]: sshd@4-10.0.0.24:22-10.0.0.1:55522.service: Deactivated successfully. Nov 1 00:08:35.549565 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:08:35.550112 systemd-logind[1206]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:08:35.551307 systemd[1]: Started sshd@5-10.0.0.24:22-10.0.0.1:55524.service. Nov 1 00:08:35.551928 systemd-logind[1206]: Removed session 5. Nov 1 00:08:35.591540 sshd[1321]: Accepted publickey for core from 10.0.0.1 port 55524 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:08:35.592875 sshd[1321]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:08:35.596203 systemd-logind[1206]: New session 6 of user core. Nov 1 00:08:35.597056 systemd[1]: Started session-6.scope. Nov 1 00:08:35.650034 sudo[1325]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:08:35.650270 sudo[1325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:08:35.653064 sudo[1325]: pam_unix(sudo:session): session closed for user root Nov 1 00:08:35.658073 sudo[1324]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:08:35.658300 sudo[1324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:08:35.667334 systemd[1]: Stopping audit-rules.service... Nov 1 00:08:35.667000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:08:35.669308 kernel: kauditd_printk_skb: 122 callbacks suppressed Nov 1 00:08:35.669359 kernel: audit: type=1305 audit(1761955715.667:214): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:08:35.669478 auditctl[1328]: No rules Nov 1 00:08:35.667000 audit[1328]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd42a2650 a2=420 a3=0 items=0 ppid=1 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:35.671601 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:08:35.671792 systemd[1]: Stopped audit-rules.service. Nov 1 00:08:35.673284 systemd[1]: Starting audit-rules.service... Nov 1 00:08:35.675456 kernel: audit: type=1300 audit(1761955715.667:214): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd42a2650 a2=420 a3=0 items=0 ppid=1 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:35.675508 kernel: audit: type=1327 audit(1761955715.667:214): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:08:35.667000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:08:35.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.682830 kernel: audit: type=1131 audit(1761955715.671:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.688988 augenrules[1345]: No rules Nov 1 00:08:35.689635 systemd[1]: Finished audit-rules.service. Nov 1 00:08:35.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.690975 sudo[1324]: pam_unix(sudo:session): session closed for user root Nov 1 00:08:35.690000 audit[1324]: USER_END pid=1324 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.692477 sshd[1321]: pam_unix(sshd:session): session closed for user core Nov 1 00:08:35.696990 kernel: audit: type=1130 audit(1761955715.689:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.697039 kernel: audit: type=1106 audit(1761955715.690:217): pid=1324 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.697056 kernel: audit: type=1104 audit(1761955715.690:218): pid=1324 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.690000 audit[1324]: CRED_DISP pid=1324 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.696402 systemd[1]: Started sshd@6-10.0.0.24:22-10.0.0.1:55538.service. Nov 1 00:08:35.696883 systemd[1]: sshd@5-10.0.0.24:22-10.0.0.1:55524.service: Deactivated successfully. Nov 1 00:08:35.697670 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:08:35.698277 systemd-logind[1206]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:08:35.699131 systemd-logind[1206]: Removed session 6. Nov 1 00:08:35.694000 audit[1321]: USER_END pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:08:35.703791 kernel: audit: type=1106 audit(1761955715.694:219): pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:08:35.703866 kernel: audit: type=1104 audit(1761955715.694:220): pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:08:35.694000 audit[1321]: CRED_DISP pid=1321 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:08:35.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.24:22-10.0.0.1:55538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.710182 kernel: audit: type=1130 audit(1761955715.694:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.24:22-10.0.0.1:55538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.24:22-10.0.0.1:55524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.739000 audit[1350]: USER_ACCT pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:08:35.740907 sshd[1350]: Accepted publickey for core from 10.0.0.1 port 55538 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:08:35.741000 audit[1350]: CRED_ACQ pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:08:35.741000 audit[1350]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd0e4b00 a2=3 a3=1 items=0 ppid=1 pid=1350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:35.741000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:08:35.742894 sshd[1350]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:08:35.746270 systemd-logind[1206]: New session 7 of user core. Nov 1 00:08:35.747085 systemd[1]: Started session-7.scope. Nov 1 00:08:35.749000 audit[1350]: USER_START pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:08:35.750000 audit[1353]: CRED_ACQ pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:08:35.797000 audit[1354]: USER_ACCT pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.799437 sudo[1354]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:08:35.797000 audit[1354]: CRED_REFR pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.799661 sudo[1354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:08:35.799000 audit[1354]: USER_START pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:08:35.839322 systemd[1]: Starting docker.service... Nov 1 00:08:35.898913 env[1366]: time="2025-11-01T00:08:35.898852829Z" level=info msg="Starting up" Nov 1 00:08:35.900642 env[1366]: time="2025-11-01T00:08:35.900599416Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:08:35.900642 env[1366]: time="2025-11-01T00:08:35.900626403Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:08:35.900728 env[1366]: time="2025-11-01T00:08:35.900649870Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:08:35.900728 env[1366]: time="2025-11-01T00:08:35.900661118Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:08:35.902849 env[1366]: time="2025-11-01T00:08:35.902821774Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:08:35.902849 env[1366]: time="2025-11-01T00:08:35.902843178Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:08:35.902954 env[1366]: time="2025-11-01T00:08:35.902863206Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:08:35.902954 env[1366]: time="2025-11-01T00:08:35.902871824Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:08:36.039461 env[1366]: time="2025-11-01T00:08:36.039365071Z" level=info msg="Loading containers: start." Nov 1 00:08:36.083000 audit[1400]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.083000 audit[1400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff20201f0 a2=0 a3=1 items=0 ppid=1366 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.083000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:08:36.085000 audit[1402]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.085000 audit[1402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff66a5bf0 a2=0 a3=1 items=0 ppid=1366 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.085000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:08:36.087000 audit[1404]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.087000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff172c180 a2=0 a3=1 items=0 ppid=1366 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.087000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:08:36.089000 audit[1406]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.089000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff78220c0 a2=0 a3=1 items=0 ppid=1366 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.089000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:08:36.091000 audit[1408]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.091000 audit[1408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff1a420e0 a2=0 a3=1 items=0 ppid=1366 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:08:36.113000 audit[1413]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.113000 audit[1413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd075a2f0 a2=0 a3=1 items=0 ppid=1366 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.113000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:08:36.119000 audit[1415]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.119000 audit[1415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcbf001f0 a2=0 a3=1 items=0 ppid=1366 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.119000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:08:36.121000 audit[1417]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.121000 audit[1417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc35f6fb0 a2=0 a3=1 items=0 ppid=1366 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:08:36.123000 audit[1419]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.123000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffec5d9ad0 a2=0 a3=1 items=0 ppid=1366 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.123000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:08:36.130000 audit[1423]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.130000 audit[1423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdcb3f9e0 a2=0 a3=1 items=0 ppid=1366 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.130000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:08:36.145000 audit[1424]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.145000 audit[1424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff6838c00 a2=0 a3=1 items=0 ppid=1366 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.145000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:08:36.154802 kernel: Initializing XFRM netlink socket Nov 1 00:08:36.178125 env[1366]: time="2025-11-01T00:08:36.178075675Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:08:36.190000 audit[1432]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.190000 audit[1432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffdb1f93c0 a2=0 a3=1 items=0 ppid=1366 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.190000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:08:36.205000 audit[1435]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.205000 audit[1435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe9958090 a2=0 a3=1 items=0 ppid=1366 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.205000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:08:36.207000 audit[1438]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.207000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd8c45ea0 a2=0 a3=1 items=0 ppid=1366 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.207000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:08:36.209000 audit[1440]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.209000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffee29e9c0 a2=0 a3=1 items=0 ppid=1366 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.209000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:08:36.211000 audit[1442]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.211000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc2d151b0 a2=0 a3=1 items=0 ppid=1366 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.211000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:08:36.213000 audit[1444]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.213000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe855e7b0 a2=0 a3=1 items=0 ppid=1366 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.213000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:08:36.215000 audit[1446]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.215000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdd4f1ed0 a2=0 a3=1 items=0 ppid=1366 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.215000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:08:36.221000 audit[1449]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.221000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffcd4d7640 a2=0 a3=1 items=0 ppid=1366 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.221000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:08:36.223000 audit[1451]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.223000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffca61a320 a2=0 a3=1 items=0 ppid=1366 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.223000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:08:36.225000 audit[1453]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.225000 audit[1453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffde274800 a2=0 a3=1 items=0 ppid=1366 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.225000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:08:36.227000 audit[1455]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.227000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff40a1070 a2=0 a3=1 items=0 ppid=1366 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.227000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:08:36.228251 systemd-networkd[1051]: docker0: Link UP Nov 1 00:08:36.235000 audit[1459]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.235000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdb15e5f0 a2=0 a3=1 items=0 ppid=1366 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.235000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:08:36.245000 audit[1460]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:36.245000 audit[1460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd4ed1950 a2=0 a3=1 items=0 ppid=1366 pid=1460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:36.245000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:08:36.247169 env[1366]: time="2025-11-01T00:08:36.247119917Z" level=info msg="Loading containers: done." Nov 1 00:08:36.262476 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck717868414-merged.mount: Deactivated successfully. Nov 1 00:08:36.268263 env[1366]: time="2025-11-01T00:08:36.268206163Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:08:36.268427 env[1366]: time="2025-11-01T00:08:36.268408379Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:08:36.268530 env[1366]: time="2025-11-01T00:08:36.268515244Z" level=info msg="Daemon has completed initialization" Nov 1 00:08:36.306446 systemd[1]: Started docker.service. Nov 1 00:08:36.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:36.315911 env[1366]: time="2025-11-01T00:08:36.315795161Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:08:37.059021 env[1216]: time="2025-11-01T00:08:37.058979458Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Nov 1 00:08:37.703702 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3823629083.mount: Deactivated successfully. Nov 1 00:08:39.292020 env[1216]: time="2025-11-01T00:08:39.291965356Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:39.294282 env[1216]: time="2025-11-01T00:08:39.294248652Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a7fd297b49102b08dc3d8d4fd7f1538bcf21d3131eae8bf62ba26ce3283237f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:39.296140 env[1216]: time="2025-11-01T00:08:39.296113062Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:39.298490 env[1216]: time="2025-11-01T00:08:39.298453581Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:39.299313 env[1216]: time="2025-11-01T00:08:39.299275568Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:6a7fd297b49102b08dc3d8d4fd7f1538bcf21d3131eae8bf62ba26ce3283237f\"" Nov 1 00:08:39.300555 env[1216]: time="2025-11-01T00:08:39.300530776Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Nov 1 00:08:41.079767 env[1216]: time="2025-11-01T00:08:41.079699328Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:41.081273 env[1216]: time="2025-11-01T00:08:41.081236626Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2dd4c25a937008b7b8a6cdca70d816403b5078b51550926721b7a7762139cd23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:41.083128 env[1216]: time="2025-11-01T00:08:41.083100360Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:41.084798 env[1216]: time="2025-11-01T00:08:41.084756628Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:41.085752 env[1216]: time="2025-11-01T00:08:41.085718570Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:2dd4c25a937008b7b8a6cdca70d816403b5078b51550926721b7a7762139cd23\"" Nov 1 00:08:41.086165 env[1216]: time="2025-11-01T00:08:41.086142668Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Nov 1 00:08:41.582900 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:08:41.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:41.583067 systemd[1]: Stopped kubelet.service. Nov 1 00:08:41.583808 kernel: kauditd_printk_skb: 84 callbacks suppressed Nov 1 00:08:41.583904 kernel: audit: type=1130 audit(1761955721.582:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:41.584428 systemd[1]: Starting kubelet.service... Nov 1 00:08:41.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:41.589976 kernel: audit: type=1131 audit(1761955721.582:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:41.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:41.677445 systemd[1]: Started kubelet.service. Nov 1 00:08:41.680800 kernel: audit: type=1130 audit(1761955721.676:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:41.722381 kubelet[1501]: E1101 00:08:41.722328 1501 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:08:41.724734 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:08:41.724879 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:08:41.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:08:41.728810 kernel: audit: type=1131 audit(1761955721.723:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:08:42.561190 env[1216]: time="2025-11-01T00:08:42.561144867Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:42.567241 env[1216]: time="2025-11-01T00:08:42.567192710Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e600beaed8620718e0650dd2721266869ce1d737488c004a869333273e6ec15,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:42.568919 env[1216]: time="2025-11-01T00:08:42.568891069Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:42.573477 env[1216]: time="2025-11-01T00:08:42.573436353Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:42.574476 env[1216]: time="2025-11-01T00:08:42.574422066Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:5e600beaed8620718e0650dd2721266869ce1d737488c004a869333273e6ec15\"" Nov 1 00:08:42.574901 env[1216]: time="2025-11-01T00:08:42.574874662Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Nov 1 00:08:43.694846 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount571246387.mount: Deactivated successfully. Nov 1 00:08:44.179332 env[1216]: time="2025-11-01T00:08:44.179217061Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:44.181295 env[1216]: time="2025-11-01T00:08:44.181262713Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:021a8d45ab0c346664e47d95595ff5180ce90a22a681ea27904c65ae90788e70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:44.182511 env[1216]: time="2025-11-01T00:08:44.182482438Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:44.183640 env[1216]: time="2025-11-01T00:08:44.183607637Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:44.184660 env[1216]: time="2025-11-01T00:08:44.184605356Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:021a8d45ab0c346664e47d95595ff5180ce90a22a681ea27904c65ae90788e70\"" Nov 1 00:08:44.185175 env[1216]: time="2025-11-01T00:08:44.185147344Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Nov 1 00:08:44.783136 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount314600453.mount: Deactivated successfully. Nov 1 00:08:46.194307 env[1216]: time="2025-11-01T00:08:46.194249082Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:46.195799 env[1216]: time="2025-11-01T00:08:46.195748362Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:46.198210 env[1216]: time="2025-11-01T00:08:46.198177098Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:46.200787 env[1216]: time="2025-11-01T00:08:46.200749052Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:46.201695 env[1216]: time="2025-11-01T00:08:46.201651556Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Nov 1 00:08:46.203314 env[1216]: time="2025-11-01T00:08:46.203286995Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:08:46.604265 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1855056960.mount: Deactivated successfully. Nov 1 00:08:46.609351 env[1216]: time="2025-11-01T00:08:46.609311656Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:46.610851 env[1216]: time="2025-11-01T00:08:46.610821404Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:46.613703 env[1216]: time="2025-11-01T00:08:46.613679434Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:46.615018 env[1216]: time="2025-11-01T00:08:46.614986687Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:46.615426 env[1216]: time="2025-11-01T00:08:46.615397251Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Nov 1 00:08:46.616008 env[1216]: time="2025-11-01T00:08:46.615975980Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Nov 1 00:08:47.082150 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2460168443.mount: Deactivated successfully. Nov 1 00:08:49.828462 env[1216]: time="2025-11-01T00:08:49.828219154Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:49.830046 env[1216]: time="2025-11-01T00:08:49.830003354Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:49.831994 env[1216]: time="2025-11-01T00:08:49.831967352Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:49.833985 env[1216]: time="2025-11-01T00:08:49.833956195Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:49.834897 env[1216]: time="2025-11-01T00:08:49.834862841Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Nov 1 00:08:51.975664 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:08:51.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:51.975882 systemd[1]: Stopped kubelet.service. Nov 1 00:08:51.977301 systemd[1]: Starting kubelet.service... Nov 1 00:08:51.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:51.981750 kernel: audit: type=1130 audit(1761955731.974:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:51.981841 kernel: audit: type=1131 audit(1761955731.974:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:52.067677 systemd[1]: Started kubelet.service. Nov 1 00:08:52.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:52.070800 kernel: audit: type=1130 audit(1761955732.066:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:52.103244 kubelet[1535]: E1101 00:08:52.103203 1535 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:08:52.106044 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:08:52.106168 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:08:52.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:08:52.109806 kernel: audit: type=1131 audit(1761955732.105:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:08:54.860599 systemd[1]: Stopped kubelet.service. Nov 1 00:08:54.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:54.863065 systemd[1]: Starting kubelet.service... Nov 1 00:08:54.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:54.866494 kernel: audit: type=1130 audit(1761955734.859:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:54.866558 kernel: audit: type=1131 audit(1761955734.859:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:54.893811 systemd[1]: Reloading. Nov 1 00:08:54.942414 /usr/lib/systemd/system-generators/torcx-generator[1571]: time="2025-11-01T00:08:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:08:54.942745 /usr/lib/systemd/system-generators/torcx-generator[1571]: time="2025-11-01T00:08:54Z" level=info msg="torcx already run" Nov 1 00:08:55.022318 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:08:55.022338 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:08:55.040251 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095859 kernel: audit: type=1400 audit(1761955735.089:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095905 kernel: audit: type=1400 audit(1761955735.089:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095923 kernel: audit: type=1400 audit(1761955735.089:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100848 kernel: audit: type=1400 audit(1761955735.089:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.092000 audit: BPF prog-id=46 op=LOAD Nov 1 00:08:55.092000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit: BPF prog-id=47 op=LOAD Nov 1 00:08:55.095000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.097000 audit: BPF prog-id=48 op=LOAD Nov 1 00:08:55.097000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit: BPF prog-id=49 op=LOAD Nov 1 00:08:55.100000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.100000 audit: BPF prog-id=50 op=LOAD Nov 1 00:08:55.100000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit: BPF prog-id=51 op=LOAD Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.101000 audit: BPF prog-id=52 op=LOAD Nov 1 00:08:55.101000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:08:55.101000 audit: BPF prog-id=33 op=UNLOAD Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit: BPF prog-id=53 op=LOAD Nov 1 00:08:55.102000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit: BPF prog-id=54 op=LOAD Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.102000 audit: BPF prog-id=55 op=LOAD Nov 1 00:08:55.103000 audit: BPF prog-id=42 op=UNLOAD Nov 1 00:08:55.103000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit: BPF prog-id=56 op=LOAD Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit: BPF prog-id=57 op=LOAD Nov 1 00:08:55.103000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:08:55.103000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit: BPF prog-id=58 op=LOAD Nov 1 00:08:55.103000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit: BPF prog-id=59 op=LOAD Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:55.104000 audit: BPF prog-id=60 op=LOAD Nov 1 00:08:55.104000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:08:55.104000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:08:55.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:55.114061 systemd[1]: Started kubelet.service. Nov 1 00:08:55.118016 systemd[1]: Stopping kubelet.service... Nov 1 00:08:55.118515 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:08:55.118708 systemd[1]: Stopped kubelet.service. Nov 1 00:08:55.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:55.120819 systemd[1]: Starting kubelet.service... Nov 1 00:08:55.210913 systemd[1]: Started kubelet.service. Nov 1 00:08:55.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:08:55.244163 kubelet[1621]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:08:55.244163 kubelet[1621]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:08:55.244163 kubelet[1621]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:08:55.244512 kubelet[1621]: I1101 00:08:55.244216 1621 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:08:56.068887 kubelet[1621]: I1101 00:08:56.068845 1621 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:08:56.068887 kubelet[1621]: I1101 00:08:56.068875 1621 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:08:56.069124 kubelet[1621]: I1101 00:08:56.069108 1621 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:08:56.094888 kubelet[1621]: E1101 00:08:56.094845 1621 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.24:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.24:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:08:56.096746 kubelet[1621]: I1101 00:08:56.096717 1621 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:08:56.104444 kubelet[1621]: E1101 00:08:56.104405 1621 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:08:56.104444 kubelet[1621]: I1101 00:08:56.104447 1621 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:08:56.107043 kubelet[1621]: I1101 00:08:56.107025 1621 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:08:56.108185 kubelet[1621]: I1101 00:08:56.108152 1621 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:08:56.108333 kubelet[1621]: I1101 00:08:56.108188 1621 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:08:56.108417 kubelet[1621]: I1101 00:08:56.108400 1621 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:08:56.108417 kubelet[1621]: I1101 00:08:56.108410 1621 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:08:56.108604 kubelet[1621]: I1101 00:08:56.108590 1621 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:08:56.111341 kubelet[1621]: I1101 00:08:56.111317 1621 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:08:56.111390 kubelet[1621]: I1101 00:08:56.111346 1621 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:08:56.111390 kubelet[1621]: I1101 00:08:56.111369 1621 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:08:56.111390 kubelet[1621]: I1101 00:08:56.111379 1621 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:08:56.112313 kubelet[1621]: I1101 00:08:56.112293 1621 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:08:56.113005 kubelet[1621]: I1101 00:08:56.112981 1621 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:08:56.113111 kubelet[1621]: W1101 00:08:56.113097 1621 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:08:56.115134 kubelet[1621]: I1101 00:08:56.115116 1621 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:08:56.115188 kubelet[1621]: I1101 00:08:56.115153 1621 server.go:1289] "Started kubelet" Nov 1 00:08:56.134207 kubelet[1621]: E1101 00:08:56.134159 1621 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.24:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:08:56.134280 kubelet[1621]: I1101 00:08:56.134209 1621 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:08:56.134338 kubelet[1621]: E1101 00:08:56.134310 1621 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.24:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:08:56.135092 kubelet[1621]: I1101 00:08:56.135064 1621 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:08:56.136544 kubelet[1621]: I1101 00:08:56.136496 1621 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:08:56.136944 kubelet[1621]: I1101 00:08:56.136919 1621 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:08:56.135000 audit[1621]: AVC avc: denied { mac_admin } for pid=1621 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:56.135000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:08:56.135000 audit[1621]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b220c0 a1=4000296de0 a2=4000b22090 a3=25 items=0 ppid=1 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.135000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:08:56.137953 kubelet[1621]: I1101 00:08:56.136947 1621 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:08:56.136000 audit[1621]: AVC avc: denied { mac_admin } for pid=1621 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:56.136000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:08:56.136000 audit[1621]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000190fc0 a1=4000ab8228 a2=40005699e0 a3=25 items=0 ppid=1 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.136000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:08:56.138362 kubelet[1621]: I1101 00:08:56.138340 1621 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:08:56.138830 kubelet[1621]: I1101 00:08:56.138814 1621 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:08:56.139110 kubelet[1621]: I1101 00:08:56.139083 1621 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:08:56.139186 kubelet[1621]: E1101 00:08:56.139164 1621 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:08:56.139228 kubelet[1621]: I1101 00:08:56.139194 1621 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:08:56.139414 kubelet[1621]: I1101 00:08:56.139361 1621 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:08:56.139414 kubelet[1621]: I1101 00:08:56.139409 1621 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:08:56.139781 kubelet[1621]: E1101 00:08:56.139735 1621 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.24:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:08:56.140069 kubelet[1621]: I1101 00:08:56.140005 1621 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:08:56.140119 kubelet[1621]: I1101 00:08:56.140086 1621 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:08:56.140293 kubelet[1621]: E1101 00:08:56.140220 1621 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:08:56.140924 kubelet[1621]: E1101 00:08:56.140894 1621 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.24:6443: connect: connection refused" interval="200ms" Nov 1 00:08:56.141029 kubelet[1621]: I1101 00:08:56.141011 1621 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:08:56.143925 kubelet[1621]: E1101 00:08:56.141715 1621 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.24:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.24:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1873b968211ab547 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-11-01 00:08:56.115131719 +0000 UTC m=+0.900244972,LastTimestamp:2025-11-01 00:08:56.115131719 +0000 UTC m=+0.900244972,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Nov 1 00:08:56.143000 audit[1638]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:56.143000 audit[1638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe7830770 a2=0 a3=1 items=0 ppid=1621 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:08:56.144000 audit[1639]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:56.144000 audit[1639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe714a470 a2=0 a3=1 items=0 ppid=1621 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.144000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:08:56.146000 audit[1641]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:56.146000 audit[1641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc18b0270 a2=0 a3=1 items=0 ppid=1621 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.146000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:08:56.147000 audit[1644]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:56.147000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe0400f90 a2=0 a3=1 items=0 ppid=1621 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.147000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:08:56.152075 kubelet[1621]: I1101 00:08:56.152056 1621 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:08:56.152075 kubelet[1621]: I1101 00:08:56.152072 1621 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:08:56.152179 kubelet[1621]: I1101 00:08:56.152089 1621 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:08:56.153000 audit[1652]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:56.153000 audit[1652]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffef8bcf10 a2=0 a3=1 items=0 ppid=1621 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.153000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:08:56.156240 kubelet[1621]: I1101 00:08:56.156191 1621 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:08:56.155000 audit[1655]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:56.155000 audit[1655]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe9e6ff50 a2=0 a3=1 items=0 ppid=1621 pid=1655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.155000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:08:56.155000 audit[1654]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1654 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:08:56.155000 audit[1654]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc22f66b0 a2=0 a3=1 items=0 ppid=1621 pid=1654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.155000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:08:56.157447 kubelet[1621]: I1101 00:08:56.157428 1621 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:08:56.157523 kubelet[1621]: I1101 00:08:56.157514 1621 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:08:56.157588 kubelet[1621]: I1101 00:08:56.157578 1621 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:08:56.157638 kubelet[1621]: I1101 00:08:56.157629 1621 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:08:56.157734 kubelet[1621]: E1101 00:08:56.157711 1621 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:08:56.156000 audit[1656]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1656 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:56.156000 audit[1656]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1711cb0 a2=0 a3=1 items=0 ppid=1621 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.156000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:08:56.157000 audit[1658]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1658 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:08:56.157000 audit[1658]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe407cf90 a2=0 a3=1 items=0 ppid=1621 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.157000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:08:56.157000 audit[1657]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1657 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:08:56.157000 audit[1657]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc527080 a2=0 a3=1 items=0 ppid=1621 pid=1657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.157000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:08:56.158000 audit[1659]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1659 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:08:56.158000 audit[1659]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffdf1bdd30 a2=0 a3=1 items=0 ppid=1621 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.158000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:08:56.159000 audit[1660]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1660 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:08:56.159000 audit[1660]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc0ac23c0 a2=0 a3=1 items=0 ppid=1621 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.159000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:08:56.239907 kubelet[1621]: E1101 00:08:56.239861 1621 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:08:56.258152 kubelet[1621]: E1101 00:08:56.258106 1621 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:08:56.269723 kubelet[1621]: I1101 00:08:56.269690 1621 policy_none.go:49] "None policy: Start" Nov 1 00:08:56.269723 kubelet[1621]: I1101 00:08:56.269720 1621 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:08:56.269852 kubelet[1621]: I1101 00:08:56.269732 1621 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:08:56.269945 kubelet[1621]: E1101 00:08:56.269891 1621 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.24:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:08:56.275546 systemd[1]: Created slice kubepods.slice. Nov 1 00:08:56.279486 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:08:56.281936 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:08:56.297439 kubelet[1621]: E1101 00:08:56.297409 1621 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:08:56.296000 audit[1621]: AVC avc: denied { mac_admin } for pid=1621 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:56.296000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:08:56.296000 audit[1621]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d357a0 a1=4000da2048 a2=4000d35770 a3=25 items=0 ppid=1 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:56.296000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:08:56.297696 kubelet[1621]: E1101 00:08:56.297474 1621 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:08:56.297696 kubelet[1621]: I1101 00:08:56.297584 1621 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:08:56.297696 kubelet[1621]: I1101 00:08:56.297596 1621 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:08:56.297822 kubelet[1621]: I1101 00:08:56.297801 1621 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:08:56.298615 kubelet[1621]: E1101 00:08:56.298565 1621 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:08:56.298704 kubelet[1621]: E1101 00:08:56.298622 1621 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Nov 1 00:08:56.342828 kubelet[1621]: E1101 00:08:56.341955 1621 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.24:6443: connect: connection refused" interval="400ms" Nov 1 00:08:56.399157 kubelet[1621]: I1101 00:08:56.399123 1621 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:08:56.399705 kubelet[1621]: E1101 00:08:56.399670 1621 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.24:6443/api/v1/nodes\": dial tcp 10.0.0.24:6443: connect: connection refused" node="localhost" Nov 1 00:08:56.466825 systemd[1]: Created slice kubepods-burstable-pod9e095ceca0a75e686132b84bc40c08bc.slice. Nov 1 00:08:56.479423 kubelet[1621]: E1101 00:08:56.479392 1621 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:08:56.481967 systemd[1]: Created slice kubepods-burstable-pod20c890a246d840d308022312da9174cb.slice. Nov 1 00:08:56.483125 kubelet[1621]: E1101 00:08:56.483097 1621 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:08:56.484208 systemd[1]: Created slice kubepods-burstable-podd13d96f639b65e57f439b4396b605564.slice. Nov 1 00:08:56.485602 kubelet[1621]: E1101 00:08:56.485585 1621 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:08:56.541340 kubelet[1621]: I1101 00:08:56.541296 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:08:56.541340 kubelet[1621]: I1101 00:08:56.541334 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:08:56.541454 kubelet[1621]: I1101 00:08:56.541353 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:08:56.541454 kubelet[1621]: I1101 00:08:56.541374 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:08:56.541454 kubelet[1621]: I1101 00:08:56.541388 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9e095ceca0a75e686132b84bc40c08bc-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9e095ceca0a75e686132b84bc40c08bc\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:08:56.541454 kubelet[1621]: I1101 00:08:56.541402 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9e095ceca0a75e686132b84bc40c08bc-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9e095ceca0a75e686132b84bc40c08bc\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:08:56.541544 kubelet[1621]: I1101 00:08:56.541439 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9e095ceca0a75e686132b84bc40c08bc-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9e095ceca0a75e686132b84bc40c08bc\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:08:56.541544 kubelet[1621]: I1101 00:08:56.541509 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:08:56.541544 kubelet[1621]: I1101 00:08:56.541530 1621 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d13d96f639b65e57f439b4396b605564-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d13d96f639b65e57f439b4396b605564\") " pod="kube-system/kube-scheduler-localhost" Nov 1 00:08:56.601087 kubelet[1621]: I1101 00:08:56.601000 1621 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:08:56.601724 kubelet[1621]: E1101 00:08:56.601679 1621 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.24:6443/api/v1/nodes\": dial tcp 10.0.0.24:6443: connect: connection refused" node="localhost" Nov 1 00:08:56.743216 kubelet[1621]: E1101 00:08:56.743164 1621 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.24:6443: connect: connection refused" interval="800ms" Nov 1 00:08:56.780610 kubelet[1621]: E1101 00:08:56.780571 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:56.781543 env[1216]: time="2025-11-01T00:08:56.781260319Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9e095ceca0a75e686132b84bc40c08bc,Namespace:kube-system,Attempt:0,}" Nov 1 00:08:56.784142 kubelet[1621]: E1101 00:08:56.784109 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:56.785051 env[1216]: time="2025-11-01T00:08:56.785018615Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:20c890a246d840d308022312da9174cb,Namespace:kube-system,Attempt:0,}" Nov 1 00:08:56.786548 kubelet[1621]: E1101 00:08:56.786525 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:56.786919 env[1216]: time="2025-11-01T00:08:56.786885915Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d13d96f639b65e57f439b4396b605564,Namespace:kube-system,Attempt:0,}" Nov 1 00:08:57.002991 kubelet[1621]: I1101 00:08:57.002896 1621 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:08:57.003556 kubelet[1621]: E1101 00:08:57.003507 1621 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.24:6443/api/v1/nodes\": dial tcp 10.0.0.24:6443: connect: connection refused" node="localhost" Nov 1 00:08:57.076688 kubelet[1621]: E1101 00:08:57.076648 1621 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.24:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:08:57.302335 kubelet[1621]: E1101 00:08:57.302242 1621 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.24:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:08:57.318118 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3330023958.mount: Deactivated successfully. Nov 1 00:08:57.325127 env[1216]: time="2025-11-01T00:08:57.325085394Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.326765 env[1216]: time="2025-11-01T00:08:57.326734519Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.327539 env[1216]: time="2025-11-01T00:08:57.327512633Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.329251 env[1216]: time="2025-11-01T00:08:57.329220994Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.331753 env[1216]: time="2025-11-01T00:08:57.331716114Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.334023 env[1216]: time="2025-11-01T00:08:57.333998305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.336350 env[1216]: time="2025-11-01T00:08:57.336321360Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.337181 env[1216]: time="2025-11-01T00:08:57.337157190Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.338065 env[1216]: time="2025-11-01T00:08:57.338039727Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.338882 env[1216]: time="2025-11-01T00:08:57.338857265Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.339615 env[1216]: time="2025-11-01T00:08:57.339590232Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.340660 env[1216]: time="2025-11-01T00:08:57.340634628Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:08:57.357416 env[1216]: time="2025-11-01T00:08:57.357341968Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:08:57.357416 env[1216]: time="2025-11-01T00:08:57.357383953Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:08:57.357416 env[1216]: time="2025-11-01T00:08:57.357395560Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:08:57.357906 env[1216]: time="2025-11-01T00:08:57.357854200Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9604aa0bc2051f4cc9e7cec4412680c9cb9695145177b6f5f960438c77173f05 pid=1674 runtime=io.containerd.runc.v2 Nov 1 00:08:57.359656 env[1216]: time="2025-11-01T00:08:57.359603866Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:08:57.359656 env[1216]: time="2025-11-01T00:08:57.359638487Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:08:57.359656 env[1216]: time="2025-11-01T00:08:57.359648973Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:08:57.359873 env[1216]: time="2025-11-01T00:08:57.359828083Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e9c9ca96d6e21de468c8018a98efc41c24c2e68e641cfa5736facadfc406a1be pid=1676 runtime=io.containerd.runc.v2 Nov 1 00:08:57.363170 env[1216]: time="2025-11-01T00:08:57.363100917Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:08:57.363170 env[1216]: time="2025-11-01T00:08:57.363135818Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:08:57.363170 env[1216]: time="2025-11-01T00:08:57.363146224Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:08:57.363363 env[1216]: time="2025-11-01T00:08:57.363276864Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a1e093695e1609037f30691b99693528973e23e56415d58a46254883aacf04f1 pid=1698 runtime=io.containerd.runc.v2 Nov 1 00:08:57.369096 systemd[1]: Started cri-containerd-9604aa0bc2051f4cc9e7cec4412680c9cb9695145177b6f5f960438c77173f05.scope. Nov 1 00:08:57.378155 systemd[1]: Started cri-containerd-e9c9ca96d6e21de468c8018a98efc41c24c2e68e641cfa5736facadfc406a1be.scope. Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.389850 kernel: kauditd_printk_skb: 219 callbacks suppressed Nov 1 00:08:57.389916 kernel: audit: type=1400 audit(1761955737.388:456): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.394938 kernel: audit: type=1400 audit(1761955737.388:457): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.395006 kernel: audit: type=1400 audit(1761955737.388:458): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.400672 kernel: audit: type=1400 audit(1761955737.388:459): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.400762 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:08:57.400815 kernel: audit: type=1400 audit(1761955737.388:460): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.400836 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.404079 kernel: audit: type=1400 audit(1761955737.388:461): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.404148 kernel: audit: backlog limit exceeded Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.406247 kubelet[1621]: E1101 00:08:57.406212 1621 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.24:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:08:57.406623 kernel: audit: type=1400 audit(1761955737.388:462): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit: BPF prog-id=61 op=LOAD Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1674 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936303461613062633230353166346363396537636563343431323638 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1674 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936303461613062633230353166346363396537636563343431323638 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.388000 audit: BPF prog-id=62 op=LOAD Nov 1 00:08:57.388000 audit[1700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1674 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936303461613062633230353166346363396537636563343431323638 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.390000 audit: BPF prog-id=63 op=LOAD Nov 1 00:08:57.390000 audit[1700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1674 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936303461613062633230353166346363396537636563343431323638 Nov 1 00:08:57.393000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:08:57.393000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { perfmon } for pid=1700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit[1700]: AVC avc: denied { bpf } for pid=1700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.393000 audit: BPF prog-id=64 op=LOAD Nov 1 00:08:57.393000 audit[1700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1674 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936303461613062633230353166346363396537636563343431323638 Nov 1 00:08:57.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit: BPF prog-id=65 op=LOAD Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1676 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539633963613936643665323164653436386338303138613938656663 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1676 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539633963613936643665323164653436386338303138613938656663 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit: BPF prog-id=66 op=LOAD Nov 1 00:08:57.408000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1676 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539633963613936643665323164653436386338303138613938656663 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit: BPF prog-id=67 op=LOAD Nov 1 00:08:57.408000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1676 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539633963613936643665323164653436386338303138613938656663 Nov 1 00:08:57.408000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:08:57.408000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.408000 audit: BPF prog-id=68 op=LOAD Nov 1 00:08:57.408000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1676 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539633963613936643665323164653436386338303138613938656663 Nov 1 00:08:57.412540 systemd[1]: Started cri-containerd-a1e093695e1609037f30691b99693528973e23e56415d58a46254883aacf04f1.scope. Nov 1 00:08:57.427453 env[1216]: time="2025-11-01T00:08:57.427406817Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9e095ceca0a75e686132b84bc40c08bc,Namespace:kube-system,Attempt:0,} returns sandbox id \"e9c9ca96d6e21de468c8018a98efc41c24c2e68e641cfa5736facadfc406a1be\"" Nov 1 00:08:57.429583 kubelet[1621]: E1101 00:08:57.429351 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.433000 audit: BPF prog-id=69 op=LOAD Nov 1 00:08:57.433000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435856 env[1216]: time="2025-11-01T00:08:57.435784601Z" level=info msg="CreateContainer within sandbox \"e9c9ca96d6e21de468c8018a98efc41c24c2e68e641cfa5736facadfc406a1be\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:08:57.433000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1698 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131653039333639356531363039303337663330363931623939363933 Nov 1 00:08:57.436894 env[1216]: time="2025-11-01T00:08:57.436859136Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d13d96f639b65e57f439b4396b605564,Namespace:kube-system,Attempt:0,} returns sandbox id \"9604aa0bc2051f4cc9e7cec4412680c9cb9695145177b6f5f960438c77173f05\"" Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1698 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131653039333639356531363039303337663330363931623939363933 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438012 kubelet[1621]: E1101 00:08:57.437950 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:57.435000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.435000 audit: BPF prog-id=70 op=LOAD Nov 1 00:08:57.435000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1698 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131653039333639356531363039303337663330363931623939363933 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.436000 audit: BPF prog-id=71 op=LOAD Nov 1 00:08:57.436000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1698 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131653039333639356531363039303337663330363931623939363933 Nov 1 00:08:57.438000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:08:57.438000 audit: BPF prog-id=70 op=UNLOAD Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { perfmon } for pid=1731 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit[1731]: AVC avc: denied { bpf } for pid=1731 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.438000 audit: BPF prog-id=72 op=LOAD Nov 1 00:08:57.438000 audit[1731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1698 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131653039333639356531363039303337663330363931623939363933 Nov 1 00:08:57.442126 env[1216]: time="2025-11-01T00:08:57.441853139Z" level=info msg="CreateContainer within sandbox \"9604aa0bc2051f4cc9e7cec4412680c9cb9695145177b6f5f960438c77173f05\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:08:57.447655 env[1216]: time="2025-11-01T00:08:57.447508785Z" level=info msg="CreateContainer within sandbox \"e9c9ca96d6e21de468c8018a98efc41c24c2e68e641cfa5736facadfc406a1be\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"2fab13854b7640634e5ae7e0cf0e99e852ad82e4a37c659b9f76e288f347e8a1\"" Nov 1 00:08:57.448646 env[1216]: time="2025-11-01T00:08:57.448616420Z" level=info msg="StartContainer for \"2fab13854b7640634e5ae7e0cf0e99e852ad82e4a37c659b9f76e288f347e8a1\"" Nov 1 00:08:57.455843 env[1216]: time="2025-11-01T00:08:57.455795674Z" level=info msg="CreateContainer within sandbox \"9604aa0bc2051f4cc9e7cec4412680c9cb9695145177b6f5f960438c77173f05\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"94901fbe3a9cfdfacd79dc7814dd024ad2346e4d7329b19a7a1bead662426f92\"" Nov 1 00:08:57.456281 env[1216]: time="2025-11-01T00:08:57.456255074Z" level=info msg="StartContainer for \"94901fbe3a9cfdfacd79dc7814dd024ad2346e4d7329b19a7a1bead662426f92\"" Nov 1 00:08:57.463291 env[1216]: time="2025-11-01T00:08:57.463239289Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:20c890a246d840d308022312da9174cb,Namespace:kube-system,Attempt:0,} returns sandbox id \"a1e093695e1609037f30691b99693528973e23e56415d58a46254883aacf04f1\"" Nov 1 00:08:57.463973 kubelet[1621]: E1101 00:08:57.463943 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:57.467349 env[1216]: time="2025-11-01T00:08:57.467311330Z" level=info msg="CreateContainer within sandbox \"a1e093695e1609037f30691b99693528973e23e56415d58a46254883aacf04f1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:08:57.469809 systemd[1]: Started cri-containerd-2fab13854b7640634e5ae7e0cf0e99e852ad82e4a37c659b9f76e288f347e8a1.scope. Nov 1 00:08:57.478708 systemd[1]: Started cri-containerd-94901fbe3a9cfdfacd79dc7814dd024ad2346e4d7329b19a7a1bead662426f92.scope. Nov 1 00:08:57.484430 env[1216]: time="2025-11-01T00:08:57.483514883Z" level=info msg="CreateContainer within sandbox \"a1e093695e1609037f30691b99693528973e23e56415d58a46254883aacf04f1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"efb54b78ee45a4d24d1ac3cddab238cca2e6f459c26d77cc822d8558654312c7\"" Nov 1 00:08:57.485029 env[1216]: time="2025-11-01T00:08:57.484991862Z" level=info msg="StartContainer for \"efb54b78ee45a4d24d1ac3cddab238cca2e6f459c26d77cc822d8558654312c7\"" Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.493000 audit: BPF prog-id=73 op=LOAD Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1676 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616231333835346237363430363334653561653765306366306539 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1676 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616231333835346237363430363334653561653765306366306539 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit: BPF prog-id=74 op=LOAD Nov 1 00:08:57.495000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1676 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616231333835346237363430363334653561653765306366306539 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.495000 audit: BPF prog-id=75 op=LOAD Nov 1 00:08:57.495000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1676 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616231333835346237363430363334653561653765306366306539 Nov 1 00:08:57.495000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:08:57.495000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { perfmon } for pid=1787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit[1787]: AVC avc: denied { bpf } for pid=1787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.496000 audit: BPF prog-id=76 op=LOAD Nov 1 00:08:57.496000 audit[1787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1676 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616231333835346237363430363334653561653765306366306539 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.501000 audit: BPF prog-id=77 op=LOAD Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1674 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934393031666265336139636664666163643739646337383134646430 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1674 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934393031666265336139636664666163643739646337383134646430 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.502000 audit: BPF prog-id=78 op=LOAD Nov 1 00:08:57.502000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1674 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934393031666265336139636664666163643739646337383134646430 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit: BPF prog-id=79 op=LOAD Nov 1 00:08:57.503000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1674 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934393031666265336139636664666163643739646337383134646430 Nov 1 00:08:57.503000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:08:57.503000 audit: BPF prog-id=78 op=UNLOAD Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.503000 audit: BPF prog-id=80 op=LOAD Nov 1 00:08:57.503000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1674 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934393031666265336139636664666163643739646337383134646430 Nov 1 00:08:57.505928 systemd[1]: Started cri-containerd-efb54b78ee45a4d24d1ac3cddab238cca2e6f459c26d77cc822d8558654312c7.scope. Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.523000 audit: BPF prog-id=81 op=LOAD Nov 1 00:08:57.525000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.525000 audit[1843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1698 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623534623738656534356134643234643161633363646461623233 Nov 1 00:08:57.525000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.525000 audit[1843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1698 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623534623738656534356134643234643161633363646461623233 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit: BPF prog-id=82 op=LOAD Nov 1 00:08:57.526000 audit[1843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1698 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623534623738656534356134643234643161633363646461623233 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.526000 audit: BPF prog-id=83 op=LOAD Nov 1 00:08:57.526000 audit[1843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1698 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623534623738656534356134643234643161633363646461623233 Nov 1 00:08:57.527000 audit: BPF prog-id=83 op=UNLOAD Nov 1 00:08:57.527000 audit: BPF prog-id=82 op=UNLOAD Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { perfmon } for pid=1843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit[1843]: AVC avc: denied { bpf } for pid=1843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:08:57.527000 audit: BPF prog-id=84 op=LOAD Nov 1 00:08:57.527000 audit[1843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1698 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:08:57.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623534623738656534356134643234643161633363646461623233 Nov 1 00:08:57.531366 env[1216]: time="2025-11-01T00:08:57.530007570Z" level=info msg="StartContainer for \"94901fbe3a9cfdfacd79dc7814dd024ad2346e4d7329b19a7a1bead662426f92\" returns successfully" Nov 1 00:08:57.531945 env[1216]: time="2025-11-01T00:08:57.531864941Z" level=info msg="StartContainer for \"2fab13854b7640634e5ae7e0cf0e99e852ad82e4a37c659b9f76e288f347e8a1\" returns successfully" Nov 1 00:08:57.544576 kubelet[1621]: E1101 00:08:57.544539 1621 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.24:6443: connect: connection refused" interval="1.6s" Nov 1 00:08:57.560935 env[1216]: time="2025-11-01T00:08:57.560847760Z" level=info msg="StartContainer for \"efb54b78ee45a4d24d1ac3cddab238cca2e6f459c26d77cc822d8558654312c7\" returns successfully" Nov 1 00:08:57.805156 kubelet[1621]: I1101 00:08:57.805126 1621 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:08:58.165315 kubelet[1621]: E1101 00:08:58.165281 1621 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:08:58.165436 kubelet[1621]: E1101 00:08:58.165420 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:58.167552 kubelet[1621]: E1101 00:08:58.167527 1621 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:08:58.167638 kubelet[1621]: E1101 00:08:58.167624 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:58.173238 kubelet[1621]: E1101 00:08:58.173213 1621 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:08:58.173431 kubelet[1621]: E1101 00:08:58.173415 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:59.139000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:08:59.139000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:08:59.139000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000470040 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:08:59.139000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40006947b0 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:08:59.139000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:08:59.139000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:08:59.146000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:08:59.146000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400586e300 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:08:59.146000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:08:59.146000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:08:59.146000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4005206120 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:08:59.146000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:08:59.147000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:08:59.147000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=40044423e0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:08:59.147000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:08:59.160000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:08:59.160000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=40075674d0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:08:59.160000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:08:59.161000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:08:59.161000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4004dae0e0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:08:59.161000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:08:59.162000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:08:59.162000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4007567950 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:08:59.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:08:59.173153 kubelet[1621]: E1101 00:08:59.173125 1621 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:08:59.173469 kubelet[1621]: E1101 00:08:59.173247 1621 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Nov 1 00:08:59.173469 kubelet[1621]: E1101 00:08:59.173254 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:59.173469 kubelet[1621]: E1101 00:08:59.173379 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:08:59.200265 kubelet[1621]: E1101 00:08:59.200232 1621 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Nov 1 00:08:59.285705 kubelet[1621]: I1101 00:08:59.285672 1621 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Nov 1 00:08:59.285889 kubelet[1621]: E1101 00:08:59.285874 1621 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Nov 1 00:08:59.341132 kubelet[1621]: I1101 00:08:59.341071 1621 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:08:59.345858 kubelet[1621]: E1101 00:08:59.345831 1621 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Nov 1 00:08:59.346004 kubelet[1621]: I1101 00:08:59.345990 1621 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:08:59.347802 kubelet[1621]: E1101 00:08:59.347778 1621 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:08:59.347893 kubelet[1621]: I1101 00:08:59.347881 1621 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:08:59.349405 kubelet[1621]: E1101 00:08:59.349384 1621 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Nov 1 00:09:00.135784 kubelet[1621]: I1101 00:09:00.135737 1621 apiserver.go:52] "Watching apiserver" Nov 1 00:09:00.139557 kubelet[1621]: I1101 00:09:00.139532 1621 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:09:00.173759 kubelet[1621]: I1101 00:09:00.173734 1621 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:09:00.178164 kubelet[1621]: E1101 00:09:00.178126 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:00.679894 kubelet[1621]: I1101 00:09:00.679866 1621 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:00.683968 kubelet[1621]: E1101 00:09:00.683942 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:01.160676 systemd[1]: Reloading. Nov 1 00:09:01.175455 kubelet[1621]: E1101 00:09:01.175419 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:01.175824 kubelet[1621]: E1101 00:09:01.175803 1621 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:01.235120 /usr/lib/systemd/system-generators/torcx-generator[1929]: time="2025-11-01T00:09:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:09:01.235450 /usr/lib/systemd/system-generators/torcx-generator[1929]: time="2025-11-01T00:09:01Z" level=info msg="torcx already run" Nov 1 00:09:01.287677 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:09:01.287698 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:09:01.303700 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.365000 audit: BPF prog-id=85 op=LOAD Nov 1 00:09:01.365000 audit: BPF prog-id=77 op=UNLOAD Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.367000 audit: BPF prog-id=86 op=LOAD Nov 1 00:09:01.367000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit: BPF prog-id=87 op=LOAD Nov 1 00:09:01.368000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit: BPF prog-id=88 op=LOAD Nov 1 00:09:01.369000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit: BPF prog-id=89 op=LOAD Nov 1 00:09:01.370000 audit: BPF prog-id=65 op=UNLOAD Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.370000 audit: BPF prog-id=90 op=LOAD Nov 1 00:09:01.370000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit: BPF prog-id=91 op=LOAD Nov 1 00:09:01.371000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit: BPF prog-id=92 op=LOAD Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.371000 audit: BPF prog-id=93 op=LOAD Nov 1 00:09:01.371000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:09:01.371000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.372000 audit: BPF prog-id=94 op=LOAD Nov 1 00:09:01.372000 audit: BPF prog-id=81 op=UNLOAD Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit: BPF prog-id=95 op=LOAD Nov 1 00:09:01.373000 audit: BPF prog-id=73 op=UNLOAD Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit: BPF prog-id=96 op=LOAD Nov 1 00:09:01.374000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit: BPF prog-id=97 op=LOAD Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit: BPF prog-id=98 op=LOAD Nov 1 00:09:01.374000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:09:01.374000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit: BPF prog-id=99 op=LOAD Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit: BPF prog-id=100 op=LOAD Nov 1 00:09:01.374000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:09:01.374000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit: BPF prog-id=101 op=LOAD Nov 1 00:09:01.375000 audit: BPF prog-id=69 op=UNLOAD Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit: BPF prog-id=102 op=LOAD Nov 1 00:09:01.375000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit: BPF prog-id=103 op=LOAD Nov 1 00:09:01.376000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit: BPF prog-id=104 op=LOAD Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.376000 audit: BPF prog-id=105 op=LOAD Nov 1 00:09:01.376000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:09:01.376000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:09:01.393359 systemd[1]: Stopping kubelet.service... Nov 1 00:09:01.427656 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:09:01.428468 systemd[1]: Stopped kubelet.service. Nov 1 00:09:01.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:01.428714 systemd[1]: kubelet.service: Consumed 1.251s CPU time. Nov 1 00:09:01.432538 systemd[1]: Starting kubelet.service... Nov 1 00:09:01.523293 systemd[1]: Started kubelet.service. Nov 1 00:09:01.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:01.562596 kubelet[1971]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:09:01.562596 kubelet[1971]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:09:01.562596 kubelet[1971]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:09:01.562973 kubelet[1971]: I1101 00:09:01.562698 1971 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:09:01.571103 kubelet[1971]: I1101 00:09:01.571066 1971 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:09:01.571103 kubelet[1971]: I1101 00:09:01.571098 1971 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:09:01.571326 kubelet[1971]: I1101 00:09:01.571311 1971 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:09:01.572989 kubelet[1971]: I1101 00:09:01.572963 1971 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Nov 1 00:09:01.576433 kubelet[1971]: I1101 00:09:01.576392 1971 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:09:01.579121 kubelet[1971]: E1101 00:09:01.579098 1971 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:09:01.579198 kubelet[1971]: I1101 00:09:01.579122 1971 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:09:01.581574 kubelet[1971]: I1101 00:09:01.581552 1971 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:09:01.581887 kubelet[1971]: I1101 00:09:01.581863 1971 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:09:01.582094 kubelet[1971]: I1101 00:09:01.581961 1971 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:09:01.582215 kubelet[1971]: I1101 00:09:01.582202 1971 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:09:01.582268 kubelet[1971]: I1101 00:09:01.582260 1971 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:09:01.582352 kubelet[1971]: I1101 00:09:01.582342 1971 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:09:01.582540 kubelet[1971]: I1101 00:09:01.582526 1971 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:09:01.582617 kubelet[1971]: I1101 00:09:01.582606 1971 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:09:01.582705 kubelet[1971]: I1101 00:09:01.582695 1971 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:09:01.582781 kubelet[1971]: I1101 00:09:01.582760 1971 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:09:01.583599 kubelet[1971]: I1101 00:09:01.583579 1971 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:09:01.584345 kubelet[1971]: I1101 00:09:01.584329 1971 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:09:01.586515 kubelet[1971]: I1101 00:09:01.586501 1971 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:09:01.586634 kubelet[1971]: I1101 00:09:01.586623 1971 server.go:1289] "Started kubelet" Nov 1 00:09:01.587140 kubelet[1971]: I1101 00:09:01.587099 1971 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:09:01.587477 kubelet[1971]: I1101 00:09:01.587424 1971 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:09:01.587830 kubelet[1971]: I1101 00:09:01.587814 1971 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:09:01.587950 kubelet[1971]: I1101 00:09:01.587885 1971 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:09:01.594000 audit[1971]: AVC avc: denied { mac_admin } for pid=1971 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.594000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:09:01.594000 audit[1971]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b30fc0 a1=4000d9a270 a2=4000b30f90 a3=25 items=0 ppid=1 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:01.594000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:09:01.594000 audit[1971]: AVC avc: denied { mac_admin } for pid=1971 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.594000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:09:01.594000 audit[1971]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000423220 a1=4000d9a288 a2=4000b31050 a3=25 items=0 ppid=1 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:01.594000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:09:01.595898 kubelet[1971]: I1101 00:09:01.595583 1971 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:09:01.595898 kubelet[1971]: I1101 00:09:01.595635 1971 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:09:01.595898 kubelet[1971]: I1101 00:09:01.595665 1971 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:09:01.596324 kubelet[1971]: I1101 00:09:01.596227 1971 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:09:01.597797 kubelet[1971]: I1101 00:09:01.597776 1971 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:09:01.598371 kubelet[1971]: E1101 00:09:01.598339 1971 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Nov 1 00:09:01.598706 kubelet[1971]: I1101 00:09:01.598688 1971 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:09:01.598877 kubelet[1971]: I1101 00:09:01.598849 1971 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:09:01.600901 kubelet[1971]: I1101 00:09:01.600875 1971 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:09:01.600987 kubelet[1971]: I1101 00:09:01.600965 1971 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:09:01.609393 kubelet[1971]: I1101 00:09:01.609374 1971 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:09:01.615358 kubelet[1971]: E1101 00:09:01.615146 1971 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:09:01.617422 kubelet[1971]: I1101 00:09:01.617373 1971 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:09:01.618247 kubelet[1971]: I1101 00:09:01.618170 1971 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:09:01.618247 kubelet[1971]: I1101 00:09:01.618187 1971 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:09:01.618247 kubelet[1971]: I1101 00:09:01.618202 1971 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:09:01.618247 kubelet[1971]: I1101 00:09:01.618209 1971 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:09:01.618247 kubelet[1971]: E1101 00:09:01.618247 1971 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:09:01.644385 kubelet[1971]: I1101 00:09:01.644365 1971 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:09:01.644508 kubelet[1971]: I1101 00:09:01.644491 1971 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:09:01.644566 kubelet[1971]: I1101 00:09:01.644558 1971 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:09:01.644752 kubelet[1971]: I1101 00:09:01.644734 1971 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:09:01.644853 kubelet[1971]: I1101 00:09:01.644830 1971 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:09:01.644927 kubelet[1971]: I1101 00:09:01.644914 1971 policy_none.go:49] "None policy: Start" Nov 1 00:09:01.644983 kubelet[1971]: I1101 00:09:01.644973 1971 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:09:01.645036 kubelet[1971]: I1101 00:09:01.645027 1971 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:09:01.645189 kubelet[1971]: I1101 00:09:01.645176 1971 state_mem.go:75] "Updated machine memory state" Nov 1 00:09:01.649056 kubelet[1971]: E1101 00:09:01.649032 1971 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:09:01.647000 audit[1971]: AVC avc: denied { mac_admin } for pid=1971 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:01.647000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:09:01.647000 audit[1971]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f84540 a1=4000fccb28 a2=4000f84510 a3=25 items=0 ppid=1 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:01.647000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:09:01.649285 kubelet[1971]: E1101 00:09:01.649095 1971 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:09:01.649285 kubelet[1971]: I1101 00:09:01.649225 1971 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:09:01.649285 kubelet[1971]: I1101 00:09:01.649243 1971 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:09:01.650008 kubelet[1971]: I1101 00:09:01.649979 1971 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:09:01.651924 kubelet[1971]: E1101 00:09:01.651892 1971 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:09:01.721027 kubelet[1971]: I1101 00:09:01.720898 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:01.721027 kubelet[1971]: I1101 00:09:01.720985 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:09:01.721547 kubelet[1971]: I1101 00:09:01.721523 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Nov 1 00:09:01.726607 kubelet[1971]: E1101 00:09:01.726579 1971 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:01.727255 kubelet[1971]: E1101 00:09:01.727239 1971 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Nov 1 00:09:01.752372 kubelet[1971]: I1101 00:09:01.752336 1971 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Nov 1 00:09:01.757194 kubelet[1971]: I1101 00:09:01.757169 1971 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Nov 1 00:09:01.757263 kubelet[1971]: I1101 00:09:01.757243 1971 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Nov 1 00:09:01.801657 kubelet[1971]: I1101 00:09:01.801592 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:01.801657 kubelet[1971]: I1101 00:09:01.801649 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:01.801888 kubelet[1971]: I1101 00:09:01.801672 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:01.801888 kubelet[1971]: I1101 00:09:01.801689 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:01.801888 kubelet[1971]: I1101 00:09:01.801705 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:01.801888 kubelet[1971]: I1101 00:09:01.801721 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d13d96f639b65e57f439b4396b605564-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d13d96f639b65e57f439b4396b605564\") " pod="kube-system/kube-scheduler-localhost" Nov 1 00:09:01.801888 kubelet[1971]: I1101 00:09:01.801738 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9e095ceca0a75e686132b84bc40c08bc-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9e095ceca0a75e686132b84bc40c08bc\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:09:01.802004 kubelet[1971]: I1101 00:09:01.801761 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9e095ceca0a75e686132b84bc40c08bc-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9e095ceca0a75e686132b84bc40c08bc\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:09:01.802004 kubelet[1971]: I1101 00:09:01.801792 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9e095ceca0a75e686132b84bc40c08bc-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9e095ceca0a75e686132b84bc40c08bc\") " pod="kube-system/kube-apiserver-localhost" Nov 1 00:09:02.028349 kubelet[1971]: E1101 00:09:02.027859 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:02.028349 kubelet[1971]: E1101 00:09:02.027865 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:02.028349 kubelet[1971]: E1101 00:09:02.027878 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:02.419000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:09:02.425068 kernel: kauditd_printk_skb: 616 callbacks suppressed Nov 1 00:09:02.425165 kernel: audit: type=1400 audit(1761955742.419:820): avc: denied { watch } for pid=1858 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:09:02.425193 kernel: audit: type=1300 audit(1761955742.419:820): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4001199e40 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:02.419000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4001199e40 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:02.419000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:02.433175 kernel: audit: type=1327 audit(1761955742.419:820): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:02.583244 kubelet[1971]: I1101 00:09:02.583217 1971 apiserver.go:52] "Watching apiserver" Nov 1 00:09:02.599794 kubelet[1971]: I1101 00:09:02.599741 1971 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:09:02.630728 kubelet[1971]: E1101 00:09:02.630697 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:02.630957 kubelet[1971]: I1101 00:09:02.630752 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:02.631209 kubelet[1971]: I1101 00:09:02.630866 1971 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Nov 1 00:09:02.654645 kubelet[1971]: E1101 00:09:02.654614 1971 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Nov 1 00:09:02.654979 kubelet[1971]: E1101 00:09:02.654964 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:02.657850 kubelet[1971]: E1101 00:09:02.656425 1971 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Nov 1 00:09:02.657850 kubelet[1971]: E1101 00:09:02.656563 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:02.664622 kubelet[1971]: I1101 00:09:02.664558 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.664543814 podStartE2EDuration="2.664543814s" podCreationTimestamp="2025-11-01 00:09:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:09:02.656273295 +0000 UTC m=+1.128682749" watchObservedRunningTime="2025-11-01 00:09:02.664543814 +0000 UTC m=+1.136953228" Nov 1 00:09:02.674604 kubelet[1971]: I1101 00:09:02.674551 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.674535699 podStartE2EDuration="1.674535699s" podCreationTimestamp="2025-11-01 00:09:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:09:02.664819985 +0000 UTC m=+1.137229439" watchObservedRunningTime="2025-11-01 00:09:02.674535699 +0000 UTC m=+1.146945153" Nov 1 00:09:02.685587 kubelet[1971]: I1101 00:09:02.685483 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.685412875 podStartE2EDuration="2.685412875s" podCreationTimestamp="2025-11-01 00:09:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:09:02.675165506 +0000 UTC m=+1.147574960" watchObservedRunningTime="2025-11-01 00:09:02.685412875 +0000 UTC m=+1.157822329" Nov 1 00:09:03.631576 kubelet[1971]: E1101 00:09:03.631523 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:03.632465 kubelet[1971]: E1101 00:09:03.632436 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:03.632713 kubelet[1971]: E1101 00:09:03.632684 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:06.860000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:06.860000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b7ee80 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:06.868298 kernel: audit: type=1400 audit(1761955746.860:821): avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:06.868350 kernel: audit: type=1300 audit(1761955746.860:821): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b7ee80 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:06.868381 kernel: audit: type=1327 audit(1761955746.860:821): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:06.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:06.860000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:06.875005 kernel: audit: type=1400 audit(1761955746.860:822): avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:06.875051 kernel: audit: type=1300 audit(1761955746.860:822): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017a7140 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:06.860000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017a7140 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:06.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:06.882680 kernel: audit: type=1327 audit(1761955746.860:822): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:06.861000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:06.887184 kernel: audit: type=1400 audit(1761955746.861:823): avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:06.861000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b7f040 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:06.861000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:06.861000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:06.861000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b7f1e0 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:06.861000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:07.102479 kubelet[1971]: I1101 00:09:07.102440 1971 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:09:07.102858 env[1216]: time="2025-11-01T00:09:07.102787356Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:09:07.103044 kubelet[1971]: I1101 00:09:07.103029 1971 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:09:07.988313 systemd[1]: Created slice kubepods-besteffort-podd01066ee_91b7_422d_b590_61ef48ac3a64.slice. Nov 1 00:09:08.006241 kubelet[1971]: E1101 00:09:08.006103 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:08.053360 kubelet[1971]: I1101 00:09:08.053313 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d01066ee-91b7-422d-b590-61ef48ac3a64-lib-modules\") pod \"kube-proxy-89tp6\" (UID: \"d01066ee-91b7-422d-b590-61ef48ac3a64\") " pod="kube-system/kube-proxy-89tp6" Nov 1 00:09:08.053501 kubelet[1971]: I1101 00:09:08.053352 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z5knw\" (UniqueName: \"kubernetes.io/projected/d01066ee-91b7-422d-b590-61ef48ac3a64-kube-api-access-z5knw\") pod \"kube-proxy-89tp6\" (UID: \"d01066ee-91b7-422d-b590-61ef48ac3a64\") " pod="kube-system/kube-proxy-89tp6" Nov 1 00:09:08.053501 kubelet[1971]: I1101 00:09:08.053405 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/d01066ee-91b7-422d-b590-61ef48ac3a64-kube-proxy\") pod \"kube-proxy-89tp6\" (UID: \"d01066ee-91b7-422d-b590-61ef48ac3a64\") " pod="kube-system/kube-proxy-89tp6" Nov 1 00:09:08.053501 kubelet[1971]: I1101 00:09:08.053421 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d01066ee-91b7-422d-b590-61ef48ac3a64-xtables-lock\") pod \"kube-proxy-89tp6\" (UID: \"d01066ee-91b7-422d-b590-61ef48ac3a64\") " pod="kube-system/kube-proxy-89tp6" Nov 1 00:09:08.163610 kubelet[1971]: I1101 00:09:08.163564 1971 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:09:08.300381 kubelet[1971]: E1101 00:09:08.299893 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:08.300745 env[1216]: time="2025-11-01T00:09:08.300491779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-89tp6,Uid:d01066ee-91b7-422d-b590-61ef48ac3a64,Namespace:kube-system,Attempt:0,}" Nov 1 00:09:08.320836 env[1216]: time="2025-11-01T00:09:08.320757461Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:08.321018 env[1216]: time="2025-11-01T00:09:08.320817035Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:08.321097 env[1216]: time="2025-11-01T00:09:08.321005759Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:08.321285 env[1216]: time="2025-11-01T00:09:08.321250697Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e0647667158b1f4e021a691a49f4c03cbdd2853aef4dddf4de2540e6d1a3432 pid=2033 runtime=io.containerd.runc.v2 Nov 1 00:09:08.356434 systemd[1]: Started cri-containerd-1e0647667158b1f4e021a691a49f4c03cbdd2853aef4dddf4de2540e6d1a3432.scope. Nov 1 00:09:08.370374 systemd[1]: Created slice kubepods-besteffort-pod404ee2a8_8e57_4bb9_8013_665849032876.slice. Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385441 kernel: kauditd_printk_skb: 5 callbacks suppressed Nov 1 00:09:08.385479 kernel: audit: type=1400 audit(1761955748.383:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390846 kernel: audit: type=1400 audit(1761955748.383:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390906 kernel: audit: type=1400 audit(1761955748.383:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.395883 kernel: audit: type=1400 audit(1761955748.383:828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.395929 kernel: audit: type=1400 audit(1761955748.383:829): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.401002 kernel: audit: type=1400 audit(1761955748.383:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.401041 kernel: audit: type=1400 audit(1761955748.383:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.406162 kernel: audit: type=1400 audit(1761955748.383:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.406210 kernel: audit: type=1400 audit(1761955748.383:833): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.411375 kernel: audit: type=1400 audit(1761955748.384:834): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.384000 audit: BPF prog-id=106 op=LOAD Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2033 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165303634373636373135386231663465303231613639316134396634 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2033 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165303634373636373135386231663465303231613639316134396634 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.385000 audit: BPF prog-id=107 op=LOAD Nov 1 00:09:08.385000 audit[2044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2033 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165303634373636373135386231663465303231613639316134396634 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.387000 audit: BPF prog-id=108 op=LOAD Nov 1 00:09:08.387000 audit[2044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2033 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165303634373636373135386231663465303231613639316134396634 Nov 1 00:09:08.390000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:09:08.390000 audit: BPF prog-id=107 op=UNLOAD Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.390000 audit: BPF prog-id=109 op=LOAD Nov 1 00:09:08.390000 audit[2044]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2033 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165303634373636373135386231663465303231613639316134396634 Nov 1 00:09:08.414886 env[1216]: time="2025-11-01T00:09:08.414847009Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-89tp6,Uid:d01066ee-91b7-422d-b590-61ef48ac3a64,Namespace:kube-system,Attempt:0,} returns sandbox id \"1e0647667158b1f4e021a691a49f4c03cbdd2853aef4dddf4de2540e6d1a3432\"" Nov 1 00:09:08.415615 kubelet[1971]: E1101 00:09:08.415571 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:08.422075 env[1216]: time="2025-11-01T00:09:08.422033298Z" level=info msg="CreateContainer within sandbox \"1e0647667158b1f4e021a691a49f4c03cbdd2853aef4dddf4de2540e6d1a3432\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:09:08.433787 env[1216]: time="2025-11-01T00:09:08.433732527Z" level=info msg="CreateContainer within sandbox \"1e0647667158b1f4e021a691a49f4c03cbdd2853aef4dddf4de2540e6d1a3432\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"885b59edca5585a48fed3b97ceddb2b2c5e111c9551ada500b84b51c288f8bcd\"" Nov 1 00:09:08.434282 env[1216]: time="2025-11-01T00:09:08.434242527Z" level=info msg="StartContainer for \"885b59edca5585a48fed3b97ceddb2b2c5e111c9551ada500b84b51c288f8bcd\"" Nov 1 00:09:08.450898 systemd[1]: Started cri-containerd-885b59edca5585a48fed3b97ceddb2b2c5e111c9551ada500b84b51c288f8bcd.scope. Nov 1 00:09:08.455447 kubelet[1971]: I1101 00:09:08.455411 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rw6ws\" (UniqueName: \"kubernetes.io/projected/404ee2a8-8e57-4bb9-8013-665849032876-kube-api-access-rw6ws\") pod \"tigera-operator-7dcd859c48-84m57\" (UID: \"404ee2a8-8e57-4bb9-8013-665849032876\") " pod="tigera-operator/tigera-operator-7dcd859c48-84m57" Nov 1 00:09:08.455509 kubelet[1971]: I1101 00:09:08.455484 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/404ee2a8-8e57-4bb9-8013-665849032876-var-lib-calico\") pod \"tigera-operator-7dcd859c48-84m57\" (UID: \"404ee2a8-8e57-4bb9-8013-665849032876\") " pod="tigera-operator/tigera-operator-7dcd859c48-84m57" Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2033 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356235396564636135353835613438666564336239376365646462 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit: BPF prog-id=110 op=LOAD Nov 1 00:09:08.469000 audit[2076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2033 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356235396564636135353835613438666564336239376365646462 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit: BPF prog-id=111 op=LOAD Nov 1 00:09:08.469000 audit[2076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2033 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356235396564636135353835613438666564336239376365646462 Nov 1 00:09:08.469000 audit: BPF prog-id=111 op=UNLOAD Nov 1 00:09:08.469000 audit: BPF prog-id=110 op=UNLOAD Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { perfmon } for pid=2076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit[2076]: AVC avc: denied { bpf } for pid=2076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.469000 audit: BPF prog-id=112 op=LOAD Nov 1 00:09:08.469000 audit[2076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2033 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838356235396564636135353835613438666564336239376365646462 Nov 1 00:09:08.483047 env[1216]: time="2025-11-01T00:09:08.483000183Z" level=info msg="StartContainer for \"885b59edca5585a48fed3b97ceddb2b2c5e111c9551ada500b84b51c288f8bcd\" returns successfully" Nov 1 00:09:08.637000 audit[2140]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.637000 audit[2140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdeef08d0 a2=0 a3=1 items=0 ppid=2087 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:09:08.637000 audit[2139]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.637000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdb6182d0 a2=0 a3=1 items=0 ppid=2087 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:09:08.638000 audit[2143]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2143 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.638000 audit[2143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd988f270 a2=0 a3=1 items=0 ppid=2087 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.638000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:09:08.638000 audit[2142]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.638000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffebf96ba0 a2=0 a3=1 items=0 ppid=2087 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.638000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:09:08.643823 kubelet[1971]: E1101 00:09:08.643424 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:08.643823 kubelet[1971]: E1101 00:09:08.643719 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:08.642000 audit[2145]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.642000 audit[2145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd4de6e80 a2=0 a3=1 items=0 ppid=2087 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.642000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:09:08.647000 audit[2147]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.647000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc7c5ab0 a2=0 a3=1 items=0 ppid=2087 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.647000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:09:08.662435 kubelet[1971]: I1101 00:09:08.662387 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-89tp6" podStartSLOduration=1.66237133 podStartE2EDuration="1.66237133s" podCreationTimestamp="2025-11-01 00:09:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:09:08.653382018 +0000 UTC m=+7.125791472" watchObservedRunningTime="2025-11-01 00:09:08.66237133 +0000 UTC m=+7.134780744" Nov 1 00:09:08.674050 env[1216]: time="2025-11-01T00:09:08.673998743Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-84m57,Uid:404ee2a8-8e57-4bb9-8013-665849032876,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:09:08.687396 env[1216]: time="2025-11-01T00:09:08.687338757Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:08.687396 env[1216]: time="2025-11-01T00:09:08.687379967Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:08.687396 env[1216]: time="2025-11-01T00:09:08.687390529Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:08.687704 env[1216]: time="2025-11-01T00:09:08.687626465Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/65c534697b6562d9fe4e7d9bbb2874d5e9a9d4673dd085a141395a9fc6341c9d pid=2155 runtime=io.containerd.runc.v2 Nov 1 00:09:08.697483 systemd[1]: Started cri-containerd-65c534697b6562d9fe4e7d9bbb2874d5e9a9d4673dd085a141395a9fc6341c9d.scope. Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit: BPF prog-id=113 op=LOAD Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635633533343639376236353632643966653465376439626262323837 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635633533343639376236353632643966653465376439626262323837 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.712000 audit: BPF prog-id=114 op=LOAD Nov 1 00:09:08.712000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635633533343639376236353632643966653465376439626262323837 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit: BPF prog-id=115 op=LOAD Nov 1 00:09:08.713000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635633533343639376236353632643966653465376439626262323837 Nov 1 00:09:08.713000 audit: BPF prog-id=115 op=UNLOAD Nov 1 00:09:08.713000 audit: BPF prog-id=114 op=UNLOAD Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:08.713000 audit: BPF prog-id=116 op=LOAD Nov 1 00:09:08.713000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635633533343639376236353632643966653465376439626262323837 Nov 1 00:09:08.731048 env[1216]: time="2025-11-01T00:09:08.730993575Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-84m57,Uid:404ee2a8-8e57-4bb9-8013-665849032876,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"65c534697b6562d9fe4e7d9bbb2874d5e9a9d4673dd085a141395a9fc6341c9d\"" Nov 1 00:09:08.732833 env[1216]: time="2025-11-01T00:09:08.732790477Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:09:08.741000 audit[2189]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.741000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe31df5b0 a2=0 a3=1 items=0 ppid=2087 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.741000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:09:08.744000 audit[2191]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.744000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd62454d0 a2=0 a3=1 items=0 ppid=2087 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.744000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:09:08.747000 audit[2194]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.747000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffc86f370 a2=0 a3=1 items=0 ppid=2087 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.747000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:09:08.748000 audit[2195]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.748000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff48cf0a0 a2=0 a3=1 items=0 ppid=2087 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.748000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:09:08.750000 audit[2197]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.750000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff9241ce0 a2=0 a3=1 items=0 ppid=2087 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.750000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:09:08.751000 audit[2198]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.751000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd3d0230 a2=0 a3=1 items=0 ppid=2087 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.751000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:09:08.755000 audit[2200]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.755000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff5e4f9e0 a2=0 a3=1 items=0 ppid=2087 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.755000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:09:08.758000 audit[2203]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.758000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffc99f5b0 a2=0 a3=1 items=0 ppid=2087 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.758000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:09:08.760000 audit[2204]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.760000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffddfad3d0 a2=0 a3=1 items=0 ppid=2087 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:09:08.762000 audit[2206]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.762000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdf9ad680 a2=0 a3=1 items=0 ppid=2087 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.762000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:09:08.763000 audit[2207]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.763000 audit[2207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef26b350 a2=0 a3=1 items=0 ppid=2087 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:09:08.766000 audit[2209]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.766000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff1c15670 a2=0 a3=1 items=0 ppid=2087 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:09:08.769000 audit[2212]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.769000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdfb55e80 a2=0 a3=1 items=0 ppid=2087 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.769000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:09:08.773000 audit[2215]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.773000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff4b90e10 a2=0 a3=1 items=0 ppid=2087 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.773000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:09:08.774000 audit[2216]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.774000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc699db10 a2=0 a3=1 items=0 ppid=2087 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.774000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:09:08.778000 audit[2218]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.778000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffec40f110 a2=0 a3=1 items=0 ppid=2087 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.778000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:09:08.781000 audit[2221]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.781000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe08138c0 a2=0 a3=1 items=0 ppid=2087 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.781000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:09:08.782000 audit[2222]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.782000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9edd1f0 a2=0 a3=1 items=0 ppid=2087 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.782000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:09:08.784000 audit[2224]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:09:08.784000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe34517c0 a2=0 a3=1 items=0 ppid=2087 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.784000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:09:08.806000 audit[2230]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:08.806000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffed976220 a2=0 a3=1 items=0 ppid=2087 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.806000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:08.819000 audit[2230]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:08.819000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffed976220 a2=0 a3=1 items=0 ppid=2087 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.819000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:08.821000 audit[2235]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.821000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff6f63120 a2=0 a3=1 items=0 ppid=2087 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:09:08.823000 audit[2237]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.823000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe6ff6990 a2=0 a3=1 items=0 ppid=2087 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.823000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:09:08.826000 audit[2240]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.826000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe9456330 a2=0 a3=1 items=0 ppid=2087 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.826000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:09:08.827000 audit[2241]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.827000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7ff7f30 a2=0 a3=1 items=0 ppid=2087 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.827000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:09:08.829000 audit[2243]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.829000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff78bbfb0 a2=0 a3=1 items=0 ppid=2087 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.829000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:09:08.831000 audit[2244]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.831000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeaf3be50 a2=0 a3=1 items=0 ppid=2087 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.831000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:09:08.833000 audit[2246]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.833000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe922c9d0 a2=0 a3=1 items=0 ppid=2087 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.833000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:09:08.836000 audit[2249]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.836000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc2133a20 a2=0 a3=1 items=0 ppid=2087 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.836000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:09:08.837000 audit[2250]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2250 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.837000 audit[2250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcc5ac7b0 a2=0 a3=1 items=0 ppid=2087 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:09:08.839000 audit[2252]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.839000 audit[2252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffacffd80 a2=0 a3=1 items=0 ppid=2087 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:09:08.840000 audit[2253]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.840000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd40209b0 a2=0 a3=1 items=0 ppid=2087 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.840000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:09:08.844000 audit[2255]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.844000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff07b4570 a2=0 a3=1 items=0 ppid=2087 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:09:08.847000 audit[2258]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.847000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff6e64030 a2=0 a3=1 items=0 ppid=2087 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:09:08.850000 audit[2261]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.850000 audit[2261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc7ac7db0 a2=0 a3=1 items=0 ppid=2087 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:09:08.852000 audit[2262]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.852000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcfae3220 a2=0 a3=1 items=0 ppid=2087 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.852000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:09:08.854000 audit[2264]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.854000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff7545930 a2=0 a3=1 items=0 ppid=2087 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:09:08.857000 audit[2267]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.857000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffcd4d7930 a2=0 a3=1 items=0 ppid=2087 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:09:08.858000 audit[2268]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.858000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffbe88a0 a2=0 a3=1 items=0 ppid=2087 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.858000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:09:08.860000 audit[2270]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.860000 audit[2270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffffd669e90 a2=0 a3=1 items=0 ppid=2087 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:09:08.861000 audit[2271]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.861000 audit[2271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0a0b770 a2=0 a3=1 items=0 ppid=2087 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.861000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:09:08.864000 audit[2273]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2273 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.864000 audit[2273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd18fcdb0 a2=0 a3=1 items=0 ppid=2087 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.864000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:09:08.867000 audit[2276]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:09:08.867000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe787d2c0 a2=0 a3=1 items=0 ppid=2087 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.867000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:09:08.870000 audit[2278]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:09:08.870000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc4440d30 a2=0 a3=1 items=0 ppid=2087 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.870000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:08.871000 audit[2278]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:09:08.871000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc4440d30 a2=0 a3=1 items=0 ppid=2087 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:08.871000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:09.395547 kubelet[1971]: E1101 00:09:09.395498 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:09.646083 kubelet[1971]: E1101 00:09:09.645969 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:09.646083 kubelet[1971]: E1101 00:09:09.646062 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:10.486693 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3886151897.mount: Deactivated successfully. Nov 1 00:09:11.257011 kubelet[1971]: E1101 00:09:11.256969 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:11.373745 env[1216]: time="2025-11-01T00:09:11.373689059Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:11.375215 env[1216]: time="2025-11-01T00:09:11.375169476Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:11.377062 env[1216]: time="2025-11-01T00:09:11.377034609Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:11.378254 env[1216]: time="2025-11-01T00:09:11.378224127Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:11.378882 env[1216]: time="2025-11-01T00:09:11.378853052Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Nov 1 00:09:11.384259 env[1216]: time="2025-11-01T00:09:11.383686219Z" level=info msg="CreateContainer within sandbox \"65c534697b6562d9fe4e7d9bbb2874d5e9a9d4673dd085a141395a9fc6341c9d\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:09:11.392908 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3995850830.mount: Deactivated successfully. Nov 1 00:09:11.398727 env[1216]: time="2025-11-01T00:09:11.398680619Z" level=info msg="CreateContainer within sandbox \"65c534697b6562d9fe4e7d9bbb2874d5e9a9d4673dd085a141395a9fc6341c9d\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"61e17fd8a448c5e8b79f445b81e0ed2563940bc63bdffb165edc4bdd181512b1\"" Nov 1 00:09:11.399209 env[1216]: time="2025-11-01T00:09:11.399190041Z" level=info msg="StartContainer for \"61e17fd8a448c5e8b79f445b81e0ed2563940bc63bdffb165edc4bdd181512b1\"" Nov 1 00:09:11.413626 systemd[1]: Started cri-containerd-61e17fd8a448c5e8b79f445b81e0ed2563940bc63bdffb165edc4bdd181512b1.scope. Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.429000 audit: BPF prog-id=117 op=LOAD Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2155 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:11.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631653137666438613434386335653862373966343435623831653065 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2155 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:11.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631653137666438613434386335653862373966343435623831653065 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit: BPF prog-id=118 op=LOAD Nov 1 00:09:11.430000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2155 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:11.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631653137666438613434386335653862373966343435623831653065 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit: BPF prog-id=119 op=LOAD Nov 1 00:09:11.430000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2155 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:11.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631653137666438613434386335653862373966343435623831653065 Nov 1 00:09:11.430000 audit: BPF prog-id=119 op=UNLOAD Nov 1 00:09:11.430000 audit: BPF prog-id=118 op=UNLOAD Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:11.430000 audit: BPF prog-id=120 op=LOAD Nov 1 00:09:11.430000 audit[2286]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2155 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:11.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631653137666438613434386335653862373966343435623831653065 Nov 1 00:09:11.440749 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount598171670.mount: Deactivated successfully. Nov 1 00:09:11.445437 env[1216]: time="2025-11-01T00:09:11.445395644Z" level=info msg="StartContainer for \"61e17fd8a448c5e8b79f445b81e0ed2563940bc63bdffb165edc4bdd181512b1\" returns successfully" Nov 1 00:09:11.651220 kubelet[1971]: E1101 00:09:11.651188 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:11.659987 kubelet[1971]: I1101 00:09:11.659915 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-84m57" podStartSLOduration=1.012546104 podStartE2EDuration="3.659899916s" podCreationTimestamp="2025-11-01 00:09:08 +0000 UTC" firstStartedPulling="2025-11-01 00:09:08.732270555 +0000 UTC m=+7.204680009" lastFinishedPulling="2025-11-01 00:09:11.379624367 +0000 UTC m=+9.852033821" observedRunningTime="2025-11-01 00:09:11.659799495 +0000 UTC m=+10.132208949" watchObservedRunningTime="2025-11-01 00:09:11.659899916 +0000 UTC m=+10.132309370" Nov 1 00:09:12.653016 kubelet[1971]: E1101 00:09:12.652987 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:14.970308 update_engine[1208]: I1101 00:09:14.970247 1208 update_attempter.cc:509] Updating boot flags... Nov 1 00:09:16.636237 sudo[1354]: pam_unix(sudo:session): session closed for user root Nov 1 00:09:16.635000 audit[1354]: USER_END pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:09:16.637630 kernel: kauditd_printk_skb: 357 callbacks suppressed Nov 1 00:09:16.637810 kernel: audit: type=1106 audit(1761955756.635:936): pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:09:16.636000 audit[1354]: CRED_DISP pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:09:16.645078 kernel: audit: type=1104 audit(1761955756.636:937): pid=1354 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:09:16.646603 sshd[1350]: pam_unix(sshd:session): session closed for user core Nov 1 00:09:16.649000 audit[1350]: USER_END pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:16.651699 systemd[1]: sshd@6-10.0.0.24:22-10.0.0.1:55538.service: Deactivated successfully. Nov 1 00:09:16.652910 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:09:16.653058 systemd[1]: session-7.scope: Consumed 6.602s CPU time. Nov 1 00:09:16.655757 systemd-logind[1206]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:09:16.649000 audit[1350]: CRED_DISP pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:16.660956 kernel: audit: type=1106 audit(1761955756.649:938): pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:16.661042 kernel: audit: type=1104 audit(1761955756.649:939): pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:16.661152 kernel: audit: type=1131 audit(1761955756.651:940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.24:22-10.0.0.1:55538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:16.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.24:22-10.0.0.1:55538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:16.659789 systemd-logind[1206]: Removed session 7. Nov 1 00:09:18.060000 audit[2383]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:18.060000 audit[2383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd569cfd0 a2=0 a3=1 items=0 ppid=2087 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:18.067850 kernel: audit: type=1325 audit(1761955758.060:941): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:18.067941 kernel: audit: type=1300 audit(1761955758.060:941): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd569cfd0 a2=0 a3=1 items=0 ppid=2087 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:18.060000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:18.070029 kernel: audit: type=1327 audit(1761955758.060:941): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:18.075000 audit[2383]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:18.075000 audit[2383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd569cfd0 a2=0 a3=1 items=0 ppid=2087 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:18.082759 kernel: audit: type=1325 audit(1761955758.075:942): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:18.082856 kernel: audit: type=1300 audit(1761955758.075:942): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd569cfd0 a2=0 a3=1 items=0 ppid=2087 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:18.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:18.142000 audit[2385]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:18.142000 audit[2385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe496a9f0 a2=0 a3=1 items=0 ppid=2087 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:18.142000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:18.148000 audit[2385]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:18.148000 audit[2385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe496a9f0 a2=0 a3=1 items=0 ppid=2087 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:18.148000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:21.371000 audit[2387]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2387 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:21.371000 audit[2387]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffcc311a30 a2=0 a3=1 items=0 ppid=2087 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:21.371000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:21.376000 audit[2387]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2387 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:21.376000 audit[2387]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcc311a30 a2=0 a3=1 items=0 ppid=2087 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:21.376000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:21.387000 audit[2389]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2389 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:21.387000 audit[2389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc389c240 a2=0 a3=1 items=0 ppid=2087 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:21.387000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:21.392000 audit[2389]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2389 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:21.392000 audit[2389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc389c240 a2=0 a3=1 items=0 ppid=2087 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:21.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:22.405000 audit[2393]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:22.409669 kernel: kauditd_printk_skb: 19 callbacks suppressed Nov 1 00:09:22.409751 kernel: audit: type=1325 audit(1761955762.405:949): table=filter:97 family=2 entries=19 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:22.405000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc5a93d90 a2=0 a3=1 items=0 ppid=2087 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:22.405000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:22.416091 kernel: audit: type=1300 audit(1761955762.405:949): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc5a93d90 a2=0 a3=1 items=0 ppid=2087 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:22.416146 kernel: audit: type=1327 audit(1761955762.405:949): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:22.416163 kernel: audit: type=1325 audit(1761955762.413:950): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:22.413000 audit[2393]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:22.413000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc5a93d90 a2=0 a3=1 items=0 ppid=2087 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:22.422456 kernel: audit: type=1300 audit(1761955762.413:950): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc5a93d90 a2=0 a3=1 items=0 ppid=2087 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:22.422630 kernel: audit: type=1327 audit(1761955762.413:950): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:22.413000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:23.701000 audit[2395]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:23.701000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd80fa1d0 a2=0 a3=1 items=0 ppid=2087 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:23.709381 kernel: audit: type=1325 audit(1761955763.701:951): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:23.709469 kernel: audit: type=1300 audit(1761955763.701:951): arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd80fa1d0 a2=0 a3=1 items=0 ppid=2087 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:23.709488 kernel: audit: type=1327 audit(1761955763.701:951): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:23.701000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:23.711000 audit[2395]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:23.711000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd80fa1d0 a2=0 a3=1 items=0 ppid=2087 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:23.711000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:23.715817 kernel: audit: type=1325 audit(1761955763.711:952): table=nat:100 family=2 entries=12 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:23.734243 systemd[1]: Created slice kubepods-besteffort-podf5273a28_d728_4867_81c4_b1598dea39a2.slice. Nov 1 00:09:23.776199 kubelet[1971]: I1101 00:09:23.776138 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f5273a28-d728-4867-81c4-b1598dea39a2-tigera-ca-bundle\") pod \"calico-typha-847bfd6bf-f56tm\" (UID: \"f5273a28-d728-4867-81c4-b1598dea39a2\") " pod="calico-system/calico-typha-847bfd6bf-f56tm" Nov 1 00:09:23.776526 kubelet[1971]: I1101 00:09:23.776218 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-55r6p\" (UniqueName: \"kubernetes.io/projected/f5273a28-d728-4867-81c4-b1598dea39a2-kube-api-access-55r6p\") pod \"calico-typha-847bfd6bf-f56tm\" (UID: \"f5273a28-d728-4867-81c4-b1598dea39a2\") " pod="calico-system/calico-typha-847bfd6bf-f56tm" Nov 1 00:09:23.776526 kubelet[1971]: I1101 00:09:23.776271 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/f5273a28-d728-4867-81c4-b1598dea39a2-typha-certs\") pod \"calico-typha-847bfd6bf-f56tm\" (UID: \"f5273a28-d728-4867-81c4-b1598dea39a2\") " pod="calico-system/calico-typha-847bfd6bf-f56tm" Nov 1 00:09:23.965073 systemd[1]: Created slice kubepods-besteffort-pod38d35a8e_6b08_4474_8b8a_b6f9edf06ea9.slice. Nov 1 00:09:24.037290 kubelet[1971]: E1101 00:09:24.037256 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:24.038036 env[1216]: time="2025-11-01T00:09:24.037978038Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-847bfd6bf-f56tm,Uid:f5273a28-d728-4867-81c4-b1598dea39a2,Namespace:calico-system,Attempt:0,}" Nov 1 00:09:24.051547 env[1216]: time="2025-11-01T00:09:24.051490807Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:24.051547 env[1216]: time="2025-11-01T00:09:24.051536412Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:24.051712 env[1216]: time="2025-11-01T00:09:24.051551053Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:24.051742 env[1216]: time="2025-11-01T00:09:24.051713231Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e3cb5a305f0a20f54e158d8afbf931bc720c287089782f326a0fb1bb9ba78632 pid=2406 runtime=io.containerd.runc.v2 Nov 1 00:09:24.067685 systemd[1]: Started cri-containerd-e3cb5a305f0a20f54e158d8afbf931bc720c287089782f326a0fb1bb9ba78632.scope. Nov 1 00:09:24.079596 kubelet[1971]: I1101 00:09:24.079555 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-cni-net-dir\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.079906 kubelet[1971]: I1101 00:09:24.079603 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-policysync\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.079906 kubelet[1971]: I1101 00:09:24.079624 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-cni-log-dir\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.079906 kubelet[1971]: I1101 00:09:24.079640 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-var-run-calico\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.079906 kubelet[1971]: I1101 00:09:24.079677 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-lib-modules\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.079906 kubelet[1971]: I1101 00:09:24.079719 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-var-lib-calico\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.080069 kubelet[1971]: I1101 00:09:24.079736 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zgg7j\" (UniqueName: \"kubernetes.io/projected/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-kube-api-access-zgg7j\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.080069 kubelet[1971]: I1101 00:09:24.079763 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-cni-bin-dir\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.080069 kubelet[1971]: I1101 00:09:24.079799 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-tigera-ca-bundle\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.080069 kubelet[1971]: I1101 00:09:24.079842 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-node-certs\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.080069 kubelet[1971]: I1101 00:09:24.079872 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-flexvol-driver-host\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.080188 kubelet[1971]: I1101 00:09:24.079900 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/38d35a8e-6b08-4474-8b8a-b6f9edf06ea9-xtables-lock\") pod \"calico-node-g5d4j\" (UID: \"38d35a8e-6b08-4474-8b8a-b6f9edf06ea9\") " pod="calico-system/calico-node-g5d4j" Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.085000 audit: BPF prog-id=121 op=LOAD Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636235613330356630613230663534653135386438616662663933 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636235613330356630613230663534653135386438616662663933 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit: BPF prog-id=122 op=LOAD Nov 1 00:09:24.086000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636235613330356630613230663534653135386438616662663933 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit: BPF prog-id=123 op=LOAD Nov 1 00:09:24.086000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636235613330356630613230663534653135386438616662663933 Nov 1 00:09:24.086000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:09:24.086000 audit: BPF prog-id=122 op=UNLOAD Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.086000 audit: BPF prog-id=124 op=LOAD Nov 1 00:09:24.086000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2406 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636235613330356630613230663534653135386438616662663933 Nov 1 00:09:24.104088 env[1216]: time="2025-11-01T00:09:24.104017878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-847bfd6bf-f56tm,Uid:f5273a28-d728-4867-81c4-b1598dea39a2,Namespace:calico-system,Attempt:0,} returns sandbox id \"e3cb5a305f0a20f54e158d8afbf931bc720c287089782f326a0fb1bb9ba78632\"" Nov 1 00:09:24.104819 kubelet[1971]: E1101 00:09:24.104796 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:24.106926 env[1216]: time="2025-11-01T00:09:24.106840421Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:09:24.161488 kubelet[1971]: E1101 00:09:24.161355 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:24.181910 kubelet[1971]: E1101 00:09:24.181879 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.181910 kubelet[1971]: W1101 00:09:24.181902 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.182159 kubelet[1971]: E1101 00:09:24.181920 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.182159 kubelet[1971]: E1101 00:09:24.182108 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.182159 kubelet[1971]: W1101 00:09:24.182116 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.182159 kubelet[1971]: E1101 00:09:24.182125 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.184228 kubelet[1971]: E1101 00:09:24.183871 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.184228 kubelet[1971]: W1101 00:09:24.183888 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.184228 kubelet[1971]: E1101 00:09:24.183901 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.184228 kubelet[1971]: E1101 00:09:24.184173 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.184228 kubelet[1971]: W1101 00:09:24.184189 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.184228 kubelet[1971]: E1101 00:09:24.184199 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.186879 kubelet[1971]: E1101 00:09:24.186858 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.186879 kubelet[1971]: W1101 00:09:24.186875 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.186997 kubelet[1971]: E1101 00:09:24.186889 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.187115 kubelet[1971]: E1101 00:09:24.187103 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.187115 kubelet[1971]: W1101 00:09:24.187115 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.187192 kubelet[1971]: E1101 00:09:24.187124 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.187378 kubelet[1971]: E1101 00:09:24.187275 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.187378 kubelet[1971]: W1101 00:09:24.187286 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.187378 kubelet[1971]: E1101 00:09:24.187295 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.187497 kubelet[1971]: E1101 00:09:24.187480 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.187497 kubelet[1971]: W1101 00:09:24.187496 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.187551 kubelet[1971]: E1101 00:09:24.187506 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.188242 kubelet[1971]: E1101 00:09:24.187660 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.188242 kubelet[1971]: W1101 00:09:24.187672 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.188242 kubelet[1971]: E1101 00:09:24.187681 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.188242 kubelet[1971]: E1101 00:09:24.187868 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.188242 kubelet[1971]: W1101 00:09:24.187876 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.188242 kubelet[1971]: E1101 00:09:24.187885 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.188989 kubelet[1971]: E1101 00:09:24.188962 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.188989 kubelet[1971]: W1101 00:09:24.188977 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.188989 kubelet[1971]: E1101 00:09:24.188990 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.189198 kubelet[1971]: E1101 00:09:24.189181 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.189198 kubelet[1971]: W1101 00:09:24.189193 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.189269 kubelet[1971]: E1101 00:09:24.189203 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.189920 kubelet[1971]: E1101 00:09:24.189895 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.189920 kubelet[1971]: W1101 00:09:24.189914 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.190026 kubelet[1971]: E1101 00:09:24.189926 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.190146 kubelet[1971]: E1101 00:09:24.190131 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.190146 kubelet[1971]: W1101 00:09:24.190143 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.190232 kubelet[1971]: E1101 00:09:24.190153 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.190393 kubelet[1971]: E1101 00:09:24.190378 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.190393 kubelet[1971]: W1101 00:09:24.190389 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.190469 kubelet[1971]: E1101 00:09:24.190399 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.190867 kubelet[1971]: E1101 00:09:24.190847 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.190867 kubelet[1971]: W1101 00:09:24.190862 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.190961 kubelet[1971]: E1101 00:09:24.190873 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.191198 kubelet[1971]: E1101 00:09:24.191180 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.191198 kubelet[1971]: W1101 00:09:24.191194 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.191290 kubelet[1971]: E1101 00:09:24.191205 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.191396 kubelet[1971]: E1101 00:09:24.191382 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.191396 kubelet[1971]: W1101 00:09:24.191393 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.191471 kubelet[1971]: E1101 00:09:24.191401 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.191622 kubelet[1971]: E1101 00:09:24.191609 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.191622 kubelet[1971]: W1101 00:09:24.191618 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.191692 kubelet[1971]: E1101 00:09:24.191626 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.192498 kubelet[1971]: E1101 00:09:24.192479 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.192498 kubelet[1971]: W1101 00:09:24.192493 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.192604 kubelet[1971]: E1101 00:09:24.192504 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.195797 kubelet[1971]: E1101 00:09:24.194439 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.195797 kubelet[1971]: W1101 00:09:24.194469 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.195797 kubelet[1971]: E1101 00:09:24.194482 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.244698 kubelet[1971]: E1101 00:09:24.244608 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.244882 kubelet[1971]: W1101 00:09:24.244862 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.244956 kubelet[1971]: E1101 00:09:24.244943 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.245216 kubelet[1971]: E1101 00:09:24.245200 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.246856 kubelet[1971]: W1101 00:09:24.245289 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.246966 kubelet[1971]: E1101 00:09:24.246952 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.247224 kubelet[1971]: E1101 00:09:24.247210 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.247372 kubelet[1971]: W1101 00:09:24.247356 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.247432 kubelet[1971]: E1101 00:09:24.247421 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.247663 kubelet[1971]: E1101 00:09:24.247651 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.247737 kubelet[1971]: W1101 00:09:24.247726 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.247838 kubelet[1971]: E1101 00:09:24.247824 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.248099 kubelet[1971]: E1101 00:09:24.248086 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.248179 kubelet[1971]: W1101 00:09:24.248168 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.248241 kubelet[1971]: E1101 00:09:24.248230 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.248647 kubelet[1971]: E1101 00:09:24.248633 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.248734 kubelet[1971]: W1101 00:09:24.248722 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.248824 kubelet[1971]: E1101 00:09:24.248812 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.249052 kubelet[1971]: E1101 00:09:24.249026 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.249145 kubelet[1971]: W1101 00:09:24.249132 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.249205 kubelet[1971]: E1101 00:09:24.249194 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.249416 kubelet[1971]: E1101 00:09:24.249399 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.249513 kubelet[1971]: W1101 00:09:24.249500 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.249577 kubelet[1971]: E1101 00:09:24.249566 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.249851 kubelet[1971]: E1101 00:09:24.249839 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.249938 kubelet[1971]: W1101 00:09:24.249925 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.250002 kubelet[1971]: E1101 00:09:24.249991 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.250211 kubelet[1971]: E1101 00:09:24.250200 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.250284 kubelet[1971]: W1101 00:09:24.250273 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.250345 kubelet[1971]: E1101 00:09:24.250335 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.250548 kubelet[1971]: E1101 00:09:24.250536 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.250625 kubelet[1971]: W1101 00:09:24.250613 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.250679 kubelet[1971]: E1101 00:09:24.250669 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.250920 kubelet[1971]: E1101 00:09:24.250908 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.250999 kubelet[1971]: W1101 00:09:24.250986 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.251065 kubelet[1971]: E1101 00:09:24.251052 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.251315 kubelet[1971]: E1101 00:09:24.251303 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.251394 kubelet[1971]: W1101 00:09:24.251381 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.251451 kubelet[1971]: E1101 00:09:24.251441 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.251673 kubelet[1971]: E1101 00:09:24.251661 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.251740 kubelet[1971]: W1101 00:09:24.251729 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.251810 kubelet[1971]: E1101 00:09:24.251798 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.252073 kubelet[1971]: E1101 00:09:24.252061 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.252146 kubelet[1971]: W1101 00:09:24.252133 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.252208 kubelet[1971]: E1101 00:09:24.252197 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.252437 kubelet[1971]: E1101 00:09:24.252426 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.252508 kubelet[1971]: W1101 00:09:24.252496 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.252561 kubelet[1971]: E1101 00:09:24.252551 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.252808 kubelet[1971]: E1101 00:09:24.252796 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.252882 kubelet[1971]: W1101 00:09:24.252869 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.252948 kubelet[1971]: E1101 00:09:24.252936 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.253171 kubelet[1971]: E1101 00:09:24.253160 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.253249 kubelet[1971]: W1101 00:09:24.253236 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.253310 kubelet[1971]: E1101 00:09:24.253299 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.253551 kubelet[1971]: E1101 00:09:24.253539 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.253621 kubelet[1971]: W1101 00:09:24.253609 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.253674 kubelet[1971]: E1101 00:09:24.253664 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.253937 kubelet[1971]: E1101 00:09:24.253924 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.254023 kubelet[1971]: W1101 00:09:24.254009 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.254101 kubelet[1971]: E1101 00:09:24.254086 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.268236 kubelet[1971]: E1101 00:09:24.268215 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:24.268876 env[1216]: time="2025-11-01T00:09:24.268791143Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-g5d4j,Uid:38d35a8e-6b08-4474-8b8a-b6f9edf06ea9,Namespace:calico-system,Attempt:0,}" Nov 1 00:09:24.282545 env[1216]: time="2025-11-01T00:09:24.282478930Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:24.282545 env[1216]: time="2025-11-01T00:09:24.282520575Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:24.282545 env[1216]: time="2025-11-01T00:09:24.282531256Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:24.282718 env[1216]: time="2025-11-01T00:09:24.282649069Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594 pid=2488 runtime=io.containerd.runc.v2 Nov 1 00:09:24.288805 kubelet[1971]: E1101 00:09:24.288785 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.288915 kubelet[1971]: W1101 00:09:24.288900 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.289053 kubelet[1971]: E1101 00:09:24.289027 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.289143 kubelet[1971]: I1101 00:09:24.289129 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/ee73499a-4c7c-4cc1-87d2-26b81ea29f19-varrun\") pod \"csi-node-driver-d2762\" (UID: \"ee73499a-4c7c-4cc1-87d2-26b81ea29f19\") " pod="calico-system/csi-node-driver-d2762" Nov 1 00:09:24.289403 kubelet[1971]: E1101 00:09:24.289388 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.289513 kubelet[1971]: W1101 00:09:24.289500 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.289610 kubelet[1971]: E1101 00:09:24.289598 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.289782 kubelet[1971]: I1101 00:09:24.289755 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hzflm\" (UniqueName: \"kubernetes.io/projected/ee73499a-4c7c-4cc1-87d2-26b81ea29f19-kube-api-access-hzflm\") pod \"csi-node-driver-d2762\" (UID: \"ee73499a-4c7c-4cc1-87d2-26b81ea29f19\") " pod="calico-system/csi-node-driver-d2762" Nov 1 00:09:24.290081 kubelet[1971]: E1101 00:09:24.290055 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.290081 kubelet[1971]: W1101 00:09:24.290076 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.290168 kubelet[1971]: E1101 00:09:24.290093 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.290703 kubelet[1971]: E1101 00:09:24.290685 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.290703 kubelet[1971]: W1101 00:09:24.290701 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.290815 kubelet[1971]: E1101 00:09:24.290714 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.293187 systemd[1]: Started cri-containerd-e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594.scope. Nov 1 00:09:24.294884 kubelet[1971]: E1101 00:09:24.294861 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.294884 kubelet[1971]: W1101 00:09:24.294879 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.294995 kubelet[1971]: E1101 00:09:24.294892 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.295119 kubelet[1971]: E1101 00:09:24.295101 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.295119 kubelet[1971]: W1101 00:09:24.295113 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.295119 kubelet[1971]: E1101 00:09:24.295123 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.295276 kubelet[1971]: E1101 00:09:24.295260 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.295276 kubelet[1971]: W1101 00:09:24.295272 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.295340 kubelet[1971]: E1101 00:09:24.295282 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.295340 kubelet[1971]: I1101 00:09:24.295299 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/ee73499a-4c7c-4cc1-87d2-26b81ea29f19-registration-dir\") pod \"csi-node-driver-d2762\" (UID: \"ee73499a-4c7c-4cc1-87d2-26b81ea29f19\") " pod="calico-system/csi-node-driver-d2762" Nov 1 00:09:24.295449 kubelet[1971]: E1101 00:09:24.295431 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.295449 kubelet[1971]: W1101 00:09:24.295447 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.295509 kubelet[1971]: E1101 00:09:24.295456 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.295624 kubelet[1971]: E1101 00:09:24.295602 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.295624 kubelet[1971]: W1101 00:09:24.295613 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.295692 kubelet[1971]: E1101 00:09:24.295622 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.296104 kubelet[1971]: E1101 00:09:24.296089 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.296104 kubelet[1971]: W1101 00:09:24.296102 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.296208 kubelet[1971]: E1101 00:09:24.296111 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.296208 kubelet[1971]: I1101 00:09:24.296131 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/ee73499a-4c7c-4cc1-87d2-26b81ea29f19-kubelet-dir\") pod \"csi-node-driver-d2762\" (UID: \"ee73499a-4c7c-4cc1-87d2-26b81ea29f19\") " pod="calico-system/csi-node-driver-d2762" Nov 1 00:09:24.296329 kubelet[1971]: E1101 00:09:24.296316 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.296329 kubelet[1971]: W1101 00:09:24.296328 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.296396 kubelet[1971]: E1101 00:09:24.296337 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.296396 kubelet[1971]: I1101 00:09:24.296352 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/ee73499a-4c7c-4cc1-87d2-26b81ea29f19-socket-dir\") pod \"csi-node-driver-d2762\" (UID: \"ee73499a-4c7c-4cc1-87d2-26b81ea29f19\") " pod="calico-system/csi-node-driver-d2762" Nov 1 00:09:24.296534 kubelet[1971]: E1101 00:09:24.296523 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.296570 kubelet[1971]: W1101 00:09:24.296535 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.296570 kubelet[1971]: E1101 00:09:24.296544 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.296702 kubelet[1971]: E1101 00:09:24.296692 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.296702 kubelet[1971]: W1101 00:09:24.296702 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.296765 kubelet[1971]: E1101 00:09:24.296710 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.296870 kubelet[1971]: E1101 00:09:24.296860 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.296913 kubelet[1971]: W1101 00:09:24.296870 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.296913 kubelet[1971]: E1101 00:09:24.296878 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.297021 kubelet[1971]: E1101 00:09:24.297012 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.297021 kubelet[1971]: W1101 00:09:24.297021 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.297086 kubelet[1971]: E1101 00:09:24.297028 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.306000 audit: BPF prog-id=125 op=LOAD Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532636530663264623937626136376137386166613431363862656239 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532636530663264623937626136376137386166613431363862656239 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit: BPF prog-id=126 op=LOAD Nov 1 00:09:24.307000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532636530663264623937626136376137386166613431363862656239 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit: BPF prog-id=127 op=LOAD Nov 1 00:09:24.307000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532636530663264623937626136376137386166613431363862656239 Nov 1 00:09:24.307000 audit: BPF prog-id=127 op=UNLOAD Nov 1 00:09:24.307000 audit: BPF prog-id=126 op=UNLOAD Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:24.307000 audit: BPF prog-id=128 op=LOAD Nov 1 00:09:24.307000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532636530663264623937626136376137386166613431363862656239 Nov 1 00:09:24.319329 env[1216]: time="2025-11-01T00:09:24.319287636Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-g5d4j,Uid:38d35a8e-6b08-4474-8b8a-b6f9edf06ea9,Namespace:calico-system,Attempt:0,} returns sandbox id \"e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594\"" Nov 1 00:09:24.320097 kubelet[1971]: E1101 00:09:24.319885 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:24.397409 kubelet[1971]: E1101 00:09:24.397377 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.397409 kubelet[1971]: W1101 00:09:24.397403 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.397593 kubelet[1971]: E1101 00:09:24.397424 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.397659 kubelet[1971]: E1101 00:09:24.397645 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.397659 kubelet[1971]: W1101 00:09:24.397656 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.397739 kubelet[1971]: E1101 00:09:24.397666 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.397863 kubelet[1971]: E1101 00:09:24.397852 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.397863 kubelet[1971]: W1101 00:09:24.397863 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.397945 kubelet[1971]: E1101 00:09:24.397871 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.398036 kubelet[1971]: E1101 00:09:24.398024 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.398036 kubelet[1971]: W1101 00:09:24.398034 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.398116 kubelet[1971]: E1101 00:09:24.398043 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.398239 kubelet[1971]: E1101 00:09:24.398218 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.398239 kubelet[1971]: W1101 00:09:24.398230 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.398314 kubelet[1971]: E1101 00:09:24.398240 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.398426 kubelet[1971]: E1101 00:09:24.398414 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.398426 kubelet[1971]: W1101 00:09:24.398426 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.398500 kubelet[1971]: E1101 00:09:24.398434 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.398584 kubelet[1971]: E1101 00:09:24.398572 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.398584 kubelet[1971]: W1101 00:09:24.398582 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.398644 kubelet[1971]: E1101 00:09:24.398590 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.398717 kubelet[1971]: E1101 00:09:24.398707 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.398717 kubelet[1971]: W1101 00:09:24.398716 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.398807 kubelet[1971]: E1101 00:09:24.398723 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.398906 kubelet[1971]: E1101 00:09:24.398853 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.398906 kubelet[1971]: W1101 00:09:24.398867 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.398906 kubelet[1971]: E1101 00:09:24.398874 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.399001 kubelet[1971]: E1101 00:09:24.398996 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.399031 kubelet[1971]: W1101 00:09:24.399003 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.399031 kubelet[1971]: E1101 00:09:24.399010 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.399175 kubelet[1971]: E1101 00:09:24.399159 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.399175 kubelet[1971]: W1101 00:09:24.399169 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.399175 kubelet[1971]: E1101 00:09:24.399177 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.399312 kubelet[1971]: E1101 00:09:24.399298 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.399312 kubelet[1971]: W1101 00:09:24.399307 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.399395 kubelet[1971]: E1101 00:09:24.399314 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.399463 kubelet[1971]: E1101 00:09:24.399449 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.399463 kubelet[1971]: W1101 00:09:24.399460 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.399541 kubelet[1971]: E1101 00:09:24.399467 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.399623 kubelet[1971]: E1101 00:09:24.399614 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.399623 kubelet[1971]: W1101 00:09:24.399623 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.399706 kubelet[1971]: E1101 00:09:24.399630 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.399794 kubelet[1971]: E1101 00:09:24.399783 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.399794 kubelet[1971]: W1101 00:09:24.399793 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.399874 kubelet[1971]: E1101 00:09:24.399801 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.399931 kubelet[1971]: E1101 00:09:24.399919 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.399931 kubelet[1971]: W1101 00:09:24.399929 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.400002 kubelet[1971]: E1101 00:09:24.399936 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.400355 kubelet[1971]: E1101 00:09:24.400228 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.400355 kubelet[1971]: W1101 00:09:24.400243 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.400355 kubelet[1971]: E1101 00:09:24.400256 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.400839 kubelet[1971]: E1101 00:09:24.400534 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.400839 kubelet[1971]: W1101 00:09:24.400546 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.400839 kubelet[1971]: E1101 00:09:24.400556 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.400839 kubelet[1971]: E1101 00:09:24.400831 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.400839 kubelet[1971]: W1101 00:09:24.400842 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.401021 kubelet[1971]: E1101 00:09:24.400853 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.401021 kubelet[1971]: E1101 00:09:24.400980 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.401021 kubelet[1971]: W1101 00:09:24.400989 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.401021 kubelet[1971]: E1101 00:09:24.400996 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.401172 kubelet[1971]: E1101 00:09:24.401147 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.401172 kubelet[1971]: W1101 00:09:24.401159 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.401172 kubelet[1971]: E1101 00:09:24.401167 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.401314 kubelet[1971]: E1101 00:09:24.401304 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.401314 kubelet[1971]: W1101 00:09:24.401314 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.401391 kubelet[1971]: E1101 00:09:24.401321 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.401451 kubelet[1971]: E1101 00:09:24.401441 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.401451 kubelet[1971]: W1101 00:09:24.401451 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.401521 kubelet[1971]: E1101 00:09:24.401458 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.401614 kubelet[1971]: E1101 00:09:24.401603 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.401614 kubelet[1971]: W1101 00:09:24.401614 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.401699 kubelet[1971]: E1101 00:09:24.401622 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.401801 kubelet[1971]: E1101 00:09:24.401790 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.401801 kubelet[1971]: W1101 00:09:24.401800 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.401870 kubelet[1971]: E1101 00:09:24.401808 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.411290 kubelet[1971]: E1101 00:09:24.411221 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:24.411290 kubelet[1971]: W1101 00:09:24.411237 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:24.411290 kubelet[1971]: E1101 00:09:24.411255 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:24.724000 audit[2565]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=2565 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:24.724000 audit[2565]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffff56eaf20 a2=0 a3=1 items=0 ppid=2087 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.724000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:24.733000 audit[2565]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=2565 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:24.733000 audit[2565]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff56eaf20 a2=0 a3=1 items=0 ppid=2087 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:24.733000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:25.123207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3645349709.mount: Deactivated successfully. Nov 1 00:09:25.619378 kubelet[1971]: E1101 00:09:25.619327 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:26.099203 env[1216]: time="2025-11-01T00:09:26.099077064Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:26.100995 env[1216]: time="2025-11-01T00:09:26.100953689Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:26.102524 env[1216]: time="2025-11-01T00:09:26.102481560Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:26.104181 env[1216]: time="2025-11-01T00:09:26.104139364Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:26.104607 env[1216]: time="2025-11-01T00:09:26.104564566Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Nov 1 00:09:26.106684 env[1216]: time="2025-11-01T00:09:26.106632810Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:09:26.125265 env[1216]: time="2025-11-01T00:09:26.125199801Z" level=info msg="CreateContainer within sandbox \"e3cb5a305f0a20f54e158d8afbf931bc720c287089782f326a0fb1bb9ba78632\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:09:26.146332 env[1216]: time="2025-11-01T00:09:26.146273040Z" level=info msg="CreateContainer within sandbox \"e3cb5a305f0a20f54e158d8afbf931bc720c287089782f326a0fb1bb9ba78632\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"73ceeb6bb4910f3a88fcf18d0333bcb8db25b7380ac1352ca6a7d137dd5c32e8\"" Nov 1 00:09:26.146988 env[1216]: time="2025-11-01T00:09:26.146963748Z" level=info msg="StartContainer for \"73ceeb6bb4910f3a88fcf18d0333bcb8db25b7380ac1352ca6a7d137dd5c32e8\"" Nov 1 00:09:26.172808 systemd[1]: Started cri-containerd-73ceeb6bb4910f3a88fcf18d0333bcb8db25b7380ac1352ca6a7d137dd5c32e8.scope. Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.197000 audit: BPF prog-id=129 op=LOAD Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2406 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:26.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733636565623662623439313066336138386663663138643033333362 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2406 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:26.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733636565623662623439313066336138386663663138643033333362 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit: BPF prog-id=130 op=LOAD Nov 1 00:09:26.198000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2406 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:26.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733636565623662623439313066336138386663663138643033333362 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit: BPF prog-id=131 op=LOAD Nov 1 00:09:26.198000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2406 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:26.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733636565623662623439313066336138386663663138643033333362 Nov 1 00:09:26.198000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:09:26.198000 audit: BPF prog-id=130 op=UNLOAD Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:26.198000 audit: BPF prog-id=132 op=LOAD Nov 1 00:09:26.198000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2406 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:26.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733636565623662623439313066336138386663663138643033333362 Nov 1 00:09:26.234646 env[1216]: time="2025-11-01T00:09:26.234594793Z" level=info msg="StartContainer for \"73ceeb6bb4910f3a88fcf18d0333bcb8db25b7380ac1352ca6a7d137dd5c32e8\" returns successfully" Nov 1 00:09:26.680284 kubelet[1971]: E1101 00:09:26.680245 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:26.701510 kubelet[1971]: I1101 00:09:26.701451 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-847bfd6bf-f56tm" podStartSLOduration=1.701285698 podStartE2EDuration="3.701435767s" podCreationTimestamp="2025-11-01 00:09:23 +0000 UTC" firstStartedPulling="2025-11-01 00:09:24.106320765 +0000 UTC m=+22.578730219" lastFinishedPulling="2025-11-01 00:09:26.106470834 +0000 UTC m=+24.578880288" observedRunningTime="2025-11-01 00:09:26.701088933 +0000 UTC m=+25.173498387" watchObservedRunningTime="2025-11-01 00:09:26.701435767 +0000 UTC m=+25.173845221" Nov 1 00:09:26.730000 audit[2611]: NETFILTER_CFG table=filter:103 family=2 entries=21 op=nft_register_rule pid=2611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:26.730000 audit[2611]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffeeb58310 a2=0 a3=1 items=0 ppid=2087 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:26.730000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:26.736000 audit[2611]: NETFILTER_CFG table=nat:104 family=2 entries=19 op=nft_register_chain pid=2611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:26.736000 audit[2611]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffeeb58310 a2=0 a3=1 items=0 ppid=2087 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:26.736000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:26.770238 kubelet[1971]: E1101 00:09:26.770202 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.770238 kubelet[1971]: W1101 00:09:26.770226 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.771217 kubelet[1971]: E1101 00:09:26.771183 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.771404 kubelet[1971]: E1101 00:09:26.771391 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.771445 kubelet[1971]: W1101 00:09:26.771404 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.771474 kubelet[1971]: E1101 00:09:26.771446 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.771654 kubelet[1971]: E1101 00:09:26.771644 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.771654 kubelet[1971]: W1101 00:09:26.771654 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.771724 kubelet[1971]: E1101 00:09:26.771663 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.771840 kubelet[1971]: E1101 00:09:26.771827 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.771878 kubelet[1971]: W1101 00:09:26.771864 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.771910 kubelet[1971]: E1101 00:09:26.771876 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.772047 kubelet[1971]: E1101 00:09:26.772037 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.772088 kubelet[1971]: W1101 00:09:26.772048 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.772088 kubelet[1971]: E1101 00:09:26.772057 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.772194 kubelet[1971]: E1101 00:09:26.772186 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.772225 kubelet[1971]: W1101 00:09:26.772194 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.772253 kubelet[1971]: E1101 00:09:26.772202 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.772407 kubelet[1971]: E1101 00:09:26.772396 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.772407 kubelet[1971]: W1101 00:09:26.772407 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.772481 kubelet[1971]: E1101 00:09:26.772416 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.772564 kubelet[1971]: E1101 00:09:26.772555 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.772564 kubelet[1971]: W1101 00:09:26.772564 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.772620 kubelet[1971]: E1101 00:09:26.772571 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.772716 kubelet[1971]: E1101 00:09:26.772707 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.772750 kubelet[1971]: W1101 00:09:26.772716 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.772750 kubelet[1971]: E1101 00:09:26.772731 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.772885 kubelet[1971]: E1101 00:09:26.772875 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.772920 kubelet[1971]: W1101 00:09:26.772886 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.772920 kubelet[1971]: E1101 00:09:26.772895 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.773042 kubelet[1971]: E1101 00:09:26.773033 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.773042 kubelet[1971]: W1101 00:09:26.773042 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.773111 kubelet[1971]: E1101 00:09:26.773049 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.773187 kubelet[1971]: E1101 00:09:26.773178 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.773187 kubelet[1971]: W1101 00:09:26.773187 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.773253 kubelet[1971]: E1101 00:09:26.773194 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.773339 kubelet[1971]: E1101 00:09:26.773329 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.773339 kubelet[1971]: W1101 00:09:26.773339 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.773405 kubelet[1971]: E1101 00:09:26.773346 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.773474 kubelet[1971]: E1101 00:09:26.773465 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.773474 kubelet[1971]: W1101 00:09:26.773474 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.773540 kubelet[1971]: E1101 00:09:26.773481 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.773627 kubelet[1971]: E1101 00:09:26.773618 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.773627 kubelet[1971]: W1101 00:09:26.773626 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.773679 kubelet[1971]: E1101 00:09:26.773633 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.816165 kubelet[1971]: E1101 00:09:26.816142 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.816328 kubelet[1971]: W1101 00:09:26.816313 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.816404 kubelet[1971]: E1101 00:09:26.816391 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.816738 kubelet[1971]: E1101 00:09:26.816721 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.816853 kubelet[1971]: W1101 00:09:26.816838 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.816912 kubelet[1971]: E1101 00:09:26.816901 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.817200 kubelet[1971]: E1101 00:09:26.817184 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.817293 kubelet[1971]: W1101 00:09:26.817271 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.817359 kubelet[1971]: E1101 00:09:26.817347 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.817592 kubelet[1971]: E1101 00:09:26.817579 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.817674 kubelet[1971]: W1101 00:09:26.817661 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.817731 kubelet[1971]: E1101 00:09:26.817721 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.818020 kubelet[1971]: E1101 00:09:26.818005 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.818112 kubelet[1971]: W1101 00:09:26.818099 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.818180 kubelet[1971]: E1101 00:09:26.818169 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.818426 kubelet[1971]: E1101 00:09:26.818413 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.818501 kubelet[1971]: W1101 00:09:26.818489 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.818565 kubelet[1971]: E1101 00:09:26.818554 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.818812 kubelet[1971]: E1101 00:09:26.818790 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.818812 kubelet[1971]: W1101 00:09:26.818807 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.818913 kubelet[1971]: E1101 00:09:26.818819 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.818998 kubelet[1971]: E1101 00:09:26.818983 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.818998 kubelet[1971]: W1101 00:09:26.818994 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.819070 kubelet[1971]: E1101 00:09:26.819002 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.819231 kubelet[1971]: E1101 00:09:26.819140 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.819231 kubelet[1971]: W1101 00:09:26.819147 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.819231 kubelet[1971]: E1101 00:09:26.819155 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.819334 kubelet[1971]: E1101 00:09:26.819292 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.819334 kubelet[1971]: W1101 00:09:26.819299 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.819334 kubelet[1971]: E1101 00:09:26.819306 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.819464 kubelet[1971]: E1101 00:09:26.819448 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.819464 kubelet[1971]: W1101 00:09:26.819459 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.819532 kubelet[1971]: E1101 00:09:26.819468 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.819756 kubelet[1971]: E1101 00:09:26.819741 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.819862 kubelet[1971]: W1101 00:09:26.819848 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.820050 kubelet[1971]: E1101 00:09:26.820031 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.820341 kubelet[1971]: E1101 00:09:26.820327 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.820341 kubelet[1971]: W1101 00:09:26.820340 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.820521 kubelet[1971]: E1101 00:09:26.820350 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.820521 kubelet[1971]: E1101 00:09:26.820515 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.820521 kubelet[1971]: W1101 00:09:26.820522 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.820606 kubelet[1971]: E1101 00:09:26.820530 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.820665 kubelet[1971]: E1101 00:09:26.820651 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.820665 kubelet[1971]: W1101 00:09:26.820661 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.820735 kubelet[1971]: E1101 00:09:26.820669 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.820835 kubelet[1971]: E1101 00:09:26.820824 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.820835 kubelet[1971]: W1101 00:09:26.820834 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.820898 kubelet[1971]: E1101 00:09:26.820842 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.820994 kubelet[1971]: E1101 00:09:26.820983 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.820994 kubelet[1971]: W1101 00:09:26.820993 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.821089 kubelet[1971]: E1101 00:09:26.821001 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:26.821329 kubelet[1971]: E1101 00:09:26.821314 1971 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:09:26.821329 kubelet[1971]: W1101 00:09:26.821326 1971 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:09:26.821390 kubelet[1971]: E1101 00:09:26.821335 1971 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:09:27.107428 env[1216]: time="2025-11-01T00:09:27.107381360Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:27.109208 env[1216]: time="2025-11-01T00:09:27.109184611Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:27.117495 env[1216]: time="2025-11-01T00:09:27.115901567Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:27.122570 env[1216]: time="2025-11-01T00:09:27.122537556Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:27.122858 env[1216]: time="2025-11-01T00:09:27.122834784Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Nov 1 00:09:27.127078 env[1216]: time="2025-11-01T00:09:27.127008700Z" level=info msg="CreateContainer within sandbox \"e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:09:27.138408 env[1216]: time="2025-11-01T00:09:27.138369296Z" level=info msg="CreateContainer within sandbox \"e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"93754a91855be202e2ae8ea0c6335817ee06cfcaaaa087506cf5dd42a0d50b2c\"" Nov 1 00:09:27.139216 env[1216]: time="2025-11-01T00:09:27.139151531Z" level=info msg="StartContainer for \"93754a91855be202e2ae8ea0c6335817ee06cfcaaaa087506cf5dd42a0d50b2c\"" Nov 1 00:09:27.162831 systemd[1]: Started cri-containerd-93754a91855be202e2ae8ea0c6335817ee06cfcaaaa087506cf5dd42a0d50b2c.scope. Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2488 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:27.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933373534613931383535626532303265326165386561306336333335 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit: BPF prog-id=133 op=LOAD Nov 1 00:09:27.182000 audit[2652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2488 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:27.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933373534613931383535626532303265326165386561306336333335 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit: BPF prog-id=134 op=LOAD Nov 1 00:09:27.182000 audit[2652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2488 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:27.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933373534613931383535626532303265326165386561306336333335 Nov 1 00:09:27.182000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:09:27.182000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:27.182000 audit: BPF prog-id=135 op=LOAD Nov 1 00:09:27.182000 audit[2652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2488 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:27.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933373534613931383535626532303265326165386561306336333335 Nov 1 00:09:27.196378 env[1216]: time="2025-11-01T00:09:27.196302347Z" level=info msg="StartContainer for \"93754a91855be202e2ae8ea0c6335817ee06cfcaaaa087506cf5dd42a0d50b2c\" returns successfully" Nov 1 00:09:27.210012 systemd[1]: cri-containerd-93754a91855be202e2ae8ea0c6335817ee06cfcaaaa087506cf5dd42a0d50b2c.scope: Deactivated successfully. Nov 1 00:09:27.214000 audit: BPF prog-id=135 op=UNLOAD Nov 1 00:09:27.237938 env[1216]: time="2025-11-01T00:09:27.237889328Z" level=info msg="shim disconnected" id=93754a91855be202e2ae8ea0c6335817ee06cfcaaaa087506cf5dd42a0d50b2c Nov 1 00:09:27.237938 env[1216]: time="2025-11-01T00:09:27.237939333Z" level=warning msg="cleaning up after shim disconnected" id=93754a91855be202e2ae8ea0c6335817ee06cfcaaaa087506cf5dd42a0d50b2c namespace=k8s.io Nov 1 00:09:27.238199 env[1216]: time="2025-11-01T00:09:27.237949974Z" level=info msg="cleaning up dead shim" Nov 1 00:09:27.245153 env[1216]: time="2025-11-01T00:09:27.245104772Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:09:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2691 runtime=io.containerd.runc.v2\n" Nov 1 00:09:27.619403 kubelet[1971]: E1101 00:09:27.619359 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:27.682989 kubelet[1971]: E1101 00:09:27.682958 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:27.683306 kubelet[1971]: E1101 00:09:27.683001 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:27.684990 env[1216]: time="2025-11-01T00:09:27.684952895Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:09:28.117586 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-93754a91855be202e2ae8ea0c6335817ee06cfcaaaa087506cf5dd42a0d50b2c-rootfs.mount: Deactivated successfully. Nov 1 00:09:28.684681 kubelet[1971]: E1101 00:09:28.684636 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:29.620195 kubelet[1971]: E1101 00:09:29.620145 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:30.490683 env[1216]: time="2025-11-01T00:09:30.490637822Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:30.492106 env[1216]: time="2025-11-01T00:09:30.492066263Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:30.493938 env[1216]: time="2025-11-01T00:09:30.493904378Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:30.495620 env[1216]: time="2025-11-01T00:09:30.495585400Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:30.496285 env[1216]: time="2025-11-01T00:09:30.496238496Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Nov 1 00:09:30.500571 env[1216]: time="2025-11-01T00:09:30.500531338Z" level=info msg="CreateContainer within sandbox \"e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:09:30.523672 env[1216]: time="2025-11-01T00:09:30.523630131Z" level=info msg="CreateContainer within sandbox \"e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"703e5df4cb84f3375cae24bcae1b795d0482d6111960f4bca24a8f48c62cf837\"" Nov 1 00:09:30.526236 env[1216]: time="2025-11-01T00:09:30.526153024Z" level=info msg="StartContainer for \"703e5df4cb84f3375cae24bcae1b795d0482d6111960f4bca24a8f48c62cf837\"" Nov 1 00:09:30.548799 systemd[1]: Started cri-containerd-703e5df4cb84f3375cae24bcae1b795d0482d6111960f4bca24a8f48c62cf837.scope. Nov 1 00:09:30.563000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.566382 kernel: kauditd_printk_skb: 229 callbacks suppressed Nov 1 00:09:30.566438 kernel: audit: type=1400 audit(1761955770.563:1018): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.563000 audit[2717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2488 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:30.573264 kernel: audit: type=1300 audit(1761955770.563:1018): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2488 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:30.573393 kernel: audit: type=1327 audit(1761955770.563:1018): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336535646634636238346633333735636165323462636165316237 Nov 1 00:09:30.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336535646634636238346633333735636165323462636165316237 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.579550 kernel: audit: type=1400 audit(1761955770.572:1019): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.579611 kernel: audit: type=1400 audit(1761955770.572:1019): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.584746 kernel: audit: type=1400 audit(1761955770.572:1019): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.584817 kernel: audit: type=1400 audit(1761955770.572:1019): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.590651 kernel: audit: type=1400 audit(1761955770.572:1019): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.593738 kernel: audit: type=1400 audit(1761955770.572:1019): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.597173 kernel: audit: type=1400 audit(1761955770.572:1019): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.572000 audit: BPF prog-id=136 op=LOAD Nov 1 00:09:30.572000 audit[2717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2488 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:30.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336535646634636238346633333735636165323462636165316237 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.575000 audit: BPF prog-id=137 op=LOAD Nov 1 00:09:30.575000 audit[2717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2488 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:30.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336535646634636238346633333735636165323462636165316237 Nov 1 00:09:30.578000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:09:30.578000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:30.578000 audit: BPF prog-id=138 op=LOAD Nov 1 00:09:30.578000 audit[2717]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2488 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:30.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730336535646634636238346633333735636165323462636165316237 Nov 1 00:09:30.715597 env[1216]: time="2025-11-01T00:09:30.715517629Z" level=info msg="StartContainer for \"703e5df4cb84f3375cae24bcae1b795d0482d6111960f4bca24a8f48c62cf837\" returns successfully" Nov 1 00:09:31.142253 env[1216]: time="2025-11-01T00:09:31.142188150Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:09:31.144303 systemd[1]: cri-containerd-703e5df4cb84f3375cae24bcae1b795d0482d6111960f4bca24a8f48c62cf837.scope: Deactivated successfully. Nov 1 00:09:31.147000 audit: BPF prog-id=138 op=UNLOAD Nov 1 00:09:31.161189 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-703e5df4cb84f3375cae24bcae1b795d0482d6111960f4bca24a8f48c62cf837-rootfs.mount: Deactivated successfully. Nov 1 00:09:31.163666 env[1216]: time="2025-11-01T00:09:31.163605736Z" level=info msg="shim disconnected" id=703e5df4cb84f3375cae24bcae1b795d0482d6111960f4bca24a8f48c62cf837 Nov 1 00:09:31.163666 env[1216]: time="2025-11-01T00:09:31.163658660Z" level=warning msg="cleaning up after shim disconnected" id=703e5df4cb84f3375cae24bcae1b795d0482d6111960f4bca24a8f48c62cf837 namespace=k8s.io Nov 1 00:09:31.163666 env[1216]: time="2025-11-01T00:09:31.163669261Z" level=info msg="cleaning up dead shim" Nov 1 00:09:31.170027 env[1216]: time="2025-11-01T00:09:31.169990537Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:09:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2757 runtime=io.containerd.runc.v2\n" Nov 1 00:09:31.233488 kubelet[1971]: I1101 00:09:31.232380 1971 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:09:31.270112 systemd[1]: Created slice kubepods-besteffort-pode7cc9e5c_4723_415a_adea_ade9b652a860.slice. Nov 1 00:09:31.281967 systemd[1]: Created slice kubepods-burstable-podb3ea4af2_3f43_4e61_9bdd_5f447d355048.slice. Nov 1 00:09:31.287012 systemd[1]: Created slice kubepods-besteffort-podf76eed17_611d_4863_927b_c02c54186a3e.slice. Nov 1 00:09:31.295533 systemd[1]: Created slice kubepods-besteffort-podd6dfbd61_197d_4e2c_99bc_c8ced9ca27b7.slice. Nov 1 00:09:31.304989 systemd[1]: Created slice kubepods-besteffort-pod9d3532b8_6e07_462d_911f_721c28e34778.slice. Nov 1 00:09:31.309629 systemd[1]: Created slice kubepods-burstable-pod732d3bd5_025e_4ee3_9cd6_d34425f82a66.slice. Nov 1 00:09:31.314184 systemd[1]: Created slice kubepods-besteffort-pod85742704_5ab5_4b30_87fe_a0db1b4cb53b.slice. Nov 1 00:09:31.358192 kubelet[1971]: I1101 00:09:31.358125 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/732d3bd5-025e-4ee3-9cd6-d34425f82a66-config-volume\") pod \"coredns-674b8bbfcf-j5k5b\" (UID: \"732d3bd5-025e-4ee3-9cd6-d34425f82a66\") " pod="kube-system/coredns-674b8bbfcf-j5k5b" Nov 1 00:09:31.358192 kubelet[1971]: I1101 00:09:31.358171 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/85742704-5ab5-4b30-87fe-a0db1b4cb53b-config\") pod \"goldmane-666569f655-67g77\" (UID: \"85742704-5ab5-4b30-87fe-a0db1b4cb53b\") " pod="calico-system/goldmane-666569f655-67g77" Nov 1 00:09:31.358192 kubelet[1971]: I1101 00:09:31.358191 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vh79r\" (UniqueName: \"kubernetes.io/projected/e7cc9e5c-4723-415a-adea-ade9b652a860-kube-api-access-vh79r\") pod \"whisker-7669fdc8cc-qz9w6\" (UID: \"e7cc9e5c-4723-415a-adea-ade9b652a860\") " pod="calico-system/whisker-7669fdc8cc-qz9w6" Nov 1 00:09:31.358398 kubelet[1971]: I1101 00:09:31.358210 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vddxt\" (UniqueName: \"kubernetes.io/projected/732d3bd5-025e-4ee3-9cd6-d34425f82a66-kube-api-access-vddxt\") pod \"coredns-674b8bbfcf-j5k5b\" (UID: \"732d3bd5-025e-4ee3-9cd6-d34425f82a66\") " pod="kube-system/coredns-674b8bbfcf-j5k5b" Nov 1 00:09:31.358398 kubelet[1971]: I1101 00:09:31.358227 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wz2vz\" (UniqueName: \"kubernetes.io/projected/85742704-5ab5-4b30-87fe-a0db1b4cb53b-kube-api-access-wz2vz\") pod \"goldmane-666569f655-67g77\" (UID: \"85742704-5ab5-4b30-87fe-a0db1b4cb53b\") " pod="calico-system/goldmane-666569f655-67g77" Nov 1 00:09:31.358398 kubelet[1971]: I1101 00:09:31.358245 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/b3ea4af2-3f43-4e61-9bdd-5f447d355048-config-volume\") pod \"coredns-674b8bbfcf-2w9cl\" (UID: \"b3ea4af2-3f43-4e61-9bdd-5f447d355048\") " pod="kube-system/coredns-674b8bbfcf-2w9cl" Nov 1 00:09:31.358398 kubelet[1971]: I1101 00:09:31.358263 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/9d3532b8-6e07-462d-911f-721c28e34778-calico-apiserver-certs\") pod \"calico-apiserver-6495f5c798-dgqbz\" (UID: \"9d3532b8-6e07-462d-911f-721c28e34778\") " pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" Nov 1 00:09:31.358398 kubelet[1971]: I1101 00:09:31.358279 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lcnv5\" (UniqueName: \"kubernetes.io/projected/f76eed17-611d-4863-927b-c02c54186a3e-kube-api-access-lcnv5\") pod \"calico-apiserver-6495f5c798-mfzv5\" (UID: \"f76eed17-611d-4863-927b-c02c54186a3e\") " pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" Nov 1 00:09:31.358527 kubelet[1971]: I1101 00:09:31.358295 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dwktn\" (UniqueName: \"kubernetes.io/projected/b3ea4af2-3f43-4e61-9bdd-5f447d355048-kube-api-access-dwktn\") pod \"coredns-674b8bbfcf-2w9cl\" (UID: \"b3ea4af2-3f43-4e61-9bdd-5f447d355048\") " pod="kube-system/coredns-674b8bbfcf-2w9cl" Nov 1 00:09:31.358527 kubelet[1971]: I1101 00:09:31.358311 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7-tigera-ca-bundle\") pod \"calico-kube-controllers-6c7694554f-flcbv\" (UID: \"d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7\") " pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" Nov 1 00:09:31.358527 kubelet[1971]: I1101 00:09:31.358335 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dzmqg\" (UniqueName: \"kubernetes.io/projected/d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7-kube-api-access-dzmqg\") pod \"calico-kube-controllers-6c7694554f-flcbv\" (UID: \"d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7\") " pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" Nov 1 00:09:31.358527 kubelet[1971]: I1101 00:09:31.358351 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/85742704-5ab5-4b30-87fe-a0db1b4cb53b-goldmane-key-pair\") pod \"goldmane-666569f655-67g77\" (UID: \"85742704-5ab5-4b30-87fe-a0db1b4cb53b\") " pod="calico-system/goldmane-666569f655-67g77" Nov 1 00:09:31.358527 kubelet[1971]: I1101 00:09:31.358366 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f76eed17-611d-4863-927b-c02c54186a3e-calico-apiserver-certs\") pod \"calico-apiserver-6495f5c798-mfzv5\" (UID: \"f76eed17-611d-4863-927b-c02c54186a3e\") " pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" Nov 1 00:09:31.358651 kubelet[1971]: I1101 00:09:31.358386 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e7cc9e5c-4723-415a-adea-ade9b652a860-whisker-ca-bundle\") pod \"whisker-7669fdc8cc-qz9w6\" (UID: \"e7cc9e5c-4723-415a-adea-ade9b652a860\") " pod="calico-system/whisker-7669fdc8cc-qz9w6" Nov 1 00:09:31.358651 kubelet[1971]: I1101 00:09:31.358404 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2mwdn\" (UniqueName: \"kubernetes.io/projected/9d3532b8-6e07-462d-911f-721c28e34778-kube-api-access-2mwdn\") pod \"calico-apiserver-6495f5c798-dgqbz\" (UID: \"9d3532b8-6e07-462d-911f-721c28e34778\") " pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" Nov 1 00:09:31.358651 kubelet[1971]: I1101 00:09:31.358423 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/85742704-5ab5-4b30-87fe-a0db1b4cb53b-goldmane-ca-bundle\") pod \"goldmane-666569f655-67g77\" (UID: \"85742704-5ab5-4b30-87fe-a0db1b4cb53b\") " pod="calico-system/goldmane-666569f655-67g77" Nov 1 00:09:31.358651 kubelet[1971]: I1101 00:09:31.358443 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e7cc9e5c-4723-415a-adea-ade9b652a860-whisker-backend-key-pair\") pod \"whisker-7669fdc8cc-qz9w6\" (UID: \"e7cc9e5c-4723-415a-adea-ade9b652a860\") " pod="calico-system/whisker-7669fdc8cc-qz9w6" Nov 1 00:09:31.575002 env[1216]: time="2025-11-01T00:09:31.574891505Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7669fdc8cc-qz9w6,Uid:e7cc9e5c-4723-415a-adea-ade9b652a860,Namespace:calico-system,Attempt:0,}" Nov 1 00:09:31.586146 kubelet[1971]: E1101 00:09:31.586106 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:31.587912 env[1216]: time="2025-11-01T00:09:31.587864362Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-2w9cl,Uid:b3ea4af2-3f43-4e61-9bdd-5f447d355048,Namespace:kube-system,Attempt:0,}" Nov 1 00:09:31.593580 env[1216]: time="2025-11-01T00:09:31.593545545Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6495f5c798-mfzv5,Uid:f76eed17-611d-4863-927b-c02c54186a3e,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:09:31.605062 env[1216]: time="2025-11-01T00:09:31.604991918Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c7694554f-flcbv,Uid:d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7,Namespace:calico-system,Attempt:0,}" Nov 1 00:09:31.608694 env[1216]: time="2025-11-01T00:09:31.608648816Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6495f5c798-dgqbz,Uid:9d3532b8-6e07-462d-911f-721c28e34778,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:09:31.613317 kubelet[1971]: E1101 00:09:31.613251 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:31.614155 env[1216]: time="2025-11-01T00:09:31.614123823Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-j5k5b,Uid:732d3bd5-025e-4ee3-9cd6-d34425f82a66,Namespace:kube-system,Attempt:0,}" Nov 1 00:09:31.629956 env[1216]: time="2025-11-01T00:09:31.629914870Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-67g77,Uid:85742704-5ab5-4b30-87fe-a0db1b4cb53b,Namespace:calico-system,Attempt:0,}" Nov 1 00:09:31.630288 systemd[1]: Created slice kubepods-besteffort-podee73499a_4c7c_4cc1_87d2_26b81ea29f19.slice. Nov 1 00:09:31.642004 env[1216]: time="2025-11-01T00:09:31.641955012Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-d2762,Uid:ee73499a-4c7c-4cc1-87d2-26b81ea29f19,Namespace:calico-system,Attempt:0,}" Nov 1 00:09:31.722447 kubelet[1971]: E1101 00:09:31.722405 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:31.725262 env[1216]: time="2025-11-01T00:09:31.725147954Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:09:31.789312 env[1216]: time="2025-11-01T00:09:31.789223217Z" level=error msg="Failed to destroy network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.790420 env[1216]: time="2025-11-01T00:09:31.790378311Z" level=error msg="encountered an error cleaning up failed sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.790512 env[1216]: time="2025-11-01T00:09:31.790437676Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7669fdc8cc-qz9w6,Uid:e7cc9e5c-4723-415a-adea-ade9b652a860,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.790734 kubelet[1971]: E1101 00:09:31.790684 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.790827 kubelet[1971]: E1101 00:09:31.790764 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7669fdc8cc-qz9w6" Nov 1 00:09:31.790827 kubelet[1971]: E1101 00:09:31.790804 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7669fdc8cc-qz9w6" Nov 1 00:09:31.790916 kubelet[1971]: E1101 00:09:31.790862 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7669fdc8cc-qz9w6_calico-system(e7cc9e5c-4723-415a-adea-ade9b652a860)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7669fdc8cc-qz9w6_calico-system(e7cc9e5c-4723-415a-adea-ade9b652a860)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7669fdc8cc-qz9w6" podUID="e7cc9e5c-4723-415a-adea-ade9b652a860" Nov 1 00:09:31.798543 env[1216]: time="2025-11-01T00:09:31.798477212Z" level=error msg="Failed to destroy network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.799260 env[1216]: time="2025-11-01T00:09:31.799207111Z" level=error msg="encountered an error cleaning up failed sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.799544 env[1216]: time="2025-11-01T00:09:31.799510496Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6495f5c798-mfzv5,Uid:f76eed17-611d-4863-927b-c02c54186a3e,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.799976 kubelet[1971]: E1101 00:09:31.799931 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.800064 kubelet[1971]: E1101 00:09:31.800005 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" Nov 1 00:09:31.800064 kubelet[1971]: E1101 00:09:31.800028 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" Nov 1 00:09:31.800124 kubelet[1971]: E1101 00:09:31.800089 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6495f5c798-mfzv5_calico-apiserver(f76eed17-611d-4863-927b-c02c54186a3e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6495f5c798-mfzv5_calico-apiserver(f76eed17-611d-4863-927b-c02c54186a3e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" podUID="f76eed17-611d-4863-927b-c02c54186a3e" Nov 1 00:09:31.806950 env[1216]: time="2025-11-01T00:09:31.806888097Z" level=error msg="Failed to destroy network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.807936 env[1216]: time="2025-11-01T00:09:31.807876618Z" level=error msg="encountered an error cleaning up failed sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.808030 env[1216]: time="2025-11-01T00:09:31.807944583Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-2w9cl,Uid:b3ea4af2-3f43-4e61-9bdd-5f447d355048,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.808218 kubelet[1971]: E1101 00:09:31.808174 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.808283 kubelet[1971]: E1101 00:09:31.808249 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-2w9cl" Nov 1 00:09:31.808283 kubelet[1971]: E1101 00:09:31.808273 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-2w9cl" Nov 1 00:09:31.808366 kubelet[1971]: E1101 00:09:31.808335 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-2w9cl_kube-system(b3ea4af2-3f43-4e61-9bdd-5f447d355048)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-2w9cl_kube-system(b3ea4af2-3f43-4e61-9bdd-5f447d355048)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-2w9cl" podUID="b3ea4af2-3f43-4e61-9bdd-5f447d355048" Nov 1 00:09:31.827546 env[1216]: time="2025-11-01T00:09:31.826670470Z" level=error msg="Failed to destroy network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.827763 env[1216]: time="2025-11-01T00:09:31.827707314Z" level=error msg="encountered an error cleaning up failed sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.827839 env[1216]: time="2025-11-01T00:09:31.827802442Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6495f5c798-dgqbz,Uid:9d3532b8-6e07-462d-911f-721c28e34778,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.828070 kubelet[1971]: E1101 00:09:31.828024 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.828128 kubelet[1971]: E1101 00:09:31.828105 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" Nov 1 00:09:31.828160 kubelet[1971]: E1101 00:09:31.828126 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" Nov 1 00:09:31.828231 kubelet[1971]: E1101 00:09:31.828198 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6495f5c798-dgqbz_calico-apiserver(9d3532b8-6e07-462d-911f-721c28e34778)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6495f5c798-dgqbz_calico-apiserver(9d3532b8-6e07-462d-911f-721c28e34778)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:09:31.835779 env[1216]: time="2025-11-01T00:09:31.835721288Z" level=error msg="Failed to destroy network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.836103 env[1216]: time="2025-11-01T00:09:31.836065116Z" level=error msg="encountered an error cleaning up failed sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.836180 env[1216]: time="2025-11-01T00:09:31.836113920Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c7694554f-flcbv,Uid:d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.836331 kubelet[1971]: E1101 00:09:31.836296 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.836395 kubelet[1971]: E1101 00:09:31.836346 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" Nov 1 00:09:31.836395 kubelet[1971]: E1101 00:09:31.836366 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" Nov 1 00:09:31.836451 kubelet[1971]: E1101 00:09:31.836416 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6c7694554f-flcbv_calico-system(d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6c7694554f-flcbv_calico-system(d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7" Nov 1 00:09:31.845285 env[1216]: time="2025-11-01T00:09:31.845233463Z" level=error msg="Failed to destroy network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.845605 env[1216]: time="2025-11-01T00:09:31.845568410Z" level=error msg="encountered an error cleaning up failed sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.845647 env[1216]: time="2025-11-01T00:09:31.845623415Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-d2762,Uid:ee73499a-4c7c-4cc1-87d2-26b81ea29f19,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.845905 kubelet[1971]: E1101 00:09:31.845866 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.845984 kubelet[1971]: E1101 00:09:31.845925 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-d2762" Nov 1 00:09:31.845984 kubelet[1971]: E1101 00:09:31.845946 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-d2762" Nov 1 00:09:31.846045 kubelet[1971]: E1101 00:09:31.846001 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-d2762_calico-system(ee73499a-4c7c-4cc1-87d2-26b81ea29f19)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-d2762_calico-system(ee73499a-4c7c-4cc1-87d2-26b81ea29f19)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:31.846499 env[1216]: time="2025-11-01T00:09:31.846461323Z" level=error msg="Failed to destroy network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.846818 env[1216]: time="2025-11-01T00:09:31.846789070Z" level=error msg="encountered an error cleaning up failed sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.846870 env[1216]: time="2025-11-01T00:09:31.846842274Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-67g77,Uid:85742704-5ab5-4b30-87fe-a0db1b4cb53b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.847619 kubelet[1971]: E1101 00:09:31.847577 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.847679 kubelet[1971]: E1101 00:09:31.847632 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-67g77" Nov 1 00:09:31.847679 kubelet[1971]: E1101 00:09:31.847649 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-67g77" Nov 1 00:09:31.847792 env[1216]: time="2025-11-01T00:09:31.847611297Z" level=error msg="Failed to destroy network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.847831 kubelet[1971]: E1101 00:09:31.847717 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-67g77_calico-system(85742704-5ab5-4b30-87fe-a0db1b4cb53b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-67g77_calico-system(85742704-5ab5-4b30-87fe-a0db1b4cb53b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-67g77" podUID="85742704-5ab5-4b30-87fe-a0db1b4cb53b" Nov 1 00:09:31.847999 env[1216]: time="2025-11-01T00:09:31.847965606Z" level=error msg="encountered an error cleaning up failed sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.848032 env[1216]: time="2025-11-01T00:09:31.848012970Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-j5k5b,Uid:732d3bd5-025e-4ee3-9cd6-d34425f82a66,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.848191 kubelet[1971]: E1101 00:09:31.848160 1971 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:31.848228 kubelet[1971]: E1101 00:09:31.848209 1971 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-j5k5b" Nov 1 00:09:31.848259 kubelet[1971]: E1101 00:09:31.848230 1971 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-j5k5b" Nov 1 00:09:31.848300 kubelet[1971]: E1101 00:09:31.848279 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-j5k5b_kube-system(732d3bd5-025e-4ee3-9cd6-d34425f82a66)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-j5k5b_kube-system(732d3bd5-025e-4ee3-9cd6-d34425f82a66)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-j5k5b" podUID="732d3bd5-025e-4ee3-9cd6-d34425f82a66" Nov 1 00:09:32.512790 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf-shm.mount: Deactivated successfully. Nov 1 00:09:32.512903 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b-shm.mount: Deactivated successfully. Nov 1 00:09:32.512970 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c-shm.mount: Deactivated successfully. Nov 1 00:09:32.725028 kubelet[1971]: I1101 00:09:32.724996 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:09:32.725876 env[1216]: time="2025-11-01T00:09:32.725839611Z" level=info msg="StopPodSandbox for \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\"" Nov 1 00:09:32.729017 kubelet[1971]: I1101 00:09:32.728986 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:09:32.729747 env[1216]: time="2025-11-01T00:09:32.729713996Z" level=info msg="StopPodSandbox for \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\"" Nov 1 00:09:32.730972 kubelet[1971]: I1101 00:09:32.730944 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:09:32.731406 env[1216]: time="2025-11-01T00:09:32.731356565Z" level=info msg="StopPodSandbox for \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\"" Nov 1 00:09:32.734246 kubelet[1971]: I1101 00:09:32.734217 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:09:32.735041 env[1216]: time="2025-11-01T00:09:32.734997652Z" level=info msg="StopPodSandbox for \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\"" Nov 1 00:09:32.736516 kubelet[1971]: I1101 00:09:32.736488 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:09:32.737007 env[1216]: time="2025-11-01T00:09:32.736970247Z" level=info msg="StopPodSandbox for \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\"" Nov 1 00:09:32.739390 kubelet[1971]: I1101 00:09:32.738683 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:09:32.739978 env[1216]: time="2025-11-01T00:09:32.739944721Z" level=info msg="StopPodSandbox for \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\"" Nov 1 00:09:32.742265 kubelet[1971]: I1101 00:09:32.742244 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:09:32.742680 env[1216]: time="2025-11-01T00:09:32.742649974Z" level=info msg="StopPodSandbox for \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\"" Nov 1 00:09:32.744045 kubelet[1971]: I1101 00:09:32.744024 1971 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:09:32.744837 env[1216]: time="2025-11-01T00:09:32.744453196Z" level=info msg="StopPodSandbox for \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\"" Nov 1 00:09:32.769424 env[1216]: time="2025-11-01T00:09:32.769307112Z" level=error msg="StopPodSandbox for \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\" failed" error="failed to destroy network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:32.770013 kubelet[1971]: E1101 00:09:32.769964 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:09:32.770496 kubelet[1971]: E1101 00:09:32.770027 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e"} Nov 1 00:09:32.770496 kubelet[1971]: E1101 00:09:32.770079 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:09:32.770496 kubelet[1971]: E1101 00:09:32.770105 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7" Nov 1 00:09:32.778644 env[1216]: time="2025-11-01T00:09:32.778583963Z" level=error msg="StopPodSandbox for \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\" failed" error="failed to destroy network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:32.778862 kubelet[1971]: E1101 00:09:32.778822 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:09:32.778927 kubelet[1971]: E1101 00:09:32.778870 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf"} Nov 1 00:09:32.778927 kubelet[1971]: E1101 00:09:32.778912 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f76eed17-611d-4863-927b-c02c54186a3e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:09:32.779016 kubelet[1971]: E1101 00:09:32.778936 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f76eed17-611d-4863-927b-c02c54186a3e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" podUID="f76eed17-611d-4863-927b-c02c54186a3e" Nov 1 00:09:32.783226 env[1216]: time="2025-11-01T00:09:32.783150922Z" level=error msg="StopPodSandbox for \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\" failed" error="failed to destroy network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:32.783438 kubelet[1971]: E1101 00:09:32.783346 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:09:32.783438 kubelet[1971]: E1101 00:09:32.783385 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b"} Nov 1 00:09:32.783438 kubelet[1971]: E1101 00:09:32.783413 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b3ea4af2-3f43-4e61-9bdd-5f447d355048\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:09:32.783563 kubelet[1971]: E1101 00:09:32.783436 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b3ea4af2-3f43-4e61-9bdd-5f447d355048\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-2w9cl" podUID="b3ea4af2-3f43-4e61-9bdd-5f447d355048" Nov 1 00:09:32.807364 env[1216]: time="2025-11-01T00:09:32.807287302Z" level=error msg="StopPodSandbox for \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\" failed" error="failed to destroy network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:32.807615 kubelet[1971]: E1101 00:09:32.807548 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:09:32.807615 kubelet[1971]: E1101 00:09:32.807594 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55"} Nov 1 00:09:32.808058 kubelet[1971]: E1101 00:09:32.807629 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9d3532b8-6e07-462d-911f-721c28e34778\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:09:32.808058 kubelet[1971]: E1101 00:09:32.807652 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9d3532b8-6e07-462d-911f-721c28e34778\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:09:32.819028 env[1216]: time="2025-11-01T00:09:32.818874734Z" level=error msg="StopPodSandbox for \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\" failed" error="failed to destroy network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:32.819332 kubelet[1971]: E1101 00:09:32.819104 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:09:32.819332 kubelet[1971]: E1101 00:09:32.819152 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7"} Nov 1 00:09:32.819332 kubelet[1971]: E1101 00:09:32.819183 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"85742704-5ab5-4b30-87fe-a0db1b4cb53b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:09:32.819332 kubelet[1971]: E1101 00:09:32.819209 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"85742704-5ab5-4b30-87fe-a0db1b4cb53b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-67g77" podUID="85742704-5ab5-4b30-87fe-a0db1b4cb53b" Nov 1 00:09:32.825889 env[1216]: time="2025-11-01T00:09:32.825837322Z" level=error msg="StopPodSandbox for \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\" failed" error="failed to destroy network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:32.826273 kubelet[1971]: E1101 00:09:32.826031 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:09:32.826273 kubelet[1971]: E1101 00:09:32.826070 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5"} Nov 1 00:09:32.826273 kubelet[1971]: E1101 00:09:32.826098 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ee73499a-4c7c-4cc1-87d2-26b81ea29f19\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:09:32.826273 kubelet[1971]: E1101 00:09:32.826120 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ee73499a-4c7c-4cc1-87d2-26b81ea29f19\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:32.834615 env[1216]: time="2025-11-01T00:09:32.834550968Z" level=error msg="StopPodSandbox for \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\" failed" error="failed to destroy network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:32.834789 kubelet[1971]: E1101 00:09:32.834741 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:09:32.834840 kubelet[1971]: E1101 00:09:32.834801 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf"} Nov 1 00:09:32.834840 kubelet[1971]: E1101 00:09:32.834835 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"732d3bd5-025e-4ee3-9cd6-d34425f82a66\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:09:32.834929 kubelet[1971]: E1101 00:09:32.834854 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"732d3bd5-025e-4ee3-9cd6-d34425f82a66\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-j5k5b" podUID="732d3bd5-025e-4ee3-9cd6-d34425f82a66" Nov 1 00:09:32.844466 env[1216]: time="2025-11-01T00:09:32.844409544Z" level=error msg="StopPodSandbox for \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\" failed" error="failed to destroy network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:09:32.844808 kubelet[1971]: E1101 00:09:32.844604 1971 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:09:32.844808 kubelet[1971]: E1101 00:09:32.844640 1971 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c"} Nov 1 00:09:32.844808 kubelet[1971]: E1101 00:09:32.844667 1971 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e7cc9e5c-4723-415a-adea-ade9b652a860\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:09:32.844808 kubelet[1971]: E1101 00:09:32.844685 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e7cc9e5c-4723-415a-adea-ade9b652a860\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7669fdc8cc-qz9w6" podUID="e7cc9e5c-4723-415a-adea-ade9b652a860" Nov 1 00:09:36.874415 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1903018325.mount: Deactivated successfully. Nov 1 00:09:37.130566 env[1216]: time="2025-11-01T00:09:37.130362387Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:37.132016 env[1216]: time="2025-11-01T00:09:37.131975295Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:37.133847 env[1216]: time="2025-11-01T00:09:37.133800337Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:37.135090 env[1216]: time="2025-11-01T00:09:37.135045541Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:09:37.135612 env[1216]: time="2025-11-01T00:09:37.135571176Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Nov 1 00:09:37.153948 env[1216]: time="2025-11-01T00:09:37.153910886Z" level=info msg="CreateContainer within sandbox \"e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:09:37.169858 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4213700782.mount: Deactivated successfully. Nov 1 00:09:37.175659 env[1216]: time="2025-11-01T00:09:37.175607462Z" level=info msg="CreateContainer within sandbox \"e2ce0f2db97ba67a78afa4168beb92411f864adde28a4ff3bb1bd26fd9426594\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"d368219844e6cc5b82c72d68108ebedb6df99497fcfca8ff439f13322e94493c\"" Nov 1 00:09:37.176359 env[1216]: time="2025-11-01T00:09:37.176319989Z" level=info msg="StartContainer for \"d368219844e6cc5b82c72d68108ebedb6df99497fcfca8ff439f13322e94493c\"" Nov 1 00:09:37.195449 systemd[1]: Started cri-containerd-d368219844e6cc5b82c72d68108ebedb6df99497fcfca8ff439f13322e94493c.scope. Nov 1 00:09:37.219000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.221378 kernel: kauditd_printk_skb: 34 callbacks suppressed Nov 1 00:09:37.221445 kernel: audit: type=1400 audit(1761955777.219:1025): avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.219000 audit[3206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2488 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:37.231997 kernel: audit: type=1300 audit(1761955777.219:1025): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2488 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:37.232081 kernel: audit: type=1327 audit(1761955777.219:1025): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433363832313938343465366363356238326337326436383130386562 Nov 1 00:09:37.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433363832313938343465366363356238326337326436383130386562 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.239749 kernel: audit: type=1400 audit(1761955777.220:1026): avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.239841 kernel: audit: type=1400 audit(1761955777.220:1026): avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.245324 kernel: audit: type=1400 audit(1761955777.220:1026): avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.247983 kernel: audit: type=1400 audit(1761955777.220:1026): avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.250729 kernel: audit: type=1400 audit(1761955777.220:1026): avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.253395 kernel: audit: type=1400 audit(1761955777.220:1026): avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.258755 kernel: audit: type=1400 audit(1761955777.220:1026): avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.220000 audit: BPF prog-id=139 op=LOAD Nov 1 00:09:37.220000 audit[3206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2488 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:37.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433363832313938343465366363356238326337326436383130386562 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.224000 audit: BPF prog-id=140 op=LOAD Nov 1 00:09:37.224000 audit[3206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2488 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:37.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433363832313938343465366363356238326337326436383130386562 Nov 1 00:09:37.231000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:09:37.231000 audit: BPF prog-id=139 op=UNLOAD Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { perfmon } for pid=3206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit[3206]: AVC avc: denied { bpf } for pid=3206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:37.231000 audit: BPF prog-id=141 op=LOAD Nov 1 00:09:37.231000 audit[3206]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2488 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:37.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433363832313938343465366363356238326337326436383130386562 Nov 1 00:09:37.269313 env[1216]: time="2025-11-01T00:09:37.267210486Z" level=info msg="StartContainer for \"d368219844e6cc5b82c72d68108ebedb6df99497fcfca8ff439f13322e94493c\" returns successfully" Nov 1 00:09:37.393250 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:09:37.393367 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:09:37.496618 env[1216]: time="2025-11-01T00:09:37.496573152Z" level=info msg="StopPodSandbox for \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\"" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.586 [INFO][3263] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.586 [INFO][3263] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" iface="eth0" netns="/var/run/netns/cni-337ef9d4-af34-2409-bb02-946d2f535a69" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.587 [INFO][3263] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" iface="eth0" netns="/var/run/netns/cni-337ef9d4-af34-2409-bb02-946d2f535a69" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.587 [INFO][3263] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" iface="eth0" netns="/var/run/netns/cni-337ef9d4-af34-2409-bb02-946d2f535a69" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.588 [INFO][3263] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.588 [INFO][3263] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.668 [INFO][3271] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.668 [INFO][3271] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.668 [INFO][3271] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.679 [WARNING][3271] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.679 [INFO][3271] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.681 [INFO][3271] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:37.684309 env[1216]: 2025-11-01 00:09:37.682 [INFO][3263] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:09:37.684898 env[1216]: time="2025-11-01T00:09:37.684462716Z" level=info msg="TearDown network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\" successfully" Nov 1 00:09:37.684898 env[1216]: time="2025-11-01T00:09:37.684507719Z" level=info msg="StopPodSandbox for \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\" returns successfully" Nov 1 00:09:37.721401 kubelet[1971]: I1101 00:09:37.721356 1971 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e7cc9e5c-4723-415a-adea-ade9b652a860-whisker-backend-key-pair\") pod \"e7cc9e5c-4723-415a-adea-ade9b652a860\" (UID: \"e7cc9e5c-4723-415a-adea-ade9b652a860\") " Nov 1 00:09:37.721401 kubelet[1971]: I1101 00:09:37.721404 1971 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e7cc9e5c-4723-415a-adea-ade9b652a860-whisker-ca-bundle\") pod \"e7cc9e5c-4723-415a-adea-ade9b652a860\" (UID: \"e7cc9e5c-4723-415a-adea-ade9b652a860\") " Nov 1 00:09:37.721752 kubelet[1971]: I1101 00:09:37.721434 1971 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vh79r\" (UniqueName: \"kubernetes.io/projected/e7cc9e5c-4723-415a-adea-ade9b652a860-kube-api-access-vh79r\") pod \"e7cc9e5c-4723-415a-adea-ade9b652a860\" (UID: \"e7cc9e5c-4723-415a-adea-ade9b652a860\") " Nov 1 00:09:37.724172 kubelet[1971]: I1101 00:09:37.723064 1971 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e7cc9e5c-4723-415a-adea-ade9b652a860-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "e7cc9e5c-4723-415a-adea-ade9b652a860" (UID: "e7cc9e5c-4723-415a-adea-ade9b652a860"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:09:37.724575 kubelet[1971]: I1101 00:09:37.724544 1971 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e7cc9e5c-4723-415a-adea-ade9b652a860-kube-api-access-vh79r" (OuterVolumeSpecName: "kube-api-access-vh79r") pod "e7cc9e5c-4723-415a-adea-ade9b652a860" (UID: "e7cc9e5c-4723-415a-adea-ade9b652a860"). InnerVolumeSpecName "kube-api-access-vh79r". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:09:37.724841 kubelet[1971]: I1101 00:09:37.724801 1971 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e7cc9e5c-4723-415a-adea-ade9b652a860-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "e7cc9e5c-4723-415a-adea-ade9b652a860" (UID: "e7cc9e5c-4723-415a-adea-ade9b652a860"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:09:37.758382 kubelet[1971]: E1101 00:09:37.758299 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:37.758463 systemd[1]: Removed slice kubepods-besteffort-pode7cc9e5c_4723_415a_adea_ade9b652a860.slice. Nov 1 00:09:37.774985 kubelet[1971]: I1101 00:09:37.774905 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-g5d4j" podStartSLOduration=1.959423653 podStartE2EDuration="14.774892342s" podCreationTimestamp="2025-11-01 00:09:23 +0000 UTC" firstStartedPulling="2025-11-01 00:09:24.321178199 +0000 UTC m=+22.793587653" lastFinishedPulling="2025-11-01 00:09:37.136646888 +0000 UTC m=+35.609056342" observedRunningTime="2025-11-01 00:09:37.774072927 +0000 UTC m=+36.246482341" watchObservedRunningTime="2025-11-01 00:09:37.774892342 +0000 UTC m=+36.247301796" Nov 1 00:09:37.815947 systemd[1]: Created slice kubepods-besteffort-podbb64bdde_d3c3_4ffd_b3d1_67c1be3ba74f.slice. Nov 1 00:09:37.821821 kubelet[1971]: I1101 00:09:37.821786 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f-whisker-ca-bundle\") pod \"whisker-7fd9f657f7-z4zxl\" (UID: \"bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f\") " pod="calico-system/whisker-7fd9f657f7-z4zxl" Nov 1 00:09:37.821821 kubelet[1971]: I1101 00:09:37.821827 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ffkml\" (UniqueName: \"kubernetes.io/projected/bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f-kube-api-access-ffkml\") pod \"whisker-7fd9f657f7-z4zxl\" (UID: \"bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f\") " pod="calico-system/whisker-7fd9f657f7-z4zxl" Nov 1 00:09:37.821975 kubelet[1971]: I1101 00:09:37.821888 1971 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f-whisker-backend-key-pair\") pod \"whisker-7fd9f657f7-z4zxl\" (UID: \"bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f\") " pod="calico-system/whisker-7fd9f657f7-z4zxl" Nov 1 00:09:37.821975 kubelet[1971]: I1101 00:09:37.821911 1971 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-vh79r\" (UniqueName: \"kubernetes.io/projected/e7cc9e5c-4723-415a-adea-ade9b652a860-kube-api-access-vh79r\") on node \"localhost\" DevicePath \"\"" Nov 1 00:09:37.821975 kubelet[1971]: I1101 00:09:37.821921 1971 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e7cc9e5c-4723-415a-adea-ade9b652a860-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Nov 1 00:09:37.821975 kubelet[1971]: I1101 00:09:37.821929 1971 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e7cc9e5c-4723-415a-adea-ade9b652a860-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Nov 1 00:09:37.875283 systemd[1]: run-netns-cni\x2d337ef9d4\x2daf34\x2d2409\x2dbb02\x2d946d2f535a69.mount: Deactivated successfully. Nov 1 00:09:37.875372 systemd[1]: var-lib-kubelet-pods-e7cc9e5c\x2d4723\x2d415a\x2dadea\x2dade9b652a860-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:09:37.875434 systemd[1]: var-lib-kubelet-pods-e7cc9e5c\x2d4723\x2d415a\x2dadea\x2dade9b652a860-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvh79r.mount: Deactivated successfully. Nov 1 00:09:38.118816 env[1216]: time="2025-11-01T00:09:38.118760464Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7fd9f657f7-z4zxl,Uid:bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f,Namespace:calico-system,Attempt:0,}" Nov 1 00:09:38.223843 systemd-networkd[1051]: calib0915489179: Link UP Nov 1 00:09:38.225799 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:09:38.225858 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib0915489179: link becomes ready Nov 1 00:09:38.226462 systemd-networkd[1051]: calib0915489179: Gained carrier Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.147 [INFO][3294] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.161 [INFO][3294] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0 whisker-7fd9f657f7- calico-system bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f 918 0 2025-11-01 00:09:37 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7fd9f657f7 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-7fd9f657f7-z4zxl eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calib0915489179 [] [] }} ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Namespace="calico-system" Pod="whisker-7fd9f657f7-z4zxl" WorkloadEndpoint="localhost-k8s-whisker--7fd9f657f7--z4zxl-" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.161 [INFO][3294] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Namespace="calico-system" Pod="whisker-7fd9f657f7-z4zxl" WorkloadEndpoint="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.182 [INFO][3309] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" HandleID="k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Workload="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.182 [INFO][3309] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" HandleID="k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Workload="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003b04a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-7fd9f657f7-z4zxl", "timestamp":"2025-11-01 00:09:38.182444534 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.182 [INFO][3309] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.182 [INFO][3309] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.182 [INFO][3309] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.192 [INFO][3309] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.197 [INFO][3309] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.201 [INFO][3309] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.203 [INFO][3309] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.205 [INFO][3309] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.205 [INFO][3309] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.206 [INFO][3309] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0 Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.209 [INFO][3309] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.214 [INFO][3309] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.214 [INFO][3309] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" host="localhost" Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.215 [INFO][3309] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:38.242165 env[1216]: 2025-11-01 00:09:38.215 [INFO][3309] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" HandleID="k8s-pod-network.8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Workload="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" Nov 1 00:09:38.243044 env[1216]: 2025-11-01 00:09:38.216 [INFO][3294] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Namespace="calico-system" Pod="whisker-7fd9f657f7-z4zxl" WorkloadEndpoint="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0", GenerateName:"whisker-7fd9f657f7-", Namespace:"calico-system", SelfLink:"", UID:"bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7fd9f657f7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-7fd9f657f7-z4zxl", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calib0915489179", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:38.243044 env[1216]: 2025-11-01 00:09:38.217 [INFO][3294] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Namespace="calico-system" Pod="whisker-7fd9f657f7-z4zxl" WorkloadEndpoint="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" Nov 1 00:09:38.243044 env[1216]: 2025-11-01 00:09:38.217 [INFO][3294] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib0915489179 ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Namespace="calico-system" Pod="whisker-7fd9f657f7-z4zxl" WorkloadEndpoint="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" Nov 1 00:09:38.243044 env[1216]: 2025-11-01 00:09:38.226 [INFO][3294] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Namespace="calico-system" Pod="whisker-7fd9f657f7-z4zxl" WorkloadEndpoint="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" Nov 1 00:09:38.243044 env[1216]: 2025-11-01 00:09:38.227 [INFO][3294] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Namespace="calico-system" Pod="whisker-7fd9f657f7-z4zxl" WorkloadEndpoint="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0", GenerateName:"whisker-7fd9f657f7-", Namespace:"calico-system", SelfLink:"", UID:"bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7fd9f657f7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0", Pod:"whisker-7fd9f657f7-z4zxl", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calib0915489179", MAC:"a6:42:e5:6b:3c:84", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:38.243044 env[1216]: 2025-11-01 00:09:38.240 [INFO][3294] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0" Namespace="calico-system" Pod="whisker-7fd9f657f7-z4zxl" WorkloadEndpoint="localhost-k8s-whisker--7fd9f657f7--z4zxl-eth0" Nov 1 00:09:38.251365 env[1216]: time="2025-11-01T00:09:38.251305582Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:38.251508 env[1216]: time="2025-11-01T00:09:38.251345024Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:38.251508 env[1216]: time="2025-11-01T00:09:38.251354985Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:38.251508 env[1216]: time="2025-11-01T00:09:38.251468912Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0 pid=3332 runtime=io.containerd.runc.v2 Nov 1 00:09:38.261441 systemd[1]: Started cri-containerd-8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0.scope. Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.276000 audit: BPF prog-id=142 op=LOAD Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3332 pid=3341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866336535323565653233376337343562303065653665613131323036 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3332 pid=3341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866336535323565653233376337343562303065653665613131323036 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit: BPF prog-id=143 op=LOAD Nov 1 00:09:38.277000 audit[3341]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3332 pid=3341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866336535323565653233376337343562303065653665613131323036 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit: BPF prog-id=144 op=LOAD Nov 1 00:09:38.277000 audit[3341]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3332 pid=3341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866336535323565653233376337343562303065653665613131323036 Nov 1 00:09:38.277000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:09:38.277000 audit: BPF prog-id=143 op=UNLOAD Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { perfmon } for pid=3341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit[3341]: AVC avc: denied { bpf } for pid=3341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.277000 audit: BPF prog-id=145 op=LOAD Nov 1 00:09:38.277000 audit[3341]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3332 pid=3341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866336535323565653233376337343562303065653665613131323036 Nov 1 00:09:38.278807 systemd-resolved[1167]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:09:38.294155 env[1216]: time="2025-11-01T00:09:38.294093970Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7fd9f657f7-z4zxl,Uid:bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f,Namespace:calico-system,Attempt:0,} returns sandbox id \"8f3e525ee237c745b00ee6ea11206a5f77939e9b7ad1242c80feb0a110cbfdf0\"" Nov 1 00:09:38.297220 env[1216]: time="2025-11-01T00:09:38.297189892Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:09:38.496051 env[1216]: time="2025-11-01T00:09:38.495888682Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:38.497054 env[1216]: time="2025-11-01T00:09:38.496974272Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:09:38.498153 kubelet[1971]: E1101 00:09:38.498090 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:09:38.498242 kubelet[1971]: E1101 00:09:38.498165 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:09:38.502861 kubelet[1971]: E1101 00:09:38.502814 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6e1600b6928a47bb8896eff55c1c6244,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-ffkml,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fd9f657f7-z4zxl_calico-system(bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:38.505758 env[1216]: time="2025-11-01T00:09:38.505726403Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:09:38.717371 env[1216]: time="2025-11-01T00:09:38.717309632Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:38.718842 env[1216]: time="2025-11-01T00:09:38.718765407Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:09:38.719138 kubelet[1971]: E1101 00:09:38.719095 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:09:38.719284 kubelet[1971]: E1101 00:09:38.719265 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:09:38.719779 kubelet[1971]: E1101 00:09:38.719721 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ffkml,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fd9f657f7-z4zxl_calico-system(bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:38.721108 kubelet[1971]: E1101 00:09:38.721058 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fd9f657f7-z4zxl" podUID="bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f" Nov 1 00:09:38.723000 audit[3414]: AVC avc: denied { write } for pid=3414 comm="tee" name="fd" dev="proc" ino=19071 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:09:38.723000 audit[3414]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffef1c7f1 a2=241 a3=1b6 items=1 ppid=3376 pid=3414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.723000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:09:38.723000 audit: PATH item=0 name="/dev/fd/63" inode=19059 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:09:38.723000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:09:38.735000 audit[3420]: AVC avc: denied { write } for pid=3420 comm="tee" name="fd" dev="proc" ino=20510 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:09:38.735000 audit[3420]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffded5b7e1 a2=241 a3=1b6 items=1 ppid=3375 pid=3420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.735000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:09:38.735000 audit: PATH item=0 name="/dev/fd/63" inode=20124 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:09:38.735000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:09:38.737000 audit[3441]: AVC avc: denied { write } for pid=3441 comm="tee" name="fd" dev="proc" ino=18290 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:09:38.737000 audit[3441]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff5a957f2 a2=241 a3=1b6 items=1 ppid=3388 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.737000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:09:38.737000 audit: PATH item=0 name="/dev/fd/63" inode=20507 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:09:38.737000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:09:38.748000 audit[3432]: AVC avc: denied { write } for pid=3432 comm="tee" name="fd" dev="proc" ino=20518 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:09:38.748000 audit[3432]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffe8467f1 a2=241 a3=1b6 items=1 ppid=3381 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.748000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:09:38.748000 audit: PATH item=0 name="/dev/fd/63" inode=19070 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:09:38.748000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:09:38.762985 kubelet[1971]: I1101 00:09:38.762959 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:09:38.763968 kubelet[1971]: E1101 00:09:38.763939 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:38.764336 kubelet[1971]: E1101 00:09:38.764280 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fd9f657f7-z4zxl" podUID="bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f" Nov 1 00:09:38.776000 audit[3449]: AVC avc: denied { write } for pid=3449 comm="tee" name="fd" dev="proc" ino=20522 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:09:38.776000 audit[3449]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd82317e2 a2=241 a3=1b6 items=1 ppid=3377 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.776000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:09:38.776000 audit: PATH item=0 name="/dev/fd/63" inode=19073 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:09:38.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:09:38.785000 audit[3453]: AVC avc: denied { write } for pid=3453 comm="tee" name="fd" dev="proc" ino=19080 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:09:38.785000 audit[3453]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff8bee7f1 a2=241 a3=1b6 items=1 ppid=3384 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.785000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:09:38.785000 audit: PATH item=0 name="/dev/fd/63" inode=20137 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:09:38.785000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:09:38.793000 audit[3455]: AVC avc: denied { write } for pid=3455 comm="tee" name="fd" dev="proc" ino=20526 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:09:38.793000 audit[3455]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc20897f3 a2=241 a3=1b6 items=1 ppid=3387 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.793000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:09:38.793000 audit: PATH item=0 name="/dev/fd/63" inode=20138 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:09:38.793000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:09:38.813000 audit[3460]: NETFILTER_CFG table=filter:105 family=2 entries=20 op=nft_register_rule pid=3460 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:38.813000 audit[3460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffffabca630 a2=0 a3=1 items=0 ppid=2087 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.813000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:38.819000 audit[3460]: NETFILTER_CFG table=nat:106 family=2 entries=14 op=nft_register_rule pid=3460 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:38.819000 audit[3460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffffabca630 a2=0 a3=1 items=0 ppid=2087 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.819000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit: BPF prog-id=146 op=LOAD Nov 1 00:09:38.927000 audit[3491]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe2e34538 a2=98 a3=ffffe2e34528 items=0 ppid=3379 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.927000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:09:38.927000 audit: BPF prog-id=146 op=UNLOAD Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit: BPF prog-id=147 op=LOAD Nov 1 00:09:38.927000 audit[3491]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe2e343e8 a2=74 a3=95 items=0 ppid=3379 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.927000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:09:38.927000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit: BPF prog-id=148 op=LOAD Nov 1 00:09:38.927000 audit[3491]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe2e34418 a2=40 a3=ffffe2e34448 items=0 ppid=3379 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.927000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:09:38.927000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:09:38.927000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.927000 audit[3491]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe2e34530 a2=50 a3=0 items=0 ppid=3379 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.927000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit: BPF prog-id=149 op=LOAD Nov 1 00:09:38.930000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7fb4d78 a2=98 a3=fffff7fb4d68 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.930000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:38.930000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit: BPF prog-id=150 op=LOAD Nov 1 00:09:38.930000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff7fb4a08 a2=74 a3=95 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.930000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:38.930000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:38.930000 audit: BPF prog-id=151 op=LOAD Nov 1 00:09:38.930000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff7fb4a68 a2=94 a3=2 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:38.930000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:38.930000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit: BPF prog-id=152 op=LOAD Nov 1 00:09:39.025000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff7fb4a28 a2=40 a3=fffff7fb4a58 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.025000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.025000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:09:39.025000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.025000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff7fb4b40 a2=50 a3=0 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.025000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.035000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.035000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff7fb4a98 a2=28 a3=fffff7fb4bc8 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.035000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.035000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.035000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff7fb4ac8 a2=28 a3=fffff7fb4bf8 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.035000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff7fb4978 a2=28 a3=fffff7fb4aa8 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff7fb4ae8 a2=28 a3=fffff7fb4c18 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff7fb4ac8 a2=28 a3=fffff7fb4bf8 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff7fb4ab8 a2=28 a3=fffff7fb4be8 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff7fb4ae8 a2=28 a3=fffff7fb4c18 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff7fb4ac8 a2=28 a3=fffff7fb4bf8 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff7fb4ae8 a2=28 a3=fffff7fb4c18 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff7fb4ab8 a2=28 a3=fffff7fb4be8 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff7fb4b38 a2=28 a3=fffff7fb4c78 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff7fb4870 a2=50 a3=0 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit: BPF prog-id=153 op=LOAD Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff7fb4878 a2=94 a3=5 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff7fb4980 a2=50 a3=0 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff7fb4ac8 a2=4 a3=3 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { confidentiality } for pid=3492 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff7fb4aa8 a2=94 a3=6 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { confidentiality } for pid=3492 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff7fb4278 a2=94 a3=83 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { perfmon } for pid=3492 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { bpf } for pid=3492 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.036000 audit[3492]: AVC avc: denied { confidentiality } for pid=3492 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:09:39.036000 audit[3492]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff7fb4278 a2=94 a3=83 items=0 ppid=3379 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.036000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit: BPF prog-id=154 op=LOAD Nov 1 00:09:39.046000 audit[3495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd69c1108 a2=98 a3=ffffd69c10f8 items=0 ppid=3379 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.046000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:09:39.046000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit: BPF prog-id=155 op=LOAD Nov 1 00:09:39.046000 audit[3495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd69c0fb8 a2=74 a3=95 items=0 ppid=3379 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.046000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:09:39.046000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { perfmon } for pid=3495 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit[3495]: AVC avc: denied { bpf } for pid=3495 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.046000 audit: BPF prog-id=156 op=LOAD Nov 1 00:09:39.046000 audit[3495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd69c0fe8 a2=40 a3=ffffd69c1018 items=0 ppid=3379 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.046000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:09:39.046000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:09:39.108179 systemd-networkd[1051]: vxlan.calico: Link UP Nov 1 00:09:39.108186 systemd-networkd[1051]: vxlan.calico: Gained carrier Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.120000 audit: BPF prog-id=157 op=LOAD Nov 1 00:09:39.120000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcaa38828 a2=98 a3=ffffcaa38818 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.120000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.122000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.122000 audit: BPF prog-id=158 op=LOAD Nov 1 00:09:39.122000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcaa38508 a2=74 a3=95 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.122000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.123000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.123000 audit: BPF prog-id=159 op=LOAD Nov 1 00:09:39.123000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcaa38568 a2=94 a3=2 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.123000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.124000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:09:39.124000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.124000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcaa38598 a2=28 a3=ffffcaa386c8 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.124000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.124000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.124000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcaa385c8 a2=28 a3=ffffcaa386f8 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.124000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.124000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.124000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcaa38478 a2=28 a3=ffffcaa385a8 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.124000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.124000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.124000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcaa385e8 a2=28 a3=ffffcaa38718 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.124000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.124000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.124000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcaa385c8 a2=28 a3=ffffcaa386f8 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.124000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.124000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.124000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcaa385b8 a2=28 a3=ffffcaa386e8 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.124000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcaa385e8 a2=28 a3=ffffcaa38718 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.125000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcaa385c8 a2=28 a3=ffffcaa386f8 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.125000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcaa385e8 a2=28 a3=ffffcaa38718 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.125000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcaa385b8 a2=28 a3=ffffcaa386e8 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.125000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcaa38638 a2=28 a3=ffffcaa38778 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.125000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.125000 audit: BPF prog-id=160 op=LOAD Nov 1 00:09:39.125000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcaa38458 a2=40 a3=ffffcaa38488 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.125000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.126000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffcaa38480 a2=50 a3=0 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.127000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffcaa38480 a2=50 a3=0 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.127000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.127000 audit: BPF prog-id=161 op=LOAD Nov 1 00:09:39.127000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcaa37be8 a2=94 a3=2 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.127000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.130000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { perfmon } for pid=3520 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit[3520]: AVC avc: denied { bpf } for pid=3520 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.130000 audit: BPF prog-id=162 op=LOAD Nov 1 00:09:39.130000 audit[3520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcaa37d78 a2=94 a3=30 items=0 ppid=3379 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.130000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit: BPF prog-id=163 op=LOAD Nov 1 00:09:39.134000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdec474d8 a2=98 a3=ffffdec474c8 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.134000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.134000 audit: BPF prog-id=163 op=UNLOAD Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit: BPF prog-id=164 op=LOAD Nov 1 00:09:39.134000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdec47168 a2=74 a3=95 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.134000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.134000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.134000 audit: BPF prog-id=165 op=LOAD Nov 1 00:09:39.134000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdec471c8 a2=94 a3=2 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.134000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.134000 audit: BPF prog-id=165 op=UNLOAD Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit: BPF prog-id=166 op=LOAD Nov 1 00:09:39.219000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdec47188 a2=40 a3=ffffdec471b8 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.219000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.219000 audit: BPF prog-id=166 op=UNLOAD Nov 1 00:09:39.219000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.219000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffdec472a0 a2=50 a3=0 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.219000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdec471f8 a2=28 a3=ffffdec47328 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec47228 a2=28 a3=ffffdec47358 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec470d8 a2=28 a3=ffffdec47208 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdec47248 a2=28 a3=ffffdec47378 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdec47228 a2=28 a3=ffffdec47358 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdec47218 a2=28 a3=ffffdec47348 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdec47248 a2=28 a3=ffffdec47378 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec47228 a2=28 a3=ffffdec47358 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec47248 a2=28 a3=ffffdec47378 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec47218 a2=28 a3=ffffdec47348 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdec47298 a2=28 a3=ffffdec473d8 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdec46fd0 a2=50 a3=0 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit: BPF prog-id=167 op=LOAD Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdec46fd8 a2=94 a3=5 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit: BPF prog-id=167 op=UNLOAD Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdec470e0 a2=50 a3=0 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffdec47228 a2=4 a3=3 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.228000 audit[3531]: AVC avc: denied { confidentiality } for pid=3531 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:09:39.228000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdec47208 a2=94 a3=6 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.228000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { confidentiality } for pid=3531 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:09:39.229000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdec469d8 a2=94 a3=83 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.229000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { confidentiality } for pid=3531 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:09:39.229000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdec469d8 a2=94 a3=83 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.229000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdec48418 a2=10 a3=ffffdec48508 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.229000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdec482d8 a2=10 a3=ffffdec483c8 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.229000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdec48248 a2=10 a3=ffffdec483c8 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.229000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.229000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:39.229000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdec48248 a2=10 a3=ffffdec483c8 items=0 ppid=3379 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.229000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:09:39.245000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:09:39.286000 audit[3555]: NETFILTER_CFG table=mangle:107 family=2 entries=16 op=nft_register_chain pid=3555 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:39.286000 audit[3555]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffcbfd2ab0 a2=0 a3=ffff84b85fa8 items=0 ppid=3379 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.286000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:39.290000 audit[3554]: NETFILTER_CFG table=nat:108 family=2 entries=15 op=nft_register_chain pid=3554 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:39.290000 audit[3554]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffcb914020 a2=0 a3=ffff9acacfa8 items=0 ppid=3379 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.290000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:39.296000 audit[3553]: NETFILTER_CFG table=raw:109 family=2 entries=21 op=nft_register_chain pid=3553 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:39.296000 audit[3553]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffed1d9490 a2=0 a3=ffffb8c01fa8 items=0 ppid=3379 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.296000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:39.301000 audit[3558]: NETFILTER_CFG table=filter:110 family=2 entries=94 op=nft_register_chain pid=3558 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:39.301000 audit[3558]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffdcd370d0 a2=0 a3=ffff9d161fa8 items=0 ppid=3379 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:39.301000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:39.565021 systemd-networkd[1051]: calib0915489179: Gained IPv6LL Nov 1 00:09:39.621222 kubelet[1971]: I1101 00:09:39.621044 1971 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="e7cc9e5c-4723-415a-adea-ade9b652a860" path="/var/lib/kubelet/pods/e7cc9e5c-4723-415a-adea-ade9b652a860/volumes" Nov 1 00:09:39.763489 kubelet[1971]: E1101 00:09:39.763441 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fd9f657f7-z4zxl" podUID="bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f" Nov 1 00:09:40.332952 systemd-networkd[1051]: vxlan.calico: Gained IPv6LL Nov 1 00:09:43.620288 env[1216]: time="2025-11-01T00:09:43.620243150Z" level=info msg="StopPodSandbox for \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\"" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.686 [INFO][3581] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.686 [INFO][3581] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" iface="eth0" netns="/var/run/netns/cni-3db2f12d-92d3-9de5-efe3-627428bf3a9b" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.686 [INFO][3581] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" iface="eth0" netns="/var/run/netns/cni-3db2f12d-92d3-9de5-efe3-627428bf3a9b" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.686 [INFO][3581] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" iface="eth0" netns="/var/run/netns/cni-3db2f12d-92d3-9de5-efe3-627428bf3a9b" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.686 [INFO][3581] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.686 [INFO][3581] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.709 [INFO][3589] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.709 [INFO][3589] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.709 [INFO][3589] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.723 [WARNING][3589] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.723 [INFO][3589] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.725 [INFO][3589] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:43.729652 env[1216]: 2025-11-01 00:09:43.727 [INFO][3581] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:09:43.731990 env[1216]: time="2025-11-01T00:09:43.731544205Z" level=info msg="TearDown network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\" successfully" Nov 1 00:09:43.731990 env[1216]: time="2025-11-01T00:09:43.731577727Z" level=info msg="StopPodSandbox for \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\" returns successfully" Nov 1 00:09:43.731776 systemd[1]: run-netns-cni\x2d3db2f12d\x2d92d3\x2d9de5\x2defe3\x2d627428bf3a9b.mount: Deactivated successfully. Nov 1 00:09:43.734650 env[1216]: time="2025-11-01T00:09:43.734507534Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6495f5c798-dgqbz,Uid:9d3532b8-6e07-462d-911f-721c28e34778,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:09:43.870721 systemd-networkd[1051]: cali5bc6d8ed742: Link UP Nov 1 00:09:43.873254 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:09:43.873449 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5bc6d8ed742: link becomes ready Nov 1 00:09:43.873533 systemd-networkd[1051]: cali5bc6d8ed742: Gained carrier Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.812 [INFO][3605] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0 calico-apiserver-6495f5c798- calico-apiserver 9d3532b8-6e07-462d-911f-721c28e34778 964 0 2025-11-01 00:09:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6495f5c798 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6495f5c798-dgqbz eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali5bc6d8ed742 [] [] }} ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-dgqbz" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.812 [INFO][3605] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-dgqbz" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.834 [INFO][3615] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" HandleID="k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.834 [INFO][3615] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" HandleID="k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c31a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6495f5c798-dgqbz", "timestamp":"2025-11-01 00:09:43.834613588 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.834 [INFO][3615] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.834 [INFO][3615] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.834 [INFO][3615] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.844 [INFO][3615] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.848 [INFO][3615] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.851 [INFO][3615] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.853 [INFO][3615] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.855 [INFO][3615] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.855 [INFO][3615] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.856 [INFO][3615] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0 Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.860 [INFO][3615] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.866 [INFO][3615] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.866 [INFO][3615] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" host="localhost" Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.866 [INFO][3615] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:43.896807 env[1216]: 2025-11-01 00:09:43.866 [INFO][3615] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" HandleID="k8s-pod-network.87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.897390 env[1216]: 2025-11-01 00:09:43.868 [INFO][3605] cni-plugin/k8s.go 418: Populated endpoint ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-dgqbz" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0", GenerateName:"calico-apiserver-6495f5c798-", Namespace:"calico-apiserver", SelfLink:"", UID:"9d3532b8-6e07-462d-911f-721c28e34778", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6495f5c798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6495f5c798-dgqbz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5bc6d8ed742", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:43.897390 env[1216]: 2025-11-01 00:09:43.868 [INFO][3605] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-dgqbz" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.897390 env[1216]: 2025-11-01 00:09:43.868 [INFO][3605] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5bc6d8ed742 ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-dgqbz" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.897390 env[1216]: 2025-11-01 00:09:43.874 [INFO][3605] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-dgqbz" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.897390 env[1216]: 2025-11-01 00:09:43.879 [INFO][3605] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-dgqbz" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0", GenerateName:"calico-apiserver-6495f5c798-", Namespace:"calico-apiserver", SelfLink:"", UID:"9d3532b8-6e07-462d-911f-721c28e34778", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6495f5c798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0", Pod:"calico-apiserver-6495f5c798-dgqbz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5bc6d8ed742", MAC:"82:af:53:13:bf:76", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:43.897390 env[1216]: 2025-11-01 00:09:43.888 [INFO][3605] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-dgqbz" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:09:43.898000 audit[3633]: NETFILTER_CFG table=filter:111 family=2 entries=50 op=nft_register_chain pid=3633 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:43.901338 kernel: kauditd_printk_skb: 653 callbacks suppressed Nov 1 00:09:43.901408 kernel: audit: type=1325 audit(1761955783.898:1160): table=filter:111 family=2 entries=50 op=nft_register_chain pid=3633 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:43.898000 audit[3633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffeb02bd20 a2=0 a3=ffffa3f49fa8 items=0 ppid=3379 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:43.904268 env[1216]: time="2025-11-01T00:09:43.904185973Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:43.904268 env[1216]: time="2025-11-01T00:09:43.904229735Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:43.904268 env[1216]: time="2025-11-01T00:09:43.904240536Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:43.904555 env[1216]: time="2025-11-01T00:09:43.904514912Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0 pid=3642 runtime=io.containerd.runc.v2 Nov 1 00:09:43.908353 kernel: audit: type=1300 audit(1761955783.898:1160): arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffeb02bd20 a2=0 a3=ffffa3f49fa8 items=0 ppid=3379 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:43.908433 kernel: audit: type=1327 audit(1761955783.898:1160): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:43.898000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:43.925675 systemd[1]: Started cri-containerd-87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0.scope. Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.944717 kernel: audit: type=1400 audit(1761955783.937:1161): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.944811 kernel: audit: type=1400 audit(1761955783.937:1162): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.944837 kernel: audit: type=1400 audit(1761955783.937:1163): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.949940 kernel: audit: type=1400 audit(1761955783.937:1164): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950007 kernel: audit: type=1400 audit(1761955783.937:1165): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.955103 kernel: audit: type=1400 audit(1761955783.937:1166): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.955152 kernel: audit: type=1400 audit(1761955783.937:1167): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.940000 audit: BPF prog-id=168 op=LOAD Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3642 pid=3650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:43.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837633037353164623936313833346265353332333237383634663431 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3642 pid=3650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:43.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837633037353164623936313833346265353332333237383634663431 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.948000 audit: BPF prog-id=169 op=LOAD Nov 1 00:09:43.948000 audit[3650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3642 pid=3650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:43.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837633037353164623936313833346265353332333237383634663431 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.950000 audit: BPF prog-id=170 op=LOAD Nov 1 00:09:43.950000 audit[3650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3642 pid=3650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:43.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837633037353164623936313833346265353332333237383634663431 Nov 1 00:09:43.953000 audit: BPF prog-id=170 op=UNLOAD Nov 1 00:09:43.953000 audit: BPF prog-id=169 op=UNLOAD Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { perfmon } for pid=3650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit[3650]: AVC avc: denied { bpf } for pid=3650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:43.953000 audit: BPF prog-id=171 op=LOAD Nov 1 00:09:43.953000 audit[3650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3642 pid=3650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:43.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837633037353164623936313833346265353332333237383634663431 Nov 1 00:09:43.959588 systemd-resolved[1167]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:09:43.977948 env[1216]: time="2025-11-01T00:09:43.977905635Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6495f5c798-dgqbz,Uid:9d3532b8-6e07-462d-911f-721c28e34778,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0\"" Nov 1 00:09:43.979363 env[1216]: time="2025-11-01T00:09:43.979337277Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:09:44.181814 env[1216]: time="2025-11-01T00:09:44.181676154Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:44.184176 env[1216]: time="2025-11-01T00:09:44.184124451Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:09:44.184373 kubelet[1971]: E1101 00:09:44.184342 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:09:44.184655 kubelet[1971]: E1101 00:09:44.184393 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:09:44.184655 kubelet[1971]: E1101 00:09:44.184552 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2mwdn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6495f5c798-dgqbz_calico-apiserver(9d3532b8-6e07-462d-911f-721c28e34778): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:44.185956 kubelet[1971]: E1101 00:09:44.185711 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:09:44.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.24:22-10.0.0.1:46832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:44.203108 systemd[1]: Started sshd@7-10.0.0.24:22-10.0.0.1:46832.service. Nov 1 00:09:44.246000 audit[3677]: USER_ACCT pid=3677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:44.248233 sshd[3677]: Accepted publickey for core from 10.0.0.1 port 46832 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:09:44.247000 audit[3677]: CRED_ACQ pid=3677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:44.247000 audit[3677]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea5ac5e0 a2=3 a3=1 items=0 ppid=1 pid=3677 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.247000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:09:44.249519 sshd[3677]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:09:44.252883 systemd-logind[1206]: New session 8 of user core. Nov 1 00:09:44.253757 systemd[1]: Started session-8.scope. Nov 1 00:09:44.255000 audit[3677]: USER_START pid=3677 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:44.256000 audit[3679]: CRED_ACQ pid=3679 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:44.419492 sshd[3677]: pam_unix(sshd:session): session closed for user core Nov 1 00:09:44.418000 audit[3677]: USER_END pid=3677 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:44.419000 audit[3677]: CRED_DISP pid=3677 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:44.422364 systemd[1]: sshd@7-10.0.0.24:22-10.0.0.1:46832.service: Deactivated successfully. Nov 1 00:09:44.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.24:22-10.0.0.1:46832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:44.423216 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:09:44.423696 systemd-logind[1206]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:09:44.424303 systemd-logind[1206]: Removed session 8. Nov 1 00:09:44.619597 env[1216]: time="2025-11-01T00:09:44.619265730Z" level=info msg="StopPodSandbox for \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\"" Nov 1 00:09:44.620326 env[1216]: time="2025-11-01T00:09:44.620280147Z" level=info msg="StopPodSandbox for \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\"" Nov 1 00:09:44.620656 env[1216]: time="2025-11-01T00:09:44.620629927Z" level=info msg="StopPodSandbox for \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\"" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.676 [INFO][3734] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.676 [INFO][3734] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" iface="eth0" netns="/var/run/netns/cni-26474a98-47c9-9c80-c100-0e69c4389e1d" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.676 [INFO][3734] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" iface="eth0" netns="/var/run/netns/cni-26474a98-47c9-9c80-c100-0e69c4389e1d" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.676 [INFO][3734] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" iface="eth0" netns="/var/run/netns/cni-26474a98-47c9-9c80-c100-0e69c4389e1d" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.676 [INFO][3734] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.676 [INFO][3734] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.746 [INFO][3757] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.746 [INFO][3757] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.746 [INFO][3757] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.759 [WARNING][3757] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.759 [INFO][3757] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.761 [INFO][3757] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:44.767066 env[1216]: 2025-11-01 00:09:44.764 [INFO][3734] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:09:44.767763 env[1216]: time="2025-11-01T00:09:44.767727361Z" level=info msg="TearDown network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\" successfully" Nov 1 00:09:44.767874 env[1216]: time="2025-11-01T00:09:44.767856048Z" level=info msg="StopPodSandbox for \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\" returns successfully" Nov 1 00:09:44.769804 systemd[1]: run-netns-cni\x2d26474a98\x2d47c9\x2d9c80\x2dc100\x2d0e69c4389e1d.mount: Deactivated successfully. Nov 1 00:09:44.770869 env[1216]: time="2025-11-01T00:09:44.770841616Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c7694554f-flcbv,Uid:d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7,Namespace:calico-system,Attempt:1,}" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.695 [INFO][3741] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.695 [INFO][3741] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" iface="eth0" netns="/var/run/netns/cni-d19e4f23-2817-3195-7d6f-d539cdc9c855" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.696 [INFO][3741] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" iface="eth0" netns="/var/run/netns/cni-d19e4f23-2817-3195-7d6f-d539cdc9c855" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.699 [INFO][3741] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" iface="eth0" netns="/var/run/netns/cni-d19e4f23-2817-3195-7d6f-d539cdc9c855" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.699 [INFO][3741] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.699 [INFO][3741] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.746 [INFO][3764] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.746 [INFO][3764] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.761 [INFO][3764] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.773 [WARNING][3764] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.773 [INFO][3764] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.775 [INFO][3764] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:44.783797 env[1216]: 2025-11-01 00:09:44.778 [INFO][3741] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:09:44.782474 systemd[1]: run-netns-cni\x2dd19e4f23\x2d2817\x2d3195\x2d7d6f\x2dd539cdc9c855.mount: Deactivated successfully. Nov 1 00:09:44.784976 kubelet[1971]: E1101 00:09:44.784526 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:09:44.791920 env[1216]: time="2025-11-01T00:09:44.791837551Z" level=info msg="TearDown network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\" successfully" Nov 1 00:09:44.792110 env[1216]: time="2025-11-01T00:09:44.791882033Z" level=info msg="StopPodSandbox for \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\" returns successfully" Nov 1 00:09:44.793200 env[1216]: time="2025-11-01T00:09:44.793169266Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-d2762,Uid:ee73499a-4c7c-4cc1-87d2-26b81ea29f19,Namespace:calico-system,Attempt:1,}" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.718 [INFO][3735] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.718 [INFO][3735] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" iface="eth0" netns="/var/run/netns/cni-8e270d35-d022-3594-7b64-2f221b72547c" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.718 [INFO][3735] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" iface="eth0" netns="/var/run/netns/cni-8e270d35-d022-3594-7b64-2f221b72547c" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.718 [INFO][3735] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" iface="eth0" netns="/var/run/netns/cni-8e270d35-d022-3594-7b64-2f221b72547c" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.718 [INFO][3735] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.718 [INFO][3735] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.758 [INFO][3771] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.758 [INFO][3771] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.776 [INFO][3771] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.788 [WARNING][3771] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.788 [INFO][3771] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.792 [INFO][3771] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:44.805304 env[1216]: 2025-11-01 00:09:44.802 [INFO][3735] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:09:44.804000 audit[3785]: NETFILTER_CFG table=filter:112 family=2 entries=20 op=nft_register_rule pid=3785 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:44.804000 audit[3785]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd72c2bc0 a2=0 a3=1 items=0 ppid=2087 pid=3785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:44.807560 systemd[1]: run-netns-cni\x2d8e270d35\x2dd022\x2d3594\x2d7b64\x2d2f221b72547c.mount: Deactivated successfully. Nov 1 00:09:44.807904 env[1216]: time="2025-11-01T00:09:44.807870248Z" level=info msg="TearDown network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\" successfully" Nov 1 00:09:44.808016 env[1216]: time="2025-11-01T00:09:44.807997616Z" level=info msg="StopPodSandbox for \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\" returns successfully" Nov 1 00:09:44.808663 kubelet[1971]: E1101 00:09:44.808453 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:44.809114 env[1216]: time="2025-11-01T00:09:44.809090197Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-j5k5b,Uid:732d3bd5-025e-4ee3-9cd6-d34425f82a66,Namespace:kube-system,Attempt:1,}" Nov 1 00:09:44.811000 audit[3785]: NETFILTER_CFG table=nat:113 family=2 entries=14 op=nft_register_rule pid=3785 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:44.811000 audit[3785]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffd72c2bc0 a2=0 a3=1 items=0 ppid=2087 pid=3785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.811000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:44.932508 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:09:44.932615 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali357c908c72e: link becomes ready Nov 1 00:09:44.929532 systemd-networkd[1051]: cali357c908c72e: Link UP Nov 1 00:09:44.932153 systemd-networkd[1051]: cali357c908c72e: Gained carrier Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.854 [INFO][3797] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--d2762-eth0 csi-node-driver- calico-system ee73499a-4c7c-4cc1-87d2-26b81ea29f19 1001 0 2025-11-01 00:09:24 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-d2762 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali357c908c72e [] [] }} ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Namespace="calico-system" Pod="csi-node-driver-d2762" WorkloadEndpoint="localhost-k8s-csi--node--driver--d2762-" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.854 [INFO][3797] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Namespace="calico-system" Pod="csi-node-driver-d2762" WorkloadEndpoint="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.889 [INFO][3829] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" HandleID="k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.889 [INFO][3829] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" HandleID="k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Workload="localhost-k8s-csi--node--driver--d2762-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001aedd0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-d2762", "timestamp":"2025-11-01 00:09:44.889320128 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.889 [INFO][3829] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.889 [INFO][3829] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.889 [INFO][3829] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.898 [INFO][3829] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.907 [INFO][3829] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.911 [INFO][3829] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.912 [INFO][3829] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.914 [INFO][3829] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.914 [INFO][3829] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.916 [INFO][3829] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.919 [INFO][3829] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.925 [INFO][3829] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.925 [INFO][3829] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" host="localhost" Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.925 [INFO][3829] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:44.947283 env[1216]: 2025-11-01 00:09:44.925 [INFO][3829] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" HandleID="k8s-pod-network.4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.947857 env[1216]: 2025-11-01 00:09:44.927 [INFO][3797] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Namespace="calico-system" Pod="csi-node-driver-d2762" WorkloadEndpoint="localhost-k8s-csi--node--driver--d2762-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--d2762-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ee73499a-4c7c-4cc1-87d2-26b81ea29f19", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-d2762", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali357c908c72e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:44.947857 env[1216]: 2025-11-01 00:09:44.927 [INFO][3797] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Namespace="calico-system" Pod="csi-node-driver-d2762" WorkloadEndpoint="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.947857 env[1216]: 2025-11-01 00:09:44.927 [INFO][3797] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali357c908c72e ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Namespace="calico-system" Pod="csi-node-driver-d2762" WorkloadEndpoint="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.947857 env[1216]: 2025-11-01 00:09:44.932 [INFO][3797] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Namespace="calico-system" Pod="csi-node-driver-d2762" WorkloadEndpoint="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.947857 env[1216]: 2025-11-01 00:09:44.935 [INFO][3797] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Namespace="calico-system" Pod="csi-node-driver-d2762" WorkloadEndpoint="localhost-k8s-csi--node--driver--d2762-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--d2762-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ee73499a-4c7c-4cc1-87d2-26b81ea29f19", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa", Pod:"csi-node-driver-d2762", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali357c908c72e", MAC:"d2:37:81:ec:3c:81", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:44.947857 env[1216]: 2025-11-01 00:09:44.943 [INFO][3797] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa" Namespace="calico-system" Pod="csi-node-driver-d2762" WorkloadEndpoint="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:09:44.954000 audit[3865]: NETFILTER_CFG table=filter:114 family=2 entries=40 op=nft_register_chain pid=3865 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:44.954000 audit[3865]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffc08262f0 a2=0 a3=ffff9a246fa8 items=0 ppid=3379 pid=3865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.954000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:44.957925 env[1216]: time="2025-11-01T00:09:44.957847524Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:44.957925 env[1216]: time="2025-11-01T00:09:44.957892567Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:44.957925 env[1216]: time="2025-11-01T00:09:44.957902767Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:44.958253 env[1216]: time="2025-11-01T00:09:44.958215225Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa pid=3868 runtime=io.containerd.runc.v2 Nov 1 00:09:44.968838 systemd[1]: Started cri-containerd-4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa.scope. Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.982000 audit: BPF prog-id=172 op=LOAD Nov 1 00:09:44.982000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.982000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3868 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636364626333616239353966303430633162316134303563306565 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3868 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636364626333616239353966303430633162316134303563306565 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.983000 audit: BPF prog-id=173 op=LOAD Nov 1 00:09:44.983000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3868 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636364626333616239353966303430633162316134303563306565 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit: BPF prog-id=174 op=LOAD Nov 1 00:09:44.984000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3868 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636364626333616239353966303430633162316134303563306565 Nov 1 00:09:44.984000 audit: BPF prog-id=174 op=UNLOAD Nov 1 00:09:44.984000 audit: BPF prog-id=173 op=UNLOAD Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:44.984000 audit: BPF prog-id=175 op=LOAD Nov 1 00:09:44.984000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3868 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:44.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636364626333616239353966303430633162316134303563306565 Nov 1 00:09:44.987794 systemd-resolved[1167]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:09:44.996411 env[1216]: time="2025-11-01T00:09:44.996355840Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-d2762,Uid:ee73499a-4c7c-4cc1-87d2-26b81ea29f19,Namespace:calico-system,Attempt:1,} returns sandbox id \"4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa\"" Nov 1 00:09:44.998054 env[1216]: time="2025-11-01T00:09:44.998025013Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:09:45.032951 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaee3f49fc1c: link becomes ready Nov 1 00:09:45.029283 systemd-networkd[1051]: caliaee3f49fc1c: Link UP Nov 1 00:09:45.030516 systemd-networkd[1051]: caliaee3f49fc1c: Gained carrier Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:44.855 [INFO][3786] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0 calico-kube-controllers-6c7694554f- calico-system d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7 1000 0 2025-11-01 00:09:24 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6c7694554f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6c7694554f-flcbv eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] caliaee3f49fc1c [] [] }} ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Namespace="calico-system" Pod="calico-kube-controllers-6c7694554f-flcbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:44.855 [INFO][3786] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Namespace="calico-system" Pod="calico-kube-controllers-6c7694554f-flcbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:44.890 [INFO][3827] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" HandleID="k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:44.890 [INFO][3827] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" HandleID="k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000514ac0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6c7694554f-flcbv", "timestamp":"2025-11-01 00:09:44.890757569 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:44.890 [INFO][3827] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:44.925 [INFO][3827] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:44.925 [INFO][3827] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:44.999 [INFO][3827] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.005 [INFO][3827] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.011 [INFO][3827] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.013 [INFO][3827] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.015 [INFO][3827] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.015 [INFO][3827] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.016 [INFO][3827] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276 Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.020 [INFO][3827] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.024 [INFO][3827] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.025 [INFO][3827] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" host="localhost" Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.025 [INFO][3827] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:45.045704 env[1216]: 2025-11-01 00:09:45.025 [INFO][3827] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" HandleID="k8s-pod-network.ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:45.046273 env[1216]: 2025-11-01 00:09:45.027 [INFO][3786] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Namespace="calico-system" Pod="calico-kube-controllers-6c7694554f-flcbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0", GenerateName:"calico-kube-controllers-6c7694554f-", Namespace:"calico-system", SelfLink:"", UID:"d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c7694554f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6c7694554f-flcbv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliaee3f49fc1c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:45.046273 env[1216]: 2025-11-01 00:09:45.027 [INFO][3786] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Namespace="calico-system" Pod="calico-kube-controllers-6c7694554f-flcbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:45.046273 env[1216]: 2025-11-01 00:09:45.027 [INFO][3786] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliaee3f49fc1c ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Namespace="calico-system" Pod="calico-kube-controllers-6c7694554f-flcbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:45.046273 env[1216]: 2025-11-01 00:09:45.030 [INFO][3786] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Namespace="calico-system" Pod="calico-kube-controllers-6c7694554f-flcbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:45.046273 env[1216]: 2025-11-01 00:09:45.031 [INFO][3786] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Namespace="calico-system" Pod="calico-kube-controllers-6c7694554f-flcbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0", GenerateName:"calico-kube-controllers-6c7694554f-", Namespace:"calico-system", SelfLink:"", UID:"d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c7694554f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276", Pod:"calico-kube-controllers-6c7694554f-flcbv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliaee3f49fc1c", MAC:"d2:22:8b:9a:19:5a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:45.046273 env[1216]: 2025-11-01 00:09:45.041 [INFO][3786] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276" Namespace="calico-system" Pod="calico-kube-controllers-6c7694554f-flcbv" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:09:45.052000 audit[3914]: NETFILTER_CFG table=filter:115 family=2 entries=44 op=nft_register_chain pid=3914 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:45.052000 audit[3914]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21952 a0=3 a1=ffffc5229980 a2=0 a3=ffff969b0fa8 items=0 ppid=3379 pid=3914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.052000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:45.056419 env[1216]: time="2025-11-01T00:09:45.056342732Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:45.056643 env[1216]: time="2025-11-01T00:09:45.056558023Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:45.056758 env[1216]: time="2025-11-01T00:09:45.056734513Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:45.057056 env[1216]: time="2025-11-01T00:09:45.057008888Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276 pid=3922 runtime=io.containerd.runc.v2 Nov 1 00:09:45.067413 systemd[1]: Started cri-containerd-ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276.scope. Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.081000 audit: BPF prog-id=176 op=LOAD Nov 1 00:09:45.082000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.082000 audit[3932]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3922 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353733626262613230623833313436393239326534326466323735 Nov 1 00:09:45.082000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.082000 audit[3932]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3922 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353733626262613230623833313436393239326534326466323735 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.083000 audit: BPF prog-id=177 op=LOAD Nov 1 00:09:45.083000 audit[3932]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3922 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353733626262613230623833313436393239326534326466323735 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit: BPF prog-id=178 op=LOAD Nov 1 00:09:45.085000 audit[3932]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3922 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353733626262613230623833313436393239326534326466323735 Nov 1 00:09:45.085000 audit: BPF prog-id=178 op=UNLOAD Nov 1 00:09:45.085000 audit: BPF prog-id=177 op=UNLOAD Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { perfmon } for pid=3932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit[3932]: AVC avc: denied { bpf } for pid=3932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.085000 audit: BPF prog-id=179 op=LOAD Nov 1 00:09:45.085000 audit[3932]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3922 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353733626262613230623833313436393239326534326466323735 Nov 1 00:09:45.087539 systemd-resolved[1167]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:09:45.104600 env[1216]: time="2025-11-01T00:09:45.104530771Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c7694554f-flcbv,Uid:d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7,Namespace:calico-system,Attempt:1,} returns sandbox id \"ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276\"" Nov 1 00:09:45.131928 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali99adefccde1: link becomes ready Nov 1 00:09:45.132162 systemd-networkd[1051]: cali99adefccde1: Link UP Nov 1 00:09:45.132300 systemd-networkd[1051]: cali99adefccde1: Gained carrier Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:44.867 [INFO][3810] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0 coredns-674b8bbfcf- kube-system 732d3bd5-025e-4ee3-9cd6-d34425f82a66 1003 0 2025-11-01 00:09:08 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-j5k5b eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali99adefccde1 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Namespace="kube-system" Pod="coredns-674b8bbfcf-j5k5b" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--j5k5b-" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:44.868 [INFO][3810] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Namespace="kube-system" Pod="coredns-674b8bbfcf-j5k5b" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:44.906 [INFO][3842] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" HandleID="k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:44.906 [INFO][3842] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" HandleID="k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dc6d0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-j5k5b", "timestamp":"2025-11-01 00:09:44.906055025 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:44.906 [INFO][3842] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.025 [INFO][3842] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.025 [INFO][3842] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.099 [INFO][3842] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.106 [INFO][3842] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.112 [INFO][3842] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.113 [INFO][3842] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.115 [INFO][3842] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.115 [INFO][3842] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.117 [INFO][3842] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.120 [INFO][3842] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.126 [INFO][3842] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.126 [INFO][3842] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" host="localhost" Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.126 [INFO][3842] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:45.147399 env[1216]: 2025-11-01 00:09:45.126 [INFO][3842] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" HandleID="k8s-pod-network.84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:45.147970 env[1216]: 2025-11-01 00:09:45.129 [INFO][3810] cni-plugin/k8s.go 418: Populated endpoint ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Namespace="kube-system" Pod="coredns-674b8bbfcf-j5k5b" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"732d3bd5-025e-4ee3-9cd6-d34425f82a66", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-j5k5b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali99adefccde1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:45.147970 env[1216]: 2025-11-01 00:09:45.129 [INFO][3810] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Namespace="kube-system" Pod="coredns-674b8bbfcf-j5k5b" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:45.147970 env[1216]: 2025-11-01 00:09:45.129 [INFO][3810] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali99adefccde1 ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Namespace="kube-system" Pod="coredns-674b8bbfcf-j5k5b" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:45.147970 env[1216]: 2025-11-01 00:09:45.132 [INFO][3810] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Namespace="kube-system" Pod="coredns-674b8bbfcf-j5k5b" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:45.147970 env[1216]: 2025-11-01 00:09:45.137 [INFO][3810] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Namespace="kube-system" Pod="coredns-674b8bbfcf-j5k5b" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"732d3bd5-025e-4ee3-9cd6-d34425f82a66", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad", Pod:"coredns-674b8bbfcf-j5k5b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali99adefccde1", MAC:"92:4f:af:45:0d:99", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:45.147970 env[1216]: 2025-11-01 00:09:45.145 [INFO][3810] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad" Namespace="kube-system" Pod="coredns-674b8bbfcf-j5k5b" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:09:45.157221 env[1216]: time="2025-11-01T00:09:45.157023405Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:45.157221 env[1216]: time="2025-11-01T00:09:45.157066288Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:45.157221 env[1216]: time="2025-11-01T00:09:45.157085929Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:45.157368 env[1216]: time="2025-11-01T00:09:45.157233857Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad pid=3972 runtime=io.containerd.runc.v2 Nov 1 00:09:45.159000 audit[3982]: NETFILTER_CFG table=filter:116 family=2 entries=54 op=nft_register_chain pid=3982 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:45.159000 audit[3982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26116 a0=3 a1=ffffd9d44e70 a2=0 a3=ffff96422fa8 items=0 ppid=3379 pid=3982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.159000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:45.167232 systemd[1]: Started cri-containerd-84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad.scope. Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.181000 audit: BPF prog-id=180 op=LOAD Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3972 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834653963376639346265643362623636373738353435623065376663 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3972 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834653963376639346265643362623636373738353435623065376663 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit: BPF prog-id=181 op=LOAD Nov 1 00:09:45.182000 audit[3981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3972 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834653963376639346265643362623636373738353435623065376663 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit: BPF prog-id=182 op=LOAD Nov 1 00:09:45.182000 audit[3981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3972 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834653963376639346265643362623636373738353435623065376663 Nov 1 00:09:45.182000 audit: BPF prog-id=182 op=UNLOAD Nov 1 00:09:45.182000 audit: BPF prog-id=181 op=UNLOAD Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { perfmon } for pid=3981 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit[3981]: AVC avc: denied { bpf } for pid=3981 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.182000 audit: BPF prog-id=183 op=LOAD Nov 1 00:09:45.182000 audit[3981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3972 pid=3981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834653963376639346265643362623636373738353435623065376663 Nov 1 00:09:45.190711 systemd-resolved[1167]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:09:45.205039 env[1216]: time="2025-11-01T00:09:45.205001353Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-j5k5b,Uid:732d3bd5-025e-4ee3-9cd6-d34425f82a66,Namespace:kube-system,Attempt:1,} returns sandbox id \"84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad\"" Nov 1 00:09:45.205692 kubelet[1971]: E1101 00:09:45.205671 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:45.211761 env[1216]: time="2025-11-01T00:09:45.211011882Z" level=info msg="CreateContainer within sandbox \"84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:09:45.214421 env[1216]: time="2025-11-01T00:09:45.214373546Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:45.216199 env[1216]: time="2025-11-01T00:09:45.216155284Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:09:45.216353 kubelet[1971]: E1101 00:09:45.216324 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:09:45.216403 kubelet[1971]: E1101 00:09:45.216361 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:09:45.216585 kubelet[1971]: E1101 00:09:45.216549 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hzflm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d2762_calico-system(ee73499a-4c7c-4cc1-87d2-26b81ea29f19): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:45.216919 env[1216]: time="2025-11-01T00:09:45.216890364Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:09:45.226158 env[1216]: time="2025-11-01T00:09:45.226116309Z" level=info msg="CreateContainer within sandbox \"84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6c46e656722e521196159388f90c66402303e4a042deabb105eb870e8a023895\"" Nov 1 00:09:45.227465 env[1216]: time="2025-11-01T00:09:45.226702581Z" level=info msg="StartContainer for \"6c46e656722e521196159388f90c66402303e4a042deabb105eb870e8a023895\"" Nov 1 00:09:45.241331 systemd[1]: Started cri-containerd-6c46e656722e521196159388f90c66402303e4a042deabb105eb870e8a023895.scope. Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit: BPF prog-id=184 op=LOAD Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3972 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663343665363536373232653532313139363135393338386639306336 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3972 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663343665363536373232653532313139363135393338386639306336 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit: BPF prog-id=185 op=LOAD Nov 1 00:09:45.259000 audit[4014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3972 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663343665363536373232653532313139363135393338386639306336 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit: BPF prog-id=186 op=LOAD Nov 1 00:09:45.259000 audit[4014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3972 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663343665363536373232653532313139363135393338386639306336 Nov 1 00:09:45.259000 audit: BPF prog-id=186 op=UNLOAD Nov 1 00:09:45.259000 audit: BPF prog-id=185 op=UNLOAD Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { perfmon } for pid=4014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit[4014]: AVC avc: denied { bpf } for pid=4014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.259000 audit: BPF prog-id=187 op=LOAD Nov 1 00:09:45.259000 audit[4014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3972 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663343665363536373232653532313139363135393338386639306336 Nov 1 00:09:45.273892 env[1216]: time="2025-11-01T00:09:45.273852164Z" level=info msg="StartContainer for \"6c46e656722e521196159388f90c66402303e4a042deabb105eb870e8a023895\" returns successfully" Nov 1 00:09:45.321000 audit[4025]: AVC avc: denied { getattr } for pid=4025 comm="coredns" path="cgroup:[4026532543]" dev="nsfs" ino=4026532543 scontext=system_u:system_r:svirt_lxc_net_t:s0:c129,c646 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:09:45.321000 audit[4025]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056b10 a2=40000da3f8 a3=0 items=0 ppid=3972 pid=4025 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c129,c646 key=(null) Nov 1 00:09:45.321000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:09:45.427802 env[1216]: time="2025-11-01T00:09:45.427734391Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:45.428640 env[1216]: time="2025-11-01T00:09:45.428600118Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:09:45.429029 kubelet[1971]: E1101 00:09:45.428849 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:09:45.429029 kubelet[1971]: E1101 00:09:45.428899 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:09:45.429174 kubelet[1971]: E1101 00:09:45.429127 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dzmqg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-6c7694554f-flcbv_calico-system(d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:45.429267 env[1216]: time="2025-11-01T00:09:45.429224913Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:09:45.430613 kubelet[1971]: E1101 00:09:45.430563 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7" Nov 1 00:09:45.620033 env[1216]: time="2025-11-01T00:09:45.619963838Z" level=info msg="StopPodSandbox for \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\"" Nov 1 00:09:45.647930 env[1216]: time="2025-11-01T00:09:45.647881007Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:45.652331 env[1216]: time="2025-11-01T00:09:45.652213685Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:09:45.652641 kubelet[1971]: E1101 00:09:45.652561 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:09:45.652641 kubelet[1971]: E1101 00:09:45.652608 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:09:45.654814 kubelet[1971]: E1101 00:09:45.652911 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hzflm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d2762_calico-system(ee73499a-4c7c-4cc1-87d2-26b81ea29f19): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:45.654814 kubelet[1971]: E1101 00:09:45.654122 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.669 [INFO][4057] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.670 [INFO][4057] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" iface="eth0" netns="/var/run/netns/cni-0331ba15-8e73-eee3-d801-85b53afc4c04" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.670 [INFO][4057] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" iface="eth0" netns="/var/run/netns/cni-0331ba15-8e73-eee3-d801-85b53afc4c04" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.670 [INFO][4057] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" iface="eth0" netns="/var/run/netns/cni-0331ba15-8e73-eee3-d801-85b53afc4c04" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.670 [INFO][4057] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.670 [INFO][4057] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.688 [INFO][4066] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.688 [INFO][4066] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.688 [INFO][4066] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.699 [WARNING][4066] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.699 [INFO][4066] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.701 [INFO][4066] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:45.704268 env[1216]: 2025-11-01 00:09:45.702 [INFO][4057] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:09:45.704704 env[1216]: time="2025-11-01T00:09:45.704382182Z" level=info msg="TearDown network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\" successfully" Nov 1 00:09:45.704704 env[1216]: time="2025-11-01T00:09:45.704413343Z" level=info msg="StopPodSandbox for \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\" returns successfully" Nov 1 00:09:45.705348 env[1216]: time="2025-11-01T00:09:45.705317473Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6495f5c798-mfzv5,Uid:f76eed17-611d-4863-927b-c02c54186a3e,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:09:45.774660 systemd[1]: run-netns-cni\x2d0331ba15\x2d8e73\x2deee3\x2dd801\x2d85b53afc4c04.mount: Deactivated successfully. Nov 1 00:09:45.780202 kubelet[1971]: E1101 00:09:45.780156 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:45.786032 kubelet[1971]: E1101 00:09:45.783807 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7" Nov 1 00:09:45.786032 kubelet[1971]: E1101 00:09:45.784999 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:09:45.786032 kubelet[1971]: E1101 00:09:45.785308 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:45.799119 kubelet[1971]: I1101 00:09:45.798820 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-j5k5b" podStartSLOduration=37.798803593 podStartE2EDuration="37.798803593s" podCreationTimestamp="2025-11-01 00:09:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:09:45.797035976 +0000 UTC m=+44.269445390" watchObservedRunningTime="2025-11-01 00:09:45.798803593 +0000 UTC m=+44.271213127" Nov 1 00:09:45.809000 audit[4097]: NETFILTER_CFG table=filter:117 family=2 entries=20 op=nft_register_rule pid=4097 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:45.809000 audit[4097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcd0b8500 a2=0 a3=1 items=0 ppid=2087 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.809000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:45.813000 audit[4097]: NETFILTER_CFG table=nat:118 family=2 entries=14 op=nft_register_rule pid=4097 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:45.813000 audit[4097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffcd0b8500 a2=0 a3=1 items=0 ppid=2087 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.813000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:45.845000 audit[4100]: NETFILTER_CFG table=filter:119 family=2 entries=17 op=nft_register_rule pid=4100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:45.845000 audit[4100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc485f650 a2=0 a3=1 items=0 ppid=2087 pid=4100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.845000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:45.851126 systemd-networkd[1051]: cali38108f4d33a: Link UP Nov 1 00:09:45.851272 systemd-networkd[1051]: cali38108f4d33a: Gained carrier Nov 1 00:09:45.851788 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali38108f4d33a: link becomes ready Nov 1 00:09:45.851000 audit[4100]: NETFILTER_CFG table=nat:120 family=2 entries=35 op=nft_register_chain pid=4100 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:45.851000 audit[4100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffc485f650 a2=0 a3=1 items=0 ppid=2087 pid=4100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.751 [INFO][4074] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0 calico-apiserver-6495f5c798- calico-apiserver f76eed17-611d-4863-927b-c02c54186a3e 1038 0 2025-11-01 00:09:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6495f5c798 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6495f5c798-mfzv5 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali38108f4d33a [] [] }} ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-mfzv5" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.751 [INFO][4074] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-mfzv5" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.780 [INFO][4088] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" HandleID="k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.780 [INFO][4088] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" HandleID="k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137720), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6495f5c798-mfzv5", "timestamp":"2025-11-01 00:09:45.780098208 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.780 [INFO][4088] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.780 [INFO][4088] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.780 [INFO][4088] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.804 [INFO][4088] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.816 [INFO][4088] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.825 [INFO][4088] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.828 [INFO][4088] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.830 [INFO][4088] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.830 [INFO][4088] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.833 [INFO][4088] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5 Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.839 [INFO][4088] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.846 [INFO][4088] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.846 [INFO][4088] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" host="localhost" Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.846 [INFO][4088] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:45.866593 env[1216]: 2025-11-01 00:09:45.846 [INFO][4088] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" HandleID="k8s-pod-network.3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.867370 env[1216]: 2025-11-01 00:09:45.848 [INFO][4074] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-mfzv5" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0", GenerateName:"calico-apiserver-6495f5c798-", Namespace:"calico-apiserver", SelfLink:"", UID:"f76eed17-611d-4863-927b-c02c54186a3e", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6495f5c798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6495f5c798-mfzv5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali38108f4d33a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:45.867370 env[1216]: 2025-11-01 00:09:45.848 [INFO][4074] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-mfzv5" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.867370 env[1216]: 2025-11-01 00:09:45.848 [INFO][4074] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali38108f4d33a ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-mfzv5" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.867370 env[1216]: 2025-11-01 00:09:45.851 [INFO][4074] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-mfzv5" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.867370 env[1216]: 2025-11-01 00:09:45.852 [INFO][4074] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-mfzv5" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0", GenerateName:"calico-apiserver-6495f5c798-", Namespace:"calico-apiserver", SelfLink:"", UID:"f76eed17-611d-4863-927b-c02c54186a3e", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6495f5c798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5", Pod:"calico-apiserver-6495f5c798-mfzv5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali38108f4d33a", MAC:"1e:0c:9e:7a:5b:c7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:45.867370 env[1216]: 2025-11-01 00:09:45.864 [INFO][4074] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5" Namespace="calico-apiserver" Pod="calico-apiserver-6495f5c798-mfzv5" WorkloadEndpoint="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:09:45.877917 env[1216]: time="2025-11-01T00:09:45.877757196Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:45.877917 env[1216]: time="2025-11-01T00:09:45.877856802Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:45.876000 audit[4119]: NETFILTER_CFG table=filter:121 family=2 entries=59 op=nft_register_chain pid=4119 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:45.876000 audit[4119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29492 a0=3 a1=ffffd175f9c0 a2=0 a3=ffff8893cfa8 items=0 ppid=3379 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.876000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:45.880354 env[1216]: time="2025-11-01T00:09:45.877897564Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:45.880639 env[1216]: time="2025-11-01T00:09:45.880583231Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5 pid=4118 runtime=io.containerd.runc.v2 Nov 1 00:09:45.892952 systemd[1]: Started cri-containerd-3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5.scope. Nov 1 00:09:45.901245 systemd-networkd[1051]: cali5bc6d8ed742: Gained IPv6LL Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit: BPF prog-id=188 op=LOAD Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4118 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338383632313462653432393031636537336334366237363236316238 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4118 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338383632313462653432393031636537336334366237363236316238 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.913000 audit: BPF prog-id=189 op=LOAD Nov 1 00:09:45.913000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4118 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338383632313462653432393031636537336334366237363236316238 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit: BPF prog-id=190 op=LOAD Nov 1 00:09:45.914000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4118 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338383632313462653432393031636537336334366237363236316238 Nov 1 00:09:45.914000 audit: BPF prog-id=190 op=UNLOAD Nov 1 00:09:45.914000 audit: BPF prog-id=189 op=UNLOAD Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:45.914000 audit: BPF prog-id=191 op=LOAD Nov 1 00:09:45.914000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4118 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:45.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338383632313462653432393031636537336334366237363236316238 Nov 1 00:09:45.916453 systemd-resolved[1167]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:09:45.932975 env[1216]: time="2025-11-01T00:09:45.932932298Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6495f5c798-mfzv5,Uid:f76eed17-611d-4863-927b-c02c54186a3e,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5\"" Nov 1 00:09:45.934379 env[1216]: time="2025-11-01T00:09:45.934333415Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:09:46.138251 env[1216]: time="2025-11-01T00:09:46.138112539Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:46.140985 env[1216]: time="2025-11-01T00:09:46.140924050Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:09:46.141213 kubelet[1971]: E1101 00:09:46.141159 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:09:46.141280 kubelet[1971]: E1101 00:09:46.141216 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:09:46.141391 kubelet[1971]: E1101 00:09:46.141343 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lcnv5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6495f5c798-mfzv5_calico-apiserver(f76eed17-611d-4863-927b-c02c54186a3e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:46.142750 kubelet[1971]: E1101 00:09:46.142703 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" podUID="f76eed17-611d-4863-927b-c02c54186a3e" Nov 1 00:09:46.285136 systemd-networkd[1051]: cali357c908c72e: Gained IPv6LL Nov 1 00:09:46.619735 env[1216]: time="2025-11-01T00:09:46.619685644Z" level=info msg="StopPodSandbox for \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\"" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.666 [INFO][4162] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.667 [INFO][4162] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" iface="eth0" netns="/var/run/netns/cni-4fe89375-33de-b97a-4269-43ef5665d324" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.667 [INFO][4162] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" iface="eth0" netns="/var/run/netns/cni-4fe89375-33de-b97a-4269-43ef5665d324" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.667 [INFO][4162] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" iface="eth0" netns="/var/run/netns/cni-4fe89375-33de-b97a-4269-43ef5665d324" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.667 [INFO][4162] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.667 [INFO][4162] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.688 [INFO][4170] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.689 [INFO][4170] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.689 [INFO][4170] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.698 [WARNING][4170] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.698 [INFO][4170] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.699 [INFO][4170] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:46.703130 env[1216]: 2025-11-01 00:09:46.701 [INFO][4162] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:09:46.706164 env[1216]: time="2025-11-01T00:09:46.703855358Z" level=info msg="TearDown network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\" successfully" Nov 1 00:09:46.706164 env[1216]: time="2025-11-01T00:09:46.703890520Z" level=info msg="StopPodSandbox for \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\" returns successfully" Nov 1 00:09:46.706164 env[1216]: time="2025-11-01T00:09:46.706050716Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-67g77,Uid:85742704-5ab5-4b30-87fe-a0db1b4cb53b,Namespace:calico-system,Attempt:1,}" Nov 1 00:09:46.705428 systemd[1]: run-netns-cni\x2d4fe89375\x2d33de\x2db97a\x2d4269\x2d43ef5665d324.mount: Deactivated successfully. Nov 1 00:09:46.733358 systemd-networkd[1051]: caliaee3f49fc1c: Gained IPv6LL Nov 1 00:09:46.792952 kubelet[1971]: E1101 00:09:46.790274 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:46.792952 kubelet[1971]: E1101 00:09:46.791075 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" podUID="f76eed17-611d-4863-927b-c02c54186a3e" Nov 1 00:09:46.792952 kubelet[1971]: E1101 00:09:46.791176 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:09:46.796179 kubelet[1971]: E1101 00:09:46.796143 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7" Nov 1 00:09:46.834248 systemd-networkd[1051]: cali2e18a556cda: Link UP Nov 1 00:09:46.836794 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:09:46.836839 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2e18a556cda: link becomes ready Nov 1 00:09:46.837924 systemd-networkd[1051]: cali2e18a556cda: Gained carrier Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.749 [INFO][4179] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--666569f655--67g77-eth0 goldmane-666569f655- calico-system 85742704-5ab5-4b30-87fe-a0db1b4cb53b 1073 0 2025-11-01 00:09:21 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-666569f655-67g77 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali2e18a556cda [] [] }} ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Namespace="calico-system" Pod="goldmane-666569f655-67g77" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--67g77-" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.749 [INFO][4179] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Namespace="calico-system" Pod="goldmane-666569f655-67g77" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.771 [INFO][4195] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" HandleID="k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.772 [INFO][4195] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" HandleID="k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003a54f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-666569f655-67g77", "timestamp":"2025-11-01 00:09:46.771938649 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.772 [INFO][4195] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.772 [INFO][4195] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.772 [INFO][4195] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.781 [INFO][4195] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.791 [INFO][4195] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.800 [INFO][4195] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.803 [INFO][4195] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.806 [INFO][4195] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.806 [INFO][4195] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.807 [INFO][4195] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045 Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.811 [INFO][4195] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.824 [INFO][4195] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.824 [INFO][4195] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" host="localhost" Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.824 [INFO][4195] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:46.847139 env[1216]: 2025-11-01 00:09:46.824 [INFO][4195] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" HandleID="k8s-pod-network.1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.847749 env[1216]: 2025-11-01 00:09:46.831 [INFO][4179] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Namespace="calico-system" Pod="goldmane-666569f655-67g77" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--67g77-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--67g77-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"85742704-5ab5-4b30-87fe-a0db1b4cb53b", ResourceVersion:"1073", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-666569f655-67g77", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali2e18a556cda", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:46.847749 env[1216]: 2025-11-01 00:09:46.831 [INFO][4179] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Namespace="calico-system" Pod="goldmane-666569f655-67g77" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.847749 env[1216]: 2025-11-01 00:09:46.831 [INFO][4179] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2e18a556cda ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Namespace="calico-system" Pod="goldmane-666569f655-67g77" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.847749 env[1216]: 2025-11-01 00:09:46.834 [INFO][4179] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Namespace="calico-system" Pod="goldmane-666569f655-67g77" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.847749 env[1216]: 2025-11-01 00:09:46.834 [INFO][4179] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Namespace="calico-system" Pod="goldmane-666569f655-67g77" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--67g77-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--67g77-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"85742704-5ab5-4b30-87fe-a0db1b4cb53b", ResourceVersion:"1073", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045", Pod:"goldmane-666569f655-67g77", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali2e18a556cda", MAC:"6e:e3:dc:1c:60:16", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:46.847749 env[1216]: 2025-11-01 00:09:46.845 [INFO][4179] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045" Namespace="calico-system" Pod="goldmane-666569f655-67g77" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:09:46.854000 audit[4211]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=4211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:46.854000 audit[4211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc9d2f7a0 a2=0 a3=1 items=0 ppid=2087 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:46.854000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:46.860982 env[1216]: time="2025-11-01T00:09:46.860904260Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:46.861092 env[1216]: time="2025-11-01T00:09:46.860990785Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:46.861092 env[1216]: time="2025-11-01T00:09:46.861016626Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:46.861319 env[1216]: time="2025-11-01T00:09:46.861249839Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045 pid=4221 runtime=io.containerd.runc.v2 Nov 1 00:09:46.861000 audit[4211]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=4211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:46.861000 audit[4211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc9d2f7a0 a2=0 a3=1 items=0 ppid=2087 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:46.861000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:46.874000 audit[4239]: NETFILTER_CFG table=filter:124 family=2 entries=60 op=nft_register_chain pid=4239 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:46.874000 audit[4239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29916 a0=3 a1=ffffecaf5800 a2=0 a3=ffff86e4bfa8 items=0 ppid=3379 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:46.874000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:46.883288 systemd[1]: Started cri-containerd-1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045.scope. Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit: BPF prog-id=192 op=LOAD Nov 1 00:09:46.895000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.895000 audit[4232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:46.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323261623030636537386539613531386232633765656362646635 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:46.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323261623030636537386539613531386232633765656362646635 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit: BPF prog-id=193 op=LOAD Nov 1 00:09:46.896000 audit[4232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:46.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323261623030636537386539613531386232633765656362646635 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.896000 audit: BPF prog-id=194 op=LOAD Nov 1 00:09:46.896000 audit[4232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:46.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323261623030636537386539613531386232633765656362646635 Nov 1 00:09:46.897000 audit: BPF prog-id=194 op=UNLOAD Nov 1 00:09:46.897000 audit: BPF prog-id=193 op=UNLOAD Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { perfmon } for pid=4232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit[4232]: AVC avc: denied { bpf } for pid=4232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:46.897000 audit: BPF prog-id=195 op=LOAD Nov 1 00:09:46.897000 audit[4232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4221 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:46.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323261623030636537386539613531386232633765656362646635 Nov 1 00:09:46.900513 systemd-resolved[1167]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:09:46.916281 env[1216]: time="2025-11-01T00:09:46.916227267Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-67g77,Uid:85742704-5ab5-4b30-87fe-a0db1b4cb53b,Namespace:calico-system,Attempt:1,} returns sandbox id \"1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045\"" Nov 1 00:09:46.917992 env[1216]: time="2025-11-01T00:09:46.917963120Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:09:46.925934 systemd-networkd[1051]: cali99adefccde1: Gained IPv6LL Nov 1 00:09:47.137208 env[1216]: time="2025-11-01T00:09:47.137084887Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:47.139083 env[1216]: time="2025-11-01T00:09:47.139030789Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:09:47.139294 kubelet[1971]: E1101 00:09:47.139261 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:09:47.139358 kubelet[1971]: E1101 00:09:47.139307 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:09:47.139483 kubelet[1971]: E1101 00:09:47.139431 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wz2vz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-67g77_calico-system(85742704-5ab5-4b30-87fe-a0db1b4cb53b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:47.140734 kubelet[1971]: E1101 00:09:47.140667 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-67g77" podUID="85742704-5ab5-4b30-87fe-a0db1b4cb53b" Nov 1 00:09:47.180918 systemd-networkd[1051]: cali38108f4d33a: Gained IPv6LL Nov 1 00:09:47.792723 kubelet[1971]: E1101 00:09:47.792688 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:47.793462 kubelet[1971]: E1101 00:09:47.793434 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" podUID="f76eed17-611d-4863-927b-c02c54186a3e" Nov 1 00:09:47.793462 kubelet[1971]: E1101 00:09:47.793444 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-67g77" podUID="85742704-5ab5-4b30-87fe-a0db1b4cb53b" Nov 1 00:09:47.818000 audit[4258]: NETFILTER_CFG table=filter:125 family=2 entries=14 op=nft_register_rule pid=4258 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:47.818000 audit[4258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe0334f80 a2=0 a3=1 items=0 ppid=2087 pid=4258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:47.818000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:47.824000 audit[4258]: NETFILTER_CFG table=nat:126 family=2 entries=20 op=nft_register_rule pid=4258 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:47.824000 audit[4258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffe0334f80 a2=0 a3=1 items=0 ppid=2087 pid=4258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:47.824000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:48.076909 systemd-networkd[1051]: cali2e18a556cda: Gained IPv6LL Nov 1 00:09:48.619387 env[1216]: time="2025-11-01T00:09:48.619349052Z" level=info msg="StopPodSandbox for \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\"" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.663 [INFO][4271] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.663 [INFO][4271] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" iface="eth0" netns="/var/run/netns/cni-a3beffca-0ac2-4d30-dd1d-6572b0465527" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.664 [INFO][4271] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" iface="eth0" netns="/var/run/netns/cni-a3beffca-0ac2-4d30-dd1d-6572b0465527" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.664 [INFO][4271] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" iface="eth0" netns="/var/run/netns/cni-a3beffca-0ac2-4d30-dd1d-6572b0465527" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.664 [INFO][4271] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.664 [INFO][4271] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.689 [INFO][4280] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.689 [INFO][4280] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.690 [INFO][4280] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.700 [WARNING][4280] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.700 [INFO][4280] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.702 [INFO][4280] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:48.706455 env[1216]: 2025-11-01 00:09:48.704 [INFO][4271] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:09:48.708825 systemd[1]: run-netns-cni\x2da3beffca\x2d0ac2\x2d4d30\x2ddd1d\x2d6572b0465527.mount: Deactivated successfully. Nov 1 00:09:48.710128 env[1216]: time="2025-11-01T00:09:48.709484660Z" level=info msg="TearDown network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\" successfully" Nov 1 00:09:48.710128 env[1216]: time="2025-11-01T00:09:48.709528502Z" level=info msg="StopPodSandbox for \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\" returns successfully" Nov 1 00:09:48.710209 kubelet[1971]: E1101 00:09:48.709834 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:48.710492 env[1216]: time="2025-11-01T00:09:48.710458430Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-2w9cl,Uid:b3ea4af2-3f43-4e61-9bdd-5f447d355048,Namespace:kube-system,Attempt:1,}" Nov 1 00:09:48.795992 kubelet[1971]: E1101 00:09:48.795935 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-67g77" podUID="85742704-5ab5-4b30-87fe-a0db1b4cb53b" Nov 1 00:09:48.821643 systemd-networkd[1051]: cali4fff98042ea: Link UP Nov 1 00:09:48.824027 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:09:48.824071 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4fff98042ea: link becomes ready Nov 1 00:09:48.823918 systemd-networkd[1051]: cali4fff98042ea: Gained carrier Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.757 [INFO][4287] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0 coredns-674b8bbfcf- kube-system b3ea4af2-3f43-4e61-9bdd-5f447d355048 1114 0 2025-11-01 00:09:08 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-2w9cl eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4fff98042ea [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Namespace="kube-system" Pod="coredns-674b8bbfcf-2w9cl" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2w9cl-" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.757 [INFO][4287] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Namespace="kube-system" Pod="coredns-674b8bbfcf-2w9cl" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.782 [INFO][4302] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" HandleID="k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.782 [INFO][4302] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" HandleID="k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137750), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-2w9cl", "timestamp":"2025-11-01 00:09:48.782481183 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.782 [INFO][4302] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.782 [INFO][4302] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.782 [INFO][4302] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.791 [INFO][4302] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.799 [INFO][4302] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.802 [INFO][4302] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.805 [INFO][4302] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.807 [INFO][4302] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.807 [INFO][4302] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.809 [INFO][4302] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.812 [INFO][4302] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.817 [INFO][4302] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.817 [INFO][4302] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" host="localhost" Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.817 [INFO][4302] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:09:48.837370 env[1216]: 2025-11-01 00:09:48.817 [INFO][4302] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" HandleID="k8s-pod-network.82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.838044 env[1216]: 2025-11-01 00:09:48.820 [INFO][4287] cni-plugin/k8s.go 418: Populated endpoint ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Namespace="kube-system" Pod="coredns-674b8bbfcf-2w9cl" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"b3ea4af2-3f43-4e61-9bdd-5f447d355048", ResourceVersion:"1114", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-2w9cl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4fff98042ea", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:48.838044 env[1216]: 2025-11-01 00:09:48.820 [INFO][4287] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Namespace="kube-system" Pod="coredns-674b8bbfcf-2w9cl" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.838044 env[1216]: 2025-11-01 00:09:48.820 [INFO][4287] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4fff98042ea ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Namespace="kube-system" Pod="coredns-674b8bbfcf-2w9cl" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.838044 env[1216]: 2025-11-01 00:09:48.824 [INFO][4287] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Namespace="kube-system" Pod="coredns-674b8bbfcf-2w9cl" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.838044 env[1216]: 2025-11-01 00:09:48.825 [INFO][4287] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Namespace="kube-system" Pod="coredns-674b8bbfcf-2w9cl" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"b3ea4af2-3f43-4e61-9bdd-5f447d355048", ResourceVersion:"1114", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce", Pod:"coredns-674b8bbfcf-2w9cl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4fff98042ea", MAC:"6a:0f:66:89:8c:76", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:09:48.838044 env[1216]: 2025-11-01 00:09:48.834 [INFO][4287] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce" Namespace="kube-system" Pod="coredns-674b8bbfcf-2w9cl" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:09:48.845000 audit[4329]: NETFILTER_CFG table=filter:127 family=2 entries=52 op=nft_register_chain pid=4329 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:09:48.845000 audit[4329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23892 a0=3 a1=ffffd4bc27b0 a2=0 a3=ffffa0a10fa8 items=0 ppid=3379 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.845000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:09:48.847357 env[1216]: time="2025-11-01T00:09:48.846967468Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:09:48.847357 env[1216]: time="2025-11-01T00:09:48.847332647Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:09:48.847475 env[1216]: time="2025-11-01T00:09:48.847446653Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:09:48.851417 env[1216]: time="2025-11-01T00:09:48.847674984Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce pid=4328 runtime=io.containerd.runc.v2 Nov 1 00:09:48.859892 systemd[1]: Started cri-containerd-82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce.scope. Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.876000 audit: BPF prog-id=196 op=LOAD Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4328 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832663436393833616535373233613163353264636630353233656539 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4328 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832663436393833616535373233613163353264636630353233656539 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit: BPF prog-id=197 op=LOAD Nov 1 00:09:48.877000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4328 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832663436393833616535373233613163353264636630353233656539 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit: BPF prog-id=198 op=LOAD Nov 1 00:09:48.877000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4328 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832663436393833616535373233613163353264636630353233656539 Nov 1 00:09:48.877000 audit: BPF prog-id=198 op=UNLOAD Nov 1 00:09:48.877000 audit: BPF prog-id=197 op=UNLOAD Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.877000 audit: BPF prog-id=199 op=LOAD Nov 1 00:09:48.877000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4328 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832663436393833616535373233613163353264636630353233656539 Nov 1 00:09:48.879958 systemd-resolved[1167]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Nov 1 00:09:48.896646 env[1216]: time="2025-11-01T00:09:48.896575145Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-2w9cl,Uid:b3ea4af2-3f43-4e61-9bdd-5f447d355048,Namespace:kube-system,Attempt:1,} returns sandbox id \"82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce\"" Nov 1 00:09:48.897336 kubelet[1971]: E1101 00:09:48.897307 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:48.903073 env[1216]: time="2025-11-01T00:09:48.902971395Z" level=info msg="CreateContainer within sandbox \"82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:09:48.915897 env[1216]: time="2025-11-01T00:09:48.915846299Z" level=info msg="CreateContainer within sandbox \"82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"91611d91cafd33c2b6f4fc1a6eba9c18d1597c6c3b2a5ce2504d827bdf6a5ab4\"" Nov 1 00:09:48.916332 env[1216]: time="2025-11-01T00:09:48.916278921Z" level=info msg="StartContainer for \"91611d91cafd33c2b6f4fc1a6eba9c18d1597c6c3b2a5ce2504d827bdf6a5ab4\"" Nov 1 00:09:48.934743 systemd[1]: Started cri-containerd-91611d91cafd33c2b6f4fc1a6eba9c18d1597c6c3b2a5ce2504d827bdf6a5ab4.scope. Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.957138 kernel: kauditd_printk_skb: 511 callbacks suppressed Nov 1 00:09:48.957200 kernel: audit: type=1400 audit(1761955788.955:1331): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962475 kernel: audit: type=1400 audit(1761955788.955:1332): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962573 kernel: audit: type=1400 audit(1761955788.955:1333): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.965291 kernel: audit: type=1400 audit(1761955788.955:1334): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.971957 kernel: audit: type=1400 audit(1761955788.955:1335): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.972029 kernel: audit: type=1400 audit(1761955788.955:1336): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.977731 kernel: audit: type=1400 audit(1761955788.955:1337): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.977831 kernel: audit: type=1400 audit(1761955788.955:1338): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.983386 kernel: audit: type=1400 audit(1761955788.955:1339): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.983447 kernel: audit: type=1400 audit(1761955788.955:1340): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.955000 audit: BPF prog-id=200 op=LOAD Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4328 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931363131643931636166643333633262366634666331613665626139 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4328 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931363131643931636166643333633262366634666331613665626139 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.956000 audit: BPF prog-id=201 op=LOAD Nov 1 00:09:48.956000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4328 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931363131643931636166643333633262366634666331613665626139 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.958000 audit: BPF prog-id=202 op=LOAD Nov 1 00:09:48.958000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4328 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931363131643931636166643333633262366634666331613665626139 Nov 1 00:09:48.961000 audit: BPF prog-id=202 op=UNLOAD Nov 1 00:09:48.961000 audit: BPF prog-id=201 op=UNLOAD Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:09:48.962000 audit: BPF prog-id=203 op=LOAD Nov 1 00:09:48.962000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4328 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:48.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931363131643931636166643333633262366634666331613665626139 Nov 1 00:09:48.999009 env[1216]: time="2025-11-01T00:09:48.998950704Z" level=info msg="StartContainer for \"91611d91cafd33c2b6f4fc1a6eba9c18d1597c6c3b2a5ce2504d827bdf6a5ab4\" returns successfully" Nov 1 00:09:49.012000 audit[4383]: AVC avc: denied { getattr } for pid=4383 comm="coredns" path="cgroup:[4026532261]" dev="nsfs" ino=4026532261 scontext=system_u:system_r:svirt_lxc_net_t:s0:c127,c188 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:09:49.012000 audit[4383]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400019ec18 a2=4000186578 a3=0 items=0 ppid=4328 pid=4383 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c127,c188 key=(null) Nov 1 00:09:49.012000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:09:49.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.24:22-10.0.0.1:41882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:49.424902 systemd[1]: Started sshd@8-10.0.0.24:22-10.0.0.1:41882.service. Nov 1 00:09:49.468000 audit[4410]: USER_ACCT pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:49.469329 sshd[4410]: Accepted publickey for core from 10.0.0.1 port 41882 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:09:49.469000 audit[4410]: CRED_ACQ pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:49.469000 audit[4410]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0bd7ca0 a2=3 a3=1 items=0 ppid=1 pid=4410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:49.469000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:09:49.470669 sshd[4410]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:09:49.474024 systemd-logind[1206]: New session 9 of user core. Nov 1 00:09:49.475512 systemd[1]: Started session-9.scope. Nov 1 00:09:49.478000 audit[4410]: USER_START pid=4410 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:49.479000 audit[4412]: CRED_ACQ pid=4412 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:49.640288 sshd[4410]: pam_unix(sshd:session): session closed for user core Nov 1 00:09:49.640000 audit[4410]: USER_END pid=4410 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:49.640000 audit[4410]: CRED_DISP pid=4410 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:49.643228 systemd[1]: sshd@8-10.0.0.24:22-10.0.0.1:41882.service: Deactivated successfully. Nov 1 00:09:49.644018 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:09:49.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.24:22-10.0.0.1:41882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:49.644834 systemd-logind[1206]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:09:49.645531 systemd-logind[1206]: Removed session 9. Nov 1 00:09:49.797790 kubelet[1971]: E1101 00:09:49.797669 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:49.822529 kubelet[1971]: I1101 00:09:49.822458 1971 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-2w9cl" podStartSLOduration=41.822440309 podStartE2EDuration="41.822440309s" podCreationTimestamp="2025-11-01 00:09:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:09:49.810681194 +0000 UTC m=+48.283090648" watchObservedRunningTime="2025-11-01 00:09:49.822440309 +0000 UTC m=+48.294849763" Nov 1 00:09:49.822000 audit[4427]: NETFILTER_CFG table=filter:128 family=2 entries=14 op=nft_register_rule pid=4427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:49.822000 audit[4427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd3951690 a2=0 a3=1 items=0 ppid=2087 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:49.822000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:49.828000 audit[4427]: NETFILTER_CFG table=nat:129 family=2 entries=44 op=nft_register_rule pid=4427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:49.828000 audit[4427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffd3951690 a2=0 a3=1 items=0 ppid=2087 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:49.828000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:49.872000 audit[4429]: NETFILTER_CFG table=filter:130 family=2 entries=14 op=nft_register_rule pid=4429 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:49.872000 audit[4429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd7b51ea0 a2=0 a3=1 items=0 ppid=2087 pid=4429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:49.872000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:49.889000 audit[4429]: NETFILTER_CFG table=nat:131 family=2 entries=56 op=nft_register_chain pid=4429 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:09:49.889000 audit[4429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffd7b51ea0 a2=0 a3=1 items=0 ppid=2087 pid=4429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:49.889000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:09:50.000114 kubelet[1971]: I1101 00:09:50.000083 1971 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:09:50.000498 kubelet[1971]: E1101 00:09:50.000484 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:50.620643 env[1216]: time="2025-11-01T00:09:50.620602806Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:09:50.799201 kubelet[1971]: E1101 00:09:50.799167 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:50.799627 kubelet[1971]: E1101 00:09:50.799602 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:50.829069 systemd-networkd[1051]: cali4fff98042ea: Gained IPv6LL Nov 1 00:09:50.830054 env[1216]: time="2025-11-01T00:09:50.830005182Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:50.830989 env[1216]: time="2025-11-01T00:09:50.830928348Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:09:50.831187 kubelet[1971]: E1101 00:09:50.831153 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:09:50.831264 kubelet[1971]: E1101 00:09:50.831199 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:09:50.831345 kubelet[1971]: E1101 00:09:50.831308 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6e1600b6928a47bb8896eff55c1c6244,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-ffkml,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fd9f657f7-z4zxl_calico-system(bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:50.833194 env[1216]: time="2025-11-01T00:09:50.833150818Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:09:51.036029 env[1216]: time="2025-11-01T00:09:51.035904434Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:51.037026 env[1216]: time="2025-11-01T00:09:51.036970446Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:09:51.037219 kubelet[1971]: E1101 00:09:51.037180 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:09:51.037278 kubelet[1971]: E1101 00:09:51.037231 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:09:51.037410 kubelet[1971]: E1101 00:09:51.037366 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ffkml,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fd9f657f7-z4zxl_calico-system(bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:51.038638 kubelet[1971]: E1101 00:09:51.038588 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fd9f657f7-z4zxl" podUID="bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f" Nov 1 00:09:51.803180 kubelet[1971]: E1101 00:09:51.803145 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:09:54.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.24:22-10.0.0.1:41896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:54.644248 systemd[1]: Started sshd@9-10.0.0.24:22-10.0.0.1:41896.service. Nov 1 00:09:54.645237 kernel: kauditd_printk_skb: 73 callbacks suppressed Nov 1 00:09:54.645311 kernel: audit: type=1130 audit(1761955794.643:1363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.24:22-10.0.0.1:41896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:54.686000 audit[4478]: USER_ACCT pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.687235 sshd[4478]: Accepted publickey for core from 10.0.0.1 port 41896 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:09:54.688438 sshd[4478]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:09:54.687000 audit[4478]: CRED_ACQ pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.693916 kernel: audit: type=1101 audit(1761955794.686:1364): pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.693991 kernel: audit: type=1103 audit(1761955794.687:1365): pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.694021 kernel: audit: type=1006 audit(1761955794.687:1366): pid=4478 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:09:54.695013 systemd-logind[1206]: New session 10 of user core. Nov 1 00:09:54.696251 kernel: audit: type=1300 audit(1761955794.687:1366): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7f4c9a0 a2=3 a3=1 items=0 ppid=1 pid=4478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:54.687000 audit[4478]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7f4c9a0 a2=3 a3=1 items=0 ppid=1 pid=4478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:54.695358 systemd[1]: Started session-10.scope. Nov 1 00:09:54.699657 kernel: audit: type=1327 audit(1761955794.687:1366): proctitle=737368643A20636F7265205B707269765D Nov 1 00:09:54.687000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:09:54.702000 audit[4478]: USER_START pid=4478 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.703000 audit[4480]: CRED_ACQ pid=4480 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.710841 kernel: audit: type=1105 audit(1761955794.702:1367): pid=4478 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.710915 kernel: audit: type=1103 audit(1761955794.703:1368): pid=4480 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.820259 sshd[4478]: pam_unix(sshd:session): session closed for user core Nov 1 00:09:54.828340 kernel: audit: type=1106 audit(1761955794.820:1369): pid=4478 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.828441 kernel: audit: type=1104 audit(1761955794.820:1370): pid=4478 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.820000 audit[4478]: USER_END pid=4478 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.820000 audit[4478]: CRED_DISP pid=4478 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.823422 systemd[1]: Started sshd@10-10.0.0.24:22-10.0.0.1:41906.service. Nov 1 00:09:54.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.24:22-10.0.0.1:41906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:54.829937 systemd-logind[1206]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:09:54.830140 systemd[1]: sshd@9-10.0.0.24:22-10.0.0.1:41896.service: Deactivated successfully. Nov 1 00:09:54.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.24:22-10.0.0.1:41896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:54.830964 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:09:54.831670 systemd-logind[1206]: Removed session 10. Nov 1 00:09:54.863000 audit[4491]: USER_ACCT pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.864657 sshd[4491]: Accepted publickey for core from 10.0.0.1 port 41906 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:09:54.864000 audit[4491]: CRED_ACQ pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.864000 audit[4491]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5f7e710 a2=3 a3=1 items=0 ppid=1 pid=4491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:54.864000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:09:54.865884 sshd[4491]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:09:54.869208 systemd-logind[1206]: New session 11 of user core. Nov 1 00:09:54.870123 systemd[1]: Started session-11.scope. Nov 1 00:09:54.873000 audit[4491]: USER_START pid=4491 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:54.874000 audit[4494]: CRED_ACQ pid=4494 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.041975 sshd[4491]: pam_unix(sshd:session): session closed for user core Nov 1 00:09:55.045071 systemd[1]: Started sshd@11-10.0.0.24:22-10.0.0.1:41916.service. Nov 1 00:09:55.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.24:22-10.0.0.1:41916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:55.047000 audit[4491]: USER_END pid=4491 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.048000 audit[4491]: CRED_DISP pid=4491 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.056937 systemd-logind[1206]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:09:55.057189 systemd[1]: sshd@10-10.0.0.24:22-10.0.0.1:41906.service: Deactivated successfully. Nov 1 00:09:55.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.24:22-10.0.0.1:41906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:55.058351 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:09:55.059248 systemd-logind[1206]: Removed session 11. Nov 1 00:09:55.093000 audit[4503]: USER_ACCT pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.094259 sshd[4503]: Accepted publickey for core from 10.0.0.1 port 41916 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:09:55.094000 audit[4503]: CRED_ACQ pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.094000 audit[4503]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6eaa8f0 a2=3 a3=1 items=0 ppid=1 pid=4503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:09:55.094000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:09:55.096041 sshd[4503]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:09:55.099637 systemd-logind[1206]: New session 12 of user core. Nov 1 00:09:55.100582 systemd[1]: Started session-12.scope. Nov 1 00:09:55.104000 audit[4503]: USER_START pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.105000 audit[4506]: CRED_ACQ pid=4506 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.224633 sshd[4503]: pam_unix(sshd:session): session closed for user core Nov 1 00:09:55.224000 audit[4503]: USER_END pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.225000 audit[4503]: CRED_DISP pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:09:55.227671 systemd[1]: sshd@11-10.0.0.24:22-10.0.0.1:41916.service: Deactivated successfully. Nov 1 00:09:55.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.24:22-10.0.0.1:41916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:09:55.228590 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:09:55.229169 systemd-logind[1206]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:09:55.229955 systemd-logind[1206]: Removed session 12. Nov 1 00:09:56.620417 env[1216]: time="2025-11-01T00:09:56.620069162Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:09:56.840917 env[1216]: time="2025-11-01T00:09:56.840858648Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:56.841930 env[1216]: time="2025-11-01T00:09:56.841875334Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:09:56.842157 kubelet[1971]: E1101 00:09:56.842118 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:09:56.842473 kubelet[1971]: E1101 00:09:56.842166 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:09:56.842923 kubelet[1971]: E1101 00:09:56.842865 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2mwdn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6495f5c798-dgqbz_calico-apiserver(9d3532b8-6e07-462d-911f-721c28e34778): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:56.845927 kubelet[1971]: E1101 00:09:56.845849 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:09:59.142000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:59.142000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:59.142000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012bc7e0 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:59.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:59.142000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400198c9f0 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:09:59.142000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:09:59.147000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:59.147000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:59.147000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=401173a900 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:09:59.147000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:09:59.147000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=4011820a80 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:09:59.147000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:09:59.147000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:59.147000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4010ec3be0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:09:59.147000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:09:59.162000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:59.162000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=4011820ae0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:09:59.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:09:59.162000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:59.162000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=401173aa80 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:09:59.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:09:59.162000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:09:59.162000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4010ec3c00 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c427,c867 key=(null) Nov 1 00:09:59.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Nov 1 00:09:59.628793 env[1216]: time="2025-11-01T00:09:59.628744387Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:09:59.842250 env[1216]: time="2025-11-01T00:09:59.842192523Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:09:59.843487 env[1216]: time="2025-11-01T00:09:59.843430017Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:09:59.843985 kubelet[1971]: E1101 00:09:59.843707 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:09:59.843985 kubelet[1971]: E1101 00:09:59.843749 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:09:59.843985 kubelet[1971]: E1101 00:09:59.843888 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hzflm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d2762_calico-system(ee73499a-4c7c-4cc1-87d2-26b81ea29f19): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:09:59.847974 env[1216]: time="2025-11-01T00:09:59.847565959Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:10:00.050154 env[1216]: time="2025-11-01T00:10:00.049843061Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:00.052294 env[1216]: time="2025-11-01T00:10:00.051798426Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:10:00.052378 kubelet[1971]: E1101 00:10:00.052020 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:10:00.052378 kubelet[1971]: E1101 00:10:00.052070 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:10:00.052378 kubelet[1971]: E1101 00:10:00.052190 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hzflm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d2762_calico-system(ee73499a-4c7c-4cc1-87d2-26b81ea29f19): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:00.053498 kubelet[1971]: E1101 00:10:00.053449 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:10:00.229255 systemd[1]: Started sshd@12-10.0.0.24:22-10.0.0.1:44578.service. Nov 1 00:10:00.231312 kernel: kauditd_printk_skb: 47 callbacks suppressed Nov 1 00:10:00.231353 kernel: audit: type=1130 audit(1761955800.228:1398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.24:22-10.0.0.1:44578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:00.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.24:22-10.0.0.1:44578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:00.277499 sshd[4532]: Accepted publickey for core from 10.0.0.1 port 44578 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:00.276000 audit[4532]: USER_ACCT pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.281792 sshd[4532]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:00.280000 audit[4532]: CRED_ACQ pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.286679 kernel: audit: type=1101 audit(1761955800.276:1399): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.286758 kernel: audit: type=1103 audit(1761955800.280:1400): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.287319 systemd-logind[1206]: New session 13 of user core. Nov 1 00:10:00.288479 systemd[1]: Started session-13.scope. Nov 1 00:10:00.291832 kernel: audit: type=1006 audit(1761955800.280:1401): pid=4532 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Nov 1 00:10:00.291902 kernel: audit: type=1300 audit(1761955800.280:1401): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc874f710 a2=3 a3=1 items=0 ppid=1 pid=4532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:00.280000 audit[4532]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc874f710 a2=3 a3=1 items=0 ppid=1 pid=4532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:00.280000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:00.301282 kernel: audit: type=1327 audit(1761955800.280:1401): proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:00.301330 kernel: audit: type=1105 audit(1761955800.293:1402): pid=4532 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.293000 audit[4532]: USER_START pid=4532 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.293000 audit[4534]: CRED_ACQ pid=4534 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.310680 kernel: audit: type=1103 audit(1761955800.293:1403): pid=4534 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.412441 sshd[4532]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:00.412000 audit[4532]: USER_END pid=4532 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.415612 systemd[1]: sshd@12-10.0.0.24:22-10.0.0.1:44578.service: Deactivated successfully. Nov 1 00:10:00.416472 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:10:00.413000 audit[4532]: CRED_DISP pid=4532 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.418340 systemd-logind[1206]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:10:00.421542 kernel: audit: type=1106 audit(1761955800.412:1404): pid=4532 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.421613 kernel: audit: type=1104 audit(1761955800.413:1405): pid=4532 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:00.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.24:22-10.0.0.1:44578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:00.422144 systemd-logind[1206]: Removed session 13. Nov 1 00:10:00.621253 env[1216]: time="2025-11-01T00:10:00.621173653Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:10:00.835895 env[1216]: time="2025-11-01T00:10:00.835843983Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:00.837053 env[1216]: time="2025-11-01T00:10:00.837015074Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:10:00.837218 kubelet[1971]: E1101 00:10:00.837179 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:10:00.839031 kubelet[1971]: E1101 00:10:00.837219 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:10:00.839031 kubelet[1971]: E1101 00:10:00.837470 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dzmqg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-6c7694554f-flcbv_calico-system(d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:00.839031 kubelet[1971]: E1101 00:10:00.838804 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7" Nov 1 00:10:00.839296 env[1216]: time="2025-11-01T00:10:00.837429932Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:10:01.054581 env[1216]: time="2025-11-01T00:10:01.054385539Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:01.056006 env[1216]: time="2025-11-01T00:10:01.055926765Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:10:01.056348 kubelet[1971]: E1101 00:10:01.056285 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:10:01.056584 kubelet[1971]: E1101 00:10:01.056360 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:10:01.056613 kubelet[1971]: E1101 00:10:01.056565 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lcnv5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6495f5c798-mfzv5_calico-apiserver(f76eed17-611d-4863-927b-c02c54186a3e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:01.057919 kubelet[1971]: E1101 00:10:01.057886 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" podUID="f76eed17-611d-4863-927b-c02c54186a3e" Nov 1 00:10:01.613721 env[1216]: time="2025-11-01T00:10:01.613671365Z" level=info msg="StopPodSandbox for \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\"" Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.662 [WARNING][4554] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0", GenerateName:"calico-apiserver-6495f5c798-", Namespace:"calico-apiserver", SelfLink:"", UID:"9d3532b8-6e07-462d-911f-721c28e34778", ResourceVersion:"1056", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6495f5c798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0", Pod:"calico-apiserver-6495f5c798-dgqbz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5bc6d8ed742", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.663 [INFO][4554] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.663 [INFO][4554] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" iface="eth0" netns="" Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.663 [INFO][4554] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.663 [INFO][4554] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.684 [INFO][4565] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.684 [INFO][4565] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.684 [INFO][4565] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.692 [WARNING][4565] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.692 [INFO][4565] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.694 [INFO][4565] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:01.698600 env[1216]: 2025-11-01 00:10:01.696 [INFO][4554] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:10:01.699312 env[1216]: time="2025-11-01T00:10:01.698632781Z" level=info msg="TearDown network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\" successfully" Nov 1 00:10:01.699312 env[1216]: time="2025-11-01T00:10:01.698663142Z" level=info msg="StopPodSandbox for \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\" returns successfully" Nov 1 00:10:01.699861 env[1216]: time="2025-11-01T00:10:01.699833113Z" level=info msg="RemovePodSandbox for \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\"" Nov 1 00:10:01.699908 env[1216]: time="2025-11-01T00:10:01.699872434Z" level=info msg="Forcibly stopping sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\"" Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.733 [WARNING][4583] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0", GenerateName:"calico-apiserver-6495f5c798-", Namespace:"calico-apiserver", SelfLink:"", UID:"9d3532b8-6e07-462d-911f-721c28e34778", ResourceVersion:"1056", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6495f5c798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"87c0751db961834be532327864f41416d2c7ce0b683ce5b4614b4c28164b94d0", Pod:"calico-apiserver-6495f5c798-dgqbz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5bc6d8ed742", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.734 [INFO][4583] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.734 [INFO][4583] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" iface="eth0" netns="" Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.734 [INFO][4583] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.734 [INFO][4583] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.751 [INFO][4592] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.752 [INFO][4592] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.752 [INFO][4592] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.761 [WARNING][4592] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.761 [INFO][4592] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" HandleID="k8s-pod-network.4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Workload="localhost-k8s-calico--apiserver--6495f5c798--dgqbz-eth0" Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.763 [INFO][4592] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:01.767910 env[1216]: 2025-11-01 00:10:01.766 [INFO][4583] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55" Nov 1 00:10:01.768357 env[1216]: time="2025-11-01T00:10:01.767930883Z" level=info msg="TearDown network for sandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\" successfully" Nov 1 00:10:01.772833 env[1216]: time="2025-11-01T00:10:01.772204227Z" level=info msg="RemovePodSandbox \"4dee14f89f1494e02d01092217cc740c6308aef0ecbde20bd2d48cc8e11a7c55\" returns successfully" Nov 1 00:10:01.773807 env[1216]: time="2025-11-01T00:10:01.773171988Z" level=info msg="StopPodSandbox for \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\"" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.811 [WARNING][4611] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" WorkloadEndpoint="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.811 [INFO][4611] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.811 [INFO][4611] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" iface="eth0" netns="" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.811 [INFO][4611] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.811 [INFO][4611] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.833 [INFO][4620] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.833 [INFO][4620] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.833 [INFO][4620] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.842 [WARNING][4620] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.842 [INFO][4620] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.844 [INFO][4620] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:01.847346 env[1216]: 2025-11-01 00:10:01.845 [INFO][4611] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:10:01.847984 env[1216]: time="2025-11-01T00:10:01.847372621Z" level=info msg="TearDown network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\" successfully" Nov 1 00:10:01.847984 env[1216]: time="2025-11-01T00:10:01.847399422Z" level=info msg="StopPodSandbox for \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\" returns successfully" Nov 1 00:10:01.848218 env[1216]: time="2025-11-01T00:10:01.848145215Z" level=info msg="RemovePodSandbox for \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\"" Nov 1 00:10:01.848355 env[1216]: time="2025-11-01T00:10:01.848316582Z" level=info msg="Forcibly stopping sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\"" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.880 [WARNING][4637] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" WorkloadEndpoint="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.880 [INFO][4637] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.880 [INFO][4637] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" iface="eth0" netns="" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.880 [INFO][4637] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.880 [INFO][4637] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.898 [INFO][4646] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.898 [INFO][4646] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.898 [INFO][4646] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.907 [WARNING][4646] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.908 [INFO][4646] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" HandleID="k8s-pod-network.9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Workload="localhost-k8s-whisker--7669fdc8cc--qz9w6-eth0" Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.909 [INFO][4646] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:01.912830 env[1216]: 2025-11-01 00:10:01.911 [INFO][4637] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c" Nov 1 00:10:01.912830 env[1216]: time="2025-11-01T00:10:01.912809637Z" level=info msg="TearDown network for sandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\" successfully" Nov 1 00:10:01.921337 env[1216]: time="2025-11-01T00:10:01.921294082Z" level=info msg="RemovePodSandbox \"9ac4b8cfa4a85efa0d1c31156888d3d837dce53c1edc324719911d747335238c\" returns successfully" Nov 1 00:10:01.923913 env[1216]: time="2025-11-01T00:10:01.923882474Z" level=info msg="StopPodSandbox for \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\"" Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.955 [WARNING][4664] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--67g77-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"85742704-5ab5-4b30-87fe-a0db1b4cb53b", ResourceVersion:"1122", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045", Pod:"goldmane-666569f655-67g77", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali2e18a556cda", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.955 [INFO][4664] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.955 [INFO][4664] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" iface="eth0" netns="" Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.955 [INFO][4664] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.955 [INFO][4664] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.973 [INFO][4674] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.973 [INFO][4674] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.973 [INFO][4674] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.982 [WARNING][4674] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.982 [INFO][4674] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.984 [INFO][4674] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:01.987862 env[1216]: 2025-11-01 00:10:01.985 [INFO][4664] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:10:01.988373 env[1216]: time="2025-11-01T00:10:01.988340247Z" level=info msg="TearDown network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\" successfully" Nov 1 00:10:01.988443 env[1216]: time="2025-11-01T00:10:01.988426811Z" level=info msg="StopPodSandbox for \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\" returns successfully" Nov 1 00:10:01.988922 env[1216]: time="2025-11-01T00:10:01.988897071Z" level=info msg="RemovePodSandbox for \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\"" Nov 1 00:10:01.988991 env[1216]: time="2025-11-01T00:10:01.988945433Z" level=info msg="Forcibly stopping sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\"" Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.019 [WARNING][4691] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--67g77-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"85742704-5ab5-4b30-87fe-a0db1b4cb53b", ResourceVersion:"1122", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1a22ab00ce78e9a518b2c7eecbdf5f32bf7b4888ac77cdbc0a686061e8021045", Pod:"goldmane-666569f655-67g77", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali2e18a556cda", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.019 [INFO][4691] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.020 [INFO][4691] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" iface="eth0" netns="" Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.020 [INFO][4691] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.020 [INFO][4691] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.037 [INFO][4700] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.037 [INFO][4700] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.037 [INFO][4700] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.047 [WARNING][4700] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.047 [INFO][4700] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" HandleID="k8s-pod-network.c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Workload="localhost-k8s-goldmane--666569f655--67g77-eth0" Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.049 [INFO][4700] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.052697 env[1216]: 2025-11-01 00:10:02.050 [INFO][4691] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7" Nov 1 00:10:02.053275 env[1216]: time="2025-11-01T00:10:02.053242379Z" level=info msg="TearDown network for sandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\" successfully" Nov 1 00:10:02.056243 env[1216]: time="2025-11-01T00:10:02.056210985Z" level=info msg="RemovePodSandbox \"c90360eb7a334577875045a78dc5571046c90beb7db0e0e0d730cd43bc0042a7\" returns successfully" Nov 1 00:10:02.056828 env[1216]: time="2025-11-01T00:10:02.056800330Z" level=info msg="StopPodSandbox for \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\"" Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.088 [WARNING][4718] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0", GenerateName:"calico-kube-controllers-6c7694554f-", Namespace:"calico-system", SelfLink:"", UID:"d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7", ResourceVersion:"1078", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c7694554f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276", Pod:"calico-kube-controllers-6c7694554f-flcbv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliaee3f49fc1c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.088 [INFO][4718] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.088 [INFO][4718] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" iface="eth0" netns="" Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.088 [INFO][4718] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.088 [INFO][4718] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.107 [INFO][4727] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.107 [INFO][4727] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.107 [INFO][4727] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.116 [WARNING][4727] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.116 [INFO][4727] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.118 [INFO][4727] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.121190 env[1216]: 2025-11-01 00:10:02.119 [INFO][4718] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:10:02.121684 env[1216]: time="2025-11-01T00:10:02.121219796Z" level=info msg="TearDown network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\" successfully" Nov 1 00:10:02.121684 env[1216]: time="2025-11-01T00:10:02.121247518Z" level=info msg="StopPodSandbox for \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\" returns successfully" Nov 1 00:10:02.122162 env[1216]: time="2025-11-01T00:10:02.122135475Z" level=info msg="RemovePodSandbox for \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\"" Nov 1 00:10:02.122231 env[1216]: time="2025-11-01T00:10:02.122170597Z" level=info msg="Forcibly stopping sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\"" Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.152 [WARNING][4745] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0", GenerateName:"calico-kube-controllers-6c7694554f-", Namespace:"calico-system", SelfLink:"", UID:"d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7", ResourceVersion:"1078", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c7694554f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ba573bbba20b831469292e42df27536732068a663c584376d4d5ad8ccc8df276", Pod:"calico-kube-controllers-6c7694554f-flcbv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliaee3f49fc1c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.152 [INFO][4745] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.152 [INFO][4745] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" iface="eth0" netns="" Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.152 [INFO][4745] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.152 [INFO][4745] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.171 [INFO][4754] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.171 [INFO][4754] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.171 [INFO][4754] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.180 [WARNING][4754] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.180 [INFO][4754] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" HandleID="k8s-pod-network.e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Workload="localhost-k8s-calico--kube--controllers--6c7694554f--flcbv-eth0" Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.181 [INFO][4754] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.185815 env[1216]: 2025-11-01 00:10:02.183 [INFO][4745] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e" Nov 1 00:10:02.185815 env[1216]: time="2025-11-01T00:10:02.185794509Z" level=info msg="TearDown network for sandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\" successfully" Nov 1 00:10:02.190043 env[1216]: time="2025-11-01T00:10:02.189983207Z" level=info msg="RemovePodSandbox \"e3f922dce4e665d40a434b06e8c55e1e29df58448a18dea32feea3ea52e7a51e\" returns successfully" Nov 1 00:10:02.190543 env[1216]: time="2025-11-01T00:10:02.190517270Z" level=info msg="StopPodSandbox for \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\"" Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.223 [WARNING][4771] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"732d3bd5-025e-4ee3-9cd6-d34425f82a66", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad", Pod:"coredns-674b8bbfcf-j5k5b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali99adefccde1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.223 [INFO][4771] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.223 [INFO][4771] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" iface="eth0" netns="" Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.223 [INFO][4771] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.223 [INFO][4771] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.239 [INFO][4780] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.239 [INFO][4780] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.239 [INFO][4780] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.249 [WARNING][4780] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.250 [INFO][4780] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.251 [INFO][4780] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.254700 env[1216]: 2025-11-01 00:10:02.252 [INFO][4771] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:10:02.255151 env[1216]: time="2025-11-01T00:10:02.254727407Z" level=info msg="TearDown network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\" successfully" Nov 1 00:10:02.255151 env[1216]: time="2025-11-01T00:10:02.254755968Z" level=info msg="StopPodSandbox for \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\" returns successfully" Nov 1 00:10:02.255238 env[1216]: time="2025-11-01T00:10:02.255193187Z" level=info msg="RemovePodSandbox for \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\"" Nov 1 00:10:02.255346 env[1216]: time="2025-11-01T00:10:02.255230629Z" level=info msg="Forcibly stopping sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\"" Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.286 [WARNING][4797] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"732d3bd5-025e-4ee3-9cd6-d34425f82a66", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"84e9c7f94bed3bb66778545b0e7fc9de8f43186ecb45f4eec9eea7962d6d9cad", Pod:"coredns-674b8bbfcf-j5k5b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali99adefccde1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.287 [INFO][4797] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.287 [INFO][4797] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" iface="eth0" netns="" Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.287 [INFO][4797] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.287 [INFO][4797] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.310 [INFO][4806] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.310 [INFO][4806] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.310 [INFO][4806] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.319 [WARNING][4806] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.320 [INFO][4806] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" HandleID="k8s-pod-network.b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Workload="localhost-k8s-coredns--674b8bbfcf--j5k5b-eth0" Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.321 [INFO][4806] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.325035 env[1216]: 2025-11-01 00:10:02.323 [INFO][4797] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf" Nov 1 00:10:02.325564 env[1216]: time="2025-11-01T00:10:02.325529105Z" level=info msg="TearDown network for sandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\" successfully" Nov 1 00:10:02.332165 env[1216]: time="2025-11-01T00:10:02.332122986Z" level=info msg="RemovePodSandbox \"b4ce0fa7b1b513c16aae92f35b086347b82de3ca1ad0b824eac72cf03be9fbcf\" returns successfully" Nov 1 00:10:02.332685 env[1216]: time="2025-11-01T00:10:02.332662449Z" level=info msg="StopPodSandbox for \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\"" Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.364 [WARNING][4824] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--d2762-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ee73499a-4c7c-4cc1-87d2-26b81ea29f19", ResourceVersion:"1083", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa", Pod:"csi-node-driver-d2762", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali357c908c72e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.364 [INFO][4824] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.364 [INFO][4824] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" iface="eth0" netns="" Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.364 [INFO][4824] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.364 [INFO][4824] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.382 [INFO][4833] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.382 [INFO][4833] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.382 [INFO][4833] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.390 [WARNING][4833] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.391 [INFO][4833] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.392 [INFO][4833] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.397363 env[1216]: 2025-11-01 00:10:02.395 [INFO][4824] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:10:02.397823 env[1216]: time="2025-11-01T00:10:02.397383808Z" level=info msg="TearDown network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\" successfully" Nov 1 00:10:02.397823 env[1216]: time="2025-11-01T00:10:02.397413529Z" level=info msg="StopPodSandbox for \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\" returns successfully" Nov 1 00:10:02.397877 env[1216]: time="2025-11-01T00:10:02.397823627Z" level=info msg="RemovePodSandbox for \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\"" Nov 1 00:10:02.397903 env[1216]: time="2025-11-01T00:10:02.397857468Z" level=info msg="Forcibly stopping sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\"" Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.432 [WARNING][4850] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--d2762-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ee73499a-4c7c-4cc1-87d2-26b81ea29f19", ResourceVersion:"1083", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4eccdbc3ab959f040c1b1a405c0ee1df8a992e7480b4605dfe129d7dbc174dfa", Pod:"csi-node-driver-d2762", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali357c908c72e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.432 [INFO][4850] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.432 [INFO][4850] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" iface="eth0" netns="" Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.432 [INFO][4850] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.432 [INFO][4850] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.448 [INFO][4859] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.448 [INFO][4859] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.449 [INFO][4859] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.457 [WARNING][4859] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.457 [INFO][4859] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" HandleID="k8s-pod-network.f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Workload="localhost-k8s-csi--node--driver--d2762-eth0" Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.459 [INFO][4859] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.463420 env[1216]: 2025-11-01 00:10:02.461 [INFO][4850] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5" Nov 1 00:10:02.463420 env[1216]: time="2025-11-01T00:10:02.463383381Z" level=info msg="TearDown network for sandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\" successfully" Nov 1 00:10:02.466313 env[1216]: time="2025-11-01T00:10:02.466281425Z" level=info msg="RemovePodSandbox \"f06268cb1b848edaeb393646d8ddbb5c71becf81de7526a9cfe776710361b0c5\" returns successfully" Nov 1 00:10:02.466812 env[1216]: time="2025-11-01T00:10:02.466760205Z" level=info msg="StopPodSandbox for \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\"" Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.498 [WARNING][4877] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0", GenerateName:"calico-apiserver-6495f5c798-", Namespace:"calico-apiserver", SelfLink:"", UID:"f76eed17-611d-4863-927b-c02c54186a3e", ResourceVersion:"1107", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6495f5c798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5", Pod:"calico-apiserver-6495f5c798-mfzv5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali38108f4d33a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.498 [INFO][4877] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.498 [INFO][4877] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" iface="eth0" netns="" Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.498 [INFO][4877] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.498 [INFO][4877] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.517 [INFO][4886] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.517 [INFO][4886] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.517 [INFO][4886] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.527 [WARNING][4886] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.527 [INFO][4886] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.529 [INFO][4886] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.533256 env[1216]: 2025-11-01 00:10:02.531 [INFO][4877] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:10:02.533700 env[1216]: time="2025-11-01T00:10:02.533273200Z" level=info msg="TearDown network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\" successfully" Nov 1 00:10:02.533700 env[1216]: time="2025-11-01T00:10:02.533305202Z" level=info msg="StopPodSandbox for \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\" returns successfully" Nov 1 00:10:02.533842 env[1216]: time="2025-11-01T00:10:02.533748060Z" level=info msg="RemovePodSandbox for \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\"" Nov 1 00:10:02.533842 env[1216]: time="2025-11-01T00:10:02.533808823Z" level=info msg="Forcibly stopping sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\"" Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.568 [WARNING][4904] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0", GenerateName:"calico-apiserver-6495f5c798-", Namespace:"calico-apiserver", SelfLink:"", UID:"f76eed17-611d-4863-927b-c02c54186a3e", ResourceVersion:"1107", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6495f5c798", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3886214be42901ce73c46b76261b89bddf740be27698181b95d703b81bc146e5", Pod:"calico-apiserver-6495f5c798-mfzv5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali38108f4d33a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.568 [INFO][4904] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.568 [INFO][4904] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" iface="eth0" netns="" Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.568 [INFO][4904] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.568 [INFO][4904] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.587 [INFO][4913] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.587 [INFO][4913] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.587 [INFO][4913] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.596 [WARNING][4913] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.596 [INFO][4913] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" HandleID="k8s-pod-network.e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Workload="localhost-k8s-calico--apiserver--6495f5c798--mfzv5-eth0" Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.597 [INFO][4913] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.601456 env[1216]: 2025-11-01 00:10:02.599 [INFO][4904] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf" Nov 1 00:10:02.602021 env[1216]: time="2025-11-01T00:10:02.601481308Z" level=info msg="TearDown network for sandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\" successfully" Nov 1 00:10:02.604644 env[1216]: time="2025-11-01T00:10:02.604611601Z" level=info msg="RemovePodSandbox \"e6bd509e37c33bfcfe9d979d1b9c3bd3b6833f2d629ae7a0053d80a79befe7cf\" returns successfully" Nov 1 00:10:02.605130 env[1216]: time="2025-11-01T00:10:02.605090301Z" level=info msg="StopPodSandbox for \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\"" Nov 1 00:10:02.620591 kubelet[1971]: E1101 00:10:02.620548 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fd9f657f7-z4zxl" podUID="bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f" Nov 1 00:10:02.623027 env[1216]: time="2025-11-01T00:10:02.622969624Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.703 [WARNING][4930] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"b3ea4af2-3f43-4e61-9bdd-5f447d355048", ResourceVersion:"1148", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce", Pod:"coredns-674b8bbfcf-2w9cl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4fff98042ea", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.704 [INFO][4930] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.704 [INFO][4930] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" iface="eth0" netns="" Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.704 [INFO][4930] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.704 [INFO][4930] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.721 [INFO][4940] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.721 [INFO][4940] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.721 [INFO][4940] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.729 [WARNING][4940] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.730 [INFO][4940] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.731 [INFO][4940] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.734728 env[1216]: 2025-11-01 00:10:02.733 [INFO][4930] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:10:02.735905 env[1216]: time="2025-11-01T00:10:02.734694786Z" level=info msg="TearDown network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\" successfully" Nov 1 00:10:02.736528 env[1216]: time="2025-11-01T00:10:02.736497743Z" level=info msg="StopPodSandbox for \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\" returns successfully" Nov 1 00:10:02.737019 env[1216]: time="2025-11-01T00:10:02.736995204Z" level=info msg="RemovePodSandbox for \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\"" Nov 1 00:10:02.737208 env[1216]: time="2025-11-01T00:10:02.737163731Z" level=info msg="Forcibly stopping sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\"" Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.769 [WARNING][4957] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"b3ea4af2-3f43-4e61-9bdd-5f447d355048", ResourceVersion:"1148", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 9, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"82f46983ae5723a1c52dcf0523ee9ecea18cb0aab014b9e116dfcd2cfc36f2ce", Pod:"coredns-674b8bbfcf-2w9cl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4fff98042ea", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.770 [INFO][4957] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.770 [INFO][4957] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" iface="eth0" netns="" Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.770 [INFO][4957] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.770 [INFO][4957] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.787 [INFO][4965] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.787 [INFO][4965] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.788 [INFO][4965] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.796 [WARNING][4965] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.796 [INFO][4965] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" HandleID="k8s-pod-network.ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Workload="localhost-k8s-coredns--674b8bbfcf--2w9cl-eth0" Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.797 [INFO][4965] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:10:02.800673 env[1216]: 2025-11-01 00:10:02.799 [INFO][4957] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b" Nov 1 00:10:02.801221 env[1216]: time="2025-11-01T00:10:02.801178020Z" level=info msg="TearDown network for sandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\" successfully" Nov 1 00:10:02.806110 env[1216]: time="2025-11-01T00:10:02.806075908Z" level=info msg="RemovePodSandbox \"ab768179ef999d5c599efda9a4ed29d387b351fac2f8e87aacb969ed84be7e6b\" returns successfully" Nov 1 00:10:02.838505 env[1216]: time="2025-11-01T00:10:02.838475530Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:02.839388 env[1216]: time="2025-11-01T00:10:02.839347167Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:10:02.839535 kubelet[1971]: E1101 00:10:02.839500 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:10:02.839594 kubelet[1971]: E1101 00:10:02.839543 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:10:02.839718 kubelet[1971]: E1101 00:10:02.839669 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wz2vz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-67g77_calico-system(85742704-5ab5-4b30-87fe-a0db1b4cb53b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:02.841226 kubelet[1971]: E1101 00:10:02.841185 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-67g77" podUID="85742704-5ab5-4b30-87fe-a0db1b4cb53b" Nov 1 00:10:05.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.24:22-10.0.0.1:44590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:05.417379 systemd[1]: Started sshd@13-10.0.0.24:22-10.0.0.1:44590.service. Nov 1 00:10:05.418873 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:10:05.418940 kernel: audit: type=1130 audit(1761955805.415:1407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.24:22-10.0.0.1:44590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:05.467000 audit[4974]: USER_ACCT pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.469881 sshd[4974]: Accepted publickey for core from 10.0.0.1 port 44590 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:05.471604 sshd[4974]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:05.469000 audit[4974]: CRED_ACQ pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.477538 systemd-logind[1206]: New session 14 of user core. Nov 1 00:10:05.478278 systemd[1]: Started session-14.scope. Nov 1 00:10:05.480341 kernel: audit: type=1101 audit(1761955805.467:1408): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.480413 kernel: audit: type=1103 audit(1761955805.469:1409): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.480434 kernel: audit: type=1006 audit(1761955805.469:1410): pid=4974 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Nov 1 00:10:05.484505 kernel: audit: type=1300 audit(1761955805.469:1410): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff67f7710 a2=3 a3=1 items=0 ppid=1 pid=4974 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:05.469000 audit[4974]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff67f7710 a2=3 a3=1 items=0 ppid=1 pid=4974 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:05.490200 kernel: audit: type=1327 audit(1761955805.469:1410): proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:05.469000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:05.482000 audit[4974]: USER_START pid=4974 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.498565 kernel: audit: type=1105 audit(1761955805.482:1411): pid=4974 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.498615 kernel: audit: type=1103 audit(1761955805.484:1412): pid=4976 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.484000 audit[4976]: CRED_ACQ pid=4976 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.606561 sshd[4974]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:05.605000 audit[4974]: USER_END pid=4974 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.609054 systemd[1]: sshd@13-10.0.0.24:22-10.0.0.1:44590.service: Deactivated successfully. Nov 1 00:10:05.609947 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:10:05.610505 systemd-logind[1206]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:10:05.611275 systemd-logind[1206]: Removed session 14. Nov 1 00:10:05.605000 audit[4974]: CRED_DISP pid=4974 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.617929 kernel: audit: type=1106 audit(1761955805.605:1413): pid=4974 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.617981 kernel: audit: type=1104 audit(1761955805.605:1414): pid=4974 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:05.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.24:22-10.0.0.1:44590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:06.860000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:10:06.860000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001910a00 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:10:06.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:10:06.860000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:10:06.860000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012bdc60 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:10:06.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:10:06.860000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:10:06.860000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012bdd20 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:10:06.860000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:10:06.861000 audit[1858]: AVC avc: denied { watch } for pid=1858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:10:06.861000 audit[1858]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b7f700 a2=fc6 a3=0 items=0 ppid=1698 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c131 key=(null) Nov 1 00:10:06.861000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:10:09.622850 kubelet[1971]: E1101 00:10:09.622809 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:10:10.611503 systemd[1]: Started sshd@14-10.0.0.24:22-10.0.0.1:43968.service. Nov 1 00:10:10.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.24:22-10.0.0.1:43968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:10.612528 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:10:10.612577 kernel: audit: type=1130 audit(1761955810.609:1420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.24:22-10.0.0.1:43968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:10.653000 audit[4991]: USER_ACCT pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.655067 sshd[4991]: Accepted publickey for core from 10.0.0.1 port 43968 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:10.656000 audit[4991]: CRED_ACQ pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.658828 sshd[4991]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:10.661733 kernel: audit: type=1101 audit(1761955810.653:1421): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.661813 kernel: audit: type=1103 audit(1761955810.656:1422): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.664334 kernel: audit: type=1006 audit(1761955810.656:1423): pid=4991 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:10:10.656000 audit[4991]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe618d6c0 a2=3 a3=1 items=0 ppid=1 pid=4991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:10.668034 kernel: audit: type=1300 audit(1761955810.656:1423): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe618d6c0 a2=3 a3=1 items=0 ppid=1 pid=4991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:10.656000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:10.669352 kernel: audit: type=1327 audit(1761955810.656:1423): proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:10.670709 systemd-logind[1206]: New session 15 of user core. Nov 1 00:10:10.671874 systemd[1]: Started session-15.scope. Nov 1 00:10:10.675000 audit[4991]: USER_START pid=4991 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.680000 audit[4993]: CRED_ACQ pid=4993 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.684703 kernel: audit: type=1105 audit(1761955810.675:1424): pid=4991 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.684761 kernel: audit: type=1103 audit(1761955810.680:1425): pid=4993 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.802896 sshd[4991]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:10.802000 audit[4991]: USER_END pid=4991 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.806000 audit[4991]: CRED_DISP pid=4991 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.809652 systemd-logind[1206]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:10:10.809952 systemd[1]: sshd@14-10.0.0.24:22-10.0.0.1:43968.service: Deactivated successfully. Nov 1 00:10:10.810703 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:10:10.811322 kernel: audit: type=1106 audit(1761955810.802:1426): pid=4991 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.811396 kernel: audit: type=1104 audit(1761955810.806:1427): pid=4991 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:10.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.24:22-10.0.0.1:43968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:10.811525 systemd-logind[1206]: Removed session 15. Nov 1 00:10:11.623598 kubelet[1971]: E1101 00:10:11.623373 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7" Nov 1 00:10:12.621533 kubelet[1971]: E1101 00:10:12.621071 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:10:14.619387 kubelet[1971]: E1101 00:10:14.619350 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:10:15.620414 kubelet[1971]: E1101 00:10:15.620363 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" podUID="f76eed17-611d-4863-927b-c02c54186a3e" Nov 1 00:10:15.807882 systemd[1]: Started sshd@15-10.0.0.24:22-10.0.0.1:43982.service. Nov 1 00:10:15.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.24:22-10.0.0.1:43982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:15.809222 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:10:15.809292 kernel: audit: type=1130 audit(1761955815.807:1429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.24:22-10.0.0.1:43982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:15.852000 audit[5006]: USER_ACCT pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.853373 sshd[5006]: Accepted publickey for core from 10.0.0.1 port 43982 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:15.854999 sshd[5006]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:15.853000 audit[5006]: CRED_ACQ pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.860128 kernel: audit: type=1101 audit(1761955815.852:1430): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.860172 kernel: audit: type=1103 audit(1761955815.853:1431): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.861969 systemd-logind[1206]: New session 16 of user core. Nov 1 00:10:15.862476 kernel: audit: type=1006 audit(1761955815.853:1432): pid=5006 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:10:15.853000 audit[5006]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccc4b1e0 a2=3 a3=1 items=0 ppid=1 pid=5006 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:15.862865 systemd[1]: Started session-16.scope. Nov 1 00:10:15.866210 kernel: audit: type=1300 audit(1761955815.853:1432): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccc4b1e0 a2=3 a3=1 items=0 ppid=1 pid=5006 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:15.866269 kernel: audit: type=1327 audit(1761955815.853:1432): proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:15.853000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:15.865000 audit[5006]: USER_START pid=5006 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.871578 kernel: audit: type=1105 audit(1761955815.865:1433): pid=5006 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.871633 kernel: audit: type=1103 audit(1761955815.867:1434): pid=5008 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.867000 audit[5008]: CRED_ACQ pid=5008 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.991337 sshd[5006]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:15.991000 audit[5006]: USER_END pid=5006 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.995021 systemd[1]: Started sshd@16-10.0.0.24:22-10.0.0.1:43986.service. Nov 1 00:10:15.995626 systemd[1]: sshd@15-10.0.0.24:22-10.0.0.1:43982.service: Deactivated successfully. Nov 1 00:10:15.991000 audit[5006]: CRED_DISP pid=5006 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.996583 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:10:15.997124 systemd-logind[1206]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:10:15.997956 systemd-logind[1206]: Removed session 16. Nov 1 00:10:15.999418 kernel: audit: type=1106 audit(1761955815.991:1435): pid=5006 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.999483 kernel: audit: type=1104 audit(1761955815.991:1436): pid=5006 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:15.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.24:22-10.0.0.1:43986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:15.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.24:22-10.0.0.1:43982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:16.037000 audit[5018]: USER_ACCT pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.038018 sshd[5018]: Accepted publickey for core from 10.0.0.1 port 43986 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:16.037000 audit[5018]: CRED_ACQ pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.038000 audit[5018]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd96cbfa0 a2=3 a3=1 items=0 ppid=1 pid=5018 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:16.038000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:16.039353 sshd[5018]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:16.042730 systemd-logind[1206]: New session 17 of user core. Nov 1 00:10:16.043856 systemd[1]: Started session-17.scope. Nov 1 00:10:16.046000 audit[5018]: USER_START pid=5018 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.047000 audit[5021]: CRED_ACQ pid=5021 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.244954 sshd[5018]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:16.246000 audit[5018]: USER_END pid=5018 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.246000 audit[5018]: CRED_DISP pid=5018 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.250066 systemd[1]: sshd@16-10.0.0.24:22-10.0.0.1:43986.service: Deactivated successfully. Nov 1 00:10:16.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.24:22-10.0.0.1:43986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:16.250915 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:10:16.251595 systemd-logind[1206]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:10:16.252993 systemd[1]: Started sshd@17-10.0.0.24:22-10.0.0.1:43996.service. Nov 1 00:10:16.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.24:22-10.0.0.1:43996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:16.254459 systemd-logind[1206]: Removed session 17. Nov 1 00:10:16.295000 audit[5031]: USER_ACCT pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.297107 sshd[5031]: Accepted publickey for core from 10.0.0.1 port 43996 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:16.296000 audit[5031]: CRED_ACQ pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.296000 audit[5031]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6b114a0 a2=3 a3=1 items=0 ppid=1 pid=5031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:16.296000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:16.298016 sshd[5031]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:16.300990 systemd-logind[1206]: New session 18 of user core. Nov 1 00:10:16.302137 systemd[1]: Started session-18.scope. Nov 1 00:10:16.304000 audit[5031]: USER_START pid=5031 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.305000 audit[5033]: CRED_ACQ pid=5033 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.619545 kubelet[1971]: E1101 00:10:16.619497 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-67g77" podUID="85742704-5ab5-4b30-87fe-a0db1b4cb53b" Nov 1 00:10:16.907000 audit[5046]: NETFILTER_CFG table=filter:132 family=2 entries=26 op=nft_register_rule pid=5046 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:10:16.907000 audit[5046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=fffff0950320 a2=0 a3=1 items=0 ppid=2087 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:16.907000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:10:16.916000 audit[5046]: NETFILTER_CFG table=nat:133 family=2 entries=20 op=nft_register_rule pid=5046 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:10:16.916000 audit[5046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff0950320 a2=0 a3=1 items=0 ppid=2087 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:16.916000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:10:16.920185 sshd[5031]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:16.920000 audit[5031]: USER_END pid=5031 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.920000 audit[5031]: CRED_DISP pid=5031 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.24:22-10.0.0.1:44012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:16.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.24:22-10.0.0.1:43996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:16.924002 systemd[1]: Started sshd@18-10.0.0.24:22-10.0.0.1:44012.service. Nov 1 00:10:16.924568 systemd[1]: sshd@17-10.0.0.24:22-10.0.0.1:43996.service: Deactivated successfully. Nov 1 00:10:16.925480 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:10:16.927043 systemd-logind[1206]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:10:16.927876 systemd-logind[1206]: Removed session 18. Nov 1 00:10:16.936000 audit[5051]: NETFILTER_CFG table=filter:134 family=2 entries=38 op=nft_register_rule pid=5051 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:10:16.936000 audit[5051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffd1e4ca90 a2=0 a3=1 items=0 ppid=2087 pid=5051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:16.936000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:10:16.944000 audit[5051]: NETFILTER_CFG table=nat:135 family=2 entries=20 op=nft_register_rule pid=5051 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:10:16.944000 audit[5051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd1e4ca90 a2=0 a3=1 items=0 ppid=2087 pid=5051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:16.944000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:10:16.965000 audit[5048]: USER_ACCT pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.966454 sshd[5048]: Accepted publickey for core from 10.0.0.1 port 44012 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:16.966000 audit[5048]: CRED_ACQ pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.966000 audit[5048]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce21ee10 a2=3 a3=1 items=0 ppid=1 pid=5048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:16.966000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:16.968146 sshd[5048]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:16.971840 systemd-logind[1206]: New session 19 of user core. Nov 1 00:10:16.972692 systemd[1]: Started session-19.scope. Nov 1 00:10:16.975000 audit[5048]: USER_START pid=5048 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:16.976000 audit[5053]: CRED_ACQ pid=5053 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.236481 systemd[1]: Started sshd@19-10.0.0.24:22-10.0.0.1:44028.service. Nov 1 00:10:17.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.24:22-10.0.0.1:44028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:17.236905 sshd[5048]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:17.239000 audit[5048]: USER_END pid=5048 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.239000 audit[5048]: CRED_DISP pid=5048 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.242215 systemd[1]: sshd@18-10.0.0.24:22-10.0.0.1:44012.service: Deactivated successfully. Nov 1 00:10:17.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.24:22-10.0.0.1:44012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:17.243190 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:10:17.245224 systemd-logind[1206]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:10:17.246108 systemd-logind[1206]: Removed session 19. Nov 1 00:10:17.278000 audit[5061]: USER_ACCT pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.279019 sshd[5061]: Accepted publickey for core from 10.0.0.1 port 44028 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:17.279000 audit[5061]: CRED_ACQ pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.279000 audit[5061]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe496a680 a2=3 a3=1 items=0 ppid=1 pid=5061 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:17.279000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:17.280233 sshd[5061]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:17.283570 systemd-logind[1206]: New session 20 of user core. Nov 1 00:10:17.284595 systemd[1]: Started session-20.scope. Nov 1 00:10:17.287000 audit[5061]: USER_START pid=5061 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.288000 audit[5064]: CRED_ACQ pid=5064 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.409240 sshd[5061]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:17.409000 audit[5061]: USER_END pid=5061 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.409000 audit[5061]: CRED_DISP pid=5061 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:17.412110 systemd[1]: sshd@19-10.0.0.24:22-10.0.0.1:44028.service: Deactivated successfully. Nov 1 00:10:17.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.24:22-10.0.0.1:44028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:17.412979 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:10:17.413545 systemd-logind[1206]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:10:17.414187 systemd-logind[1206]: Removed session 20. Nov 1 00:10:17.620460 env[1216]: time="2025-11-01T00:10:17.620423022Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:10:17.841852 env[1216]: time="2025-11-01T00:10:17.841783576Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:17.842778 env[1216]: time="2025-11-01T00:10:17.842728204Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:10:17.842987 kubelet[1971]: E1101 00:10:17.842933 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:10:17.842987 kubelet[1971]: E1101 00:10:17.842983 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:10:17.843262 kubelet[1971]: E1101 00:10:17.843111 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6e1600b6928a47bb8896eff55c1c6244,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-ffkml,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fd9f657f7-z4zxl_calico-system(bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:17.845376 env[1216]: time="2025-11-01T00:10:17.845349490Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:10:18.057781 env[1216]: time="2025-11-01T00:10:18.057662396Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:18.058558 env[1216]: time="2025-11-01T00:10:18.058521866Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:10:18.058814 kubelet[1971]: E1101 00:10:18.058753 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:10:18.058883 kubelet[1971]: E1101 00:10:18.058826 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:10:18.058971 kubelet[1971]: E1101 00:10:18.058933 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ffkml,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fd9f657f7-z4zxl_calico-system(bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:18.060158 kubelet[1971]: E1101 00:10:18.060078 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fd9f657f7-z4zxl" podUID="bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f" Nov 1 00:10:21.621588 env[1216]: time="2025-11-01T00:10:21.621268368Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:10:21.726000 audit[5105]: NETFILTER_CFG table=filter:136 family=2 entries=26 op=nft_register_rule pid=5105 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:10:21.728474 kernel: kauditd_printk_skb: 57 callbacks suppressed Nov 1 00:10:21.728559 kernel: audit: type=1325 audit(1761955821.726:1478): table=filter:136 family=2 entries=26 op=nft_register_rule pid=5105 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:10:21.730807 kernel: audit: type=1300 audit(1761955821.726:1478): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc0790710 a2=0 a3=1 items=0 ppid=2087 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:21.726000 audit[5105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc0790710 a2=0 a3=1 items=0 ppid=2087 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:21.726000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:10:21.736901 kernel: audit: type=1327 audit(1761955821.726:1478): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:10:21.741000 audit[5105]: NETFILTER_CFG table=nat:137 family=2 entries=104 op=nft_register_chain pid=5105 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:10:21.741000 audit[5105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffc0790710 a2=0 a3=1 items=0 ppid=2087 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:21.748400 kernel: audit: type=1325 audit(1761955821.741:1479): table=nat:137 family=2 entries=104 op=nft_register_chain pid=5105 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:10:21.748441 kernel: audit: type=1300 audit(1761955821.741:1479): arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffc0790710 a2=0 a3=1 items=0 ppid=2087 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:21.748459 kernel: audit: type=1327 audit(1761955821.741:1479): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:10:21.741000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:10:21.825833 env[1216]: time="2025-11-01T00:10:21.825785447Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:21.826796 env[1216]: time="2025-11-01T00:10:21.826743479Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:10:21.826988 kubelet[1971]: E1101 00:10:21.826950 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:10:21.827448 kubelet[1971]: E1101 00:10:21.827249 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:10:21.827448 kubelet[1971]: E1101 00:10:21.827399 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2mwdn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6495f5c798-dgqbz_calico-apiserver(9d3532b8-6e07-462d-911f-721c28e34778): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:21.828579 kubelet[1971]: E1101 00:10:21.828543 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:10:22.415178 systemd[1]: Started sshd@20-10.0.0.24:22-10.0.0.1:50134.service. Nov 1 00:10:22.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.24:22-10.0.0.1:50134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:22.423621 kernel: audit: type=1130 audit(1761955822.415:1480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.24:22-10.0.0.1:50134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:22.463000 audit[5107]: USER_ACCT pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:22.465477 sshd[5107]: Accepted publickey for core from 10.0.0.1 port 50134 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:22.465835 sshd[5107]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:22.464000 audit[5107]: CRED_ACQ pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:22.475003 kernel: audit: type=1101 audit(1761955822.463:1481): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:22.475052 kernel: audit: type=1103 audit(1761955822.464:1482): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:22.479175 kernel: audit: type=1006 audit(1761955822.464:1483): pid=5107 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Nov 1 00:10:22.464000 audit[5107]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe10c62e0 a2=3 a3=1 items=0 ppid=1 pid=5107 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:22.464000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:22.481005 systemd-logind[1206]: New session 21 of user core. Nov 1 00:10:22.481810 systemd[1]: Started session-21.scope. Nov 1 00:10:22.484000 audit[5107]: USER_START pid=5107 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:22.485000 audit[5109]: CRED_ACQ pid=5109 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:22.612563 sshd[5107]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:22.612000 audit[5107]: USER_END pid=5107 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:22.612000 audit[5107]: CRED_DISP pid=5107 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:22.615026 systemd[1]: sshd@20-10.0.0.24:22-10.0.0.1:50134.service: Deactivated successfully. Nov 1 00:10:22.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.24:22-10.0.0.1:50134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:22.615877 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:10:22.616467 systemd-logind[1206]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:10:22.617081 systemd-logind[1206]: Removed session 21. Nov 1 00:10:22.620015 env[1216]: time="2025-11-01T00:10:22.619960229Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:10:22.804901 env[1216]: time="2025-11-01T00:10:22.804756437Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:22.805783 env[1216]: time="2025-11-01T00:10:22.805706231Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:10:22.805983 kubelet[1971]: E1101 00:10:22.805942 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:10:22.807305 kubelet[1971]: E1101 00:10:22.807007 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:10:22.807483 kubelet[1971]: E1101 00:10:22.807426 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dzmqg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-6c7694554f-flcbv_calico-system(d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:22.808658 kubelet[1971]: E1101 00:10:22.808619 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7" Nov 1 00:10:24.619349 kubelet[1971]: E1101 00:10:24.619304 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:10:25.619146 kubelet[1971]: E1101 00:10:25.619108 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:10:26.619586 kubelet[1971]: E1101 00:10:26.619436 1971 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Nov 1 00:10:26.621355 env[1216]: time="2025-11-01T00:10:26.621123618Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:10:26.827180 env[1216]: time="2025-11-01T00:10:26.827127049Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:26.828401 env[1216]: time="2025-11-01T00:10:26.828345726Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:10:26.828760 kubelet[1971]: E1101 00:10:26.828716 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:10:26.828851 kubelet[1971]: E1101 00:10:26.828781 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:10:26.828964 kubelet[1971]: E1101 00:10:26.828914 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hzflm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d2762_calico-system(ee73499a-4c7c-4cc1-87d2-26b81ea29f19): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:26.830983 env[1216]: time="2025-11-01T00:10:26.830942839Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:10:27.039376 env[1216]: time="2025-11-01T00:10:27.039255902Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:27.040719 env[1216]: time="2025-11-01T00:10:27.040669140Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:10:27.041040 kubelet[1971]: E1101 00:10:27.041006 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:10:27.041151 kubelet[1971]: E1101 00:10:27.041135 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:10:27.041357 kubelet[1971]: E1101 00:10:27.041317 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hzflm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d2762_calico-system(ee73499a-4c7c-4cc1-87d2-26b81ea29f19): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:27.042797 kubelet[1971]: E1101 00:10:27.042743 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d2762" podUID="ee73499a-4c7c-4cc1-87d2-26b81ea29f19" Nov 1 00:10:27.617199 systemd[1]: Started sshd@21-10.0.0.24:22-10.0.0.1:50150.service. Nov 1 00:10:27.621507 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:10:27.621615 kernel: audit: type=1130 audit(1761955827.616:1489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.24:22-10.0.0.1:50150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:27.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.24:22-10.0.0.1:50150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:27.663000 audit[5120]: USER_ACCT pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.664000 audit[5120]: CRED_ACQ pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.665606 sshd[5120]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:27.670255 sshd[5120]: Accepted publickey for core from 10.0.0.1 port 50150 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:27.671789 kernel: audit: type=1101 audit(1761955827.663:1490): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.672222 kernel: audit: type=1103 audit(1761955827.664:1491): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.672264 kernel: audit: type=1006 audit(1761955827.664:1492): pid=5120 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Nov 1 00:10:27.673367 systemd[1]: Started session-22.scope. Nov 1 00:10:27.673526 systemd-logind[1206]: New session 22 of user core. Nov 1 00:10:27.664000 audit[5120]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1a1cdb0 a2=3 a3=1 items=0 ppid=1 pid=5120 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:27.677528 kernel: audit: type=1300 audit(1761955827.664:1492): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1a1cdb0 a2=3 a3=1 items=0 ppid=1 pid=5120 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:27.677591 kernel: audit: type=1327 audit(1761955827.664:1492): proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:27.664000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:27.678992 kernel: audit: type=1105 audit(1761955827.677:1493): pid=5120 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.677000 audit[5120]: USER_START pid=5120 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.678000 audit[5122]: CRED_ACQ pid=5122 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.686099 kernel: audit: type=1103 audit(1761955827.678:1494): pid=5122 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.817189 sshd[5120]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:27.817000 audit[5120]: USER_END pid=5120 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.820739 systemd[1]: sshd@21-10.0.0.24:22-10.0.0.1:50150.service: Deactivated successfully. Nov 1 00:10:27.821669 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:10:27.822438 systemd-logind[1206]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:10:27.818000 audit[5120]: CRED_DISP pid=5120 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.823225 systemd-logind[1206]: Removed session 22. Nov 1 00:10:27.825870 kernel: audit: type=1106 audit(1761955827.817:1495): pid=5120 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.825946 kernel: audit: type=1104 audit(1761955827.818:1496): pid=5120 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:27.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.24:22-10.0.0.1:50150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:28.620461 env[1216]: time="2025-11-01T00:10:28.620221984Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:10:28.824344 env[1216]: time="2025-11-01T00:10:28.824171296Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:28.829481 env[1216]: time="2025-11-01T00:10:28.829379814Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:10:28.829698 kubelet[1971]: E1101 00:10:28.829650 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:10:28.829982 kubelet[1971]: E1101 00:10:28.829699 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:10:28.829982 kubelet[1971]: E1101 00:10:28.829844 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lcnv5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6495f5c798-mfzv5_calico-apiserver(f76eed17-611d-4863-927b-c02c54186a3e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:28.831560 kubelet[1971]: E1101 00:10:28.831416 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-mfzv5" podUID="f76eed17-611d-4863-927b-c02c54186a3e" Nov 1 00:10:29.622248 env[1216]: time="2025-11-01T00:10:29.622031932Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:10:29.819472 env[1216]: time="2025-11-01T00:10:29.819404351Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:10:29.820371 env[1216]: time="2025-11-01T00:10:29.820330311Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:10:29.820570 kubelet[1971]: E1101 00:10:29.820533 1971 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:10:29.820628 kubelet[1971]: E1101 00:10:29.820581 1971 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:10:29.820750 kubelet[1971]: E1101 00:10:29.820706 1971 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wz2vz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-67g77_calico-system(85742704-5ab5-4b30-87fe-a0db1b4cb53b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:10:29.821864 kubelet[1971]: E1101 00:10:29.821826 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-67g77" podUID="85742704-5ab5-4b30-87fe-a0db1b4cb53b" Nov 1 00:10:32.620062 kubelet[1971]: E1101 00:10:32.619982 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fd9f657f7-z4zxl" podUID="bb64bdde-d3c3-4ffd-b3d1-67c1be3ba74f" Nov 1 00:10:32.823132 systemd[1]: Started sshd@22-10.0.0.24:22-10.0.0.1:49702.service. Nov 1 00:10:32.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.24:22-10.0.0.1:49702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:32.824925 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:10:32.824997 kernel: audit: type=1130 audit(1761955832.822:1498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.24:22-10.0.0.1:49702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:32.870000 audit[5135]: USER_ACCT pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:32.871326 sshd[5135]: Accepted publickey for core from 10.0.0.1 port 49702 ssh2: RSA SHA256:kb3suJ2QTjzwtL4e8dR0lwVlSg216vRjckn55cG0Sc4 Nov 1 00:10:32.873463 sshd[5135]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:10:32.872000 audit[5135]: CRED_ACQ pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:32.878558 kernel: audit: type=1101 audit(1761955832.870:1499): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:32.878626 kernel: audit: type=1103 audit(1761955832.872:1500): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:32.878684 kernel: audit: type=1006 audit(1761955832.872:1501): pid=5135 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:10:32.872000 audit[5135]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1bf98c0 a2=3 a3=1 items=0 ppid=1 pid=5135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:32.884381 kernel: audit: type=1300 audit(1761955832.872:1501): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1bf98c0 a2=3 a3=1 items=0 ppid=1 pid=5135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:10:32.872000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:32.886086 kernel: audit: type=1327 audit(1761955832.872:1501): proctitle=737368643A20636F7265205B707269765D Nov 1 00:10:32.886842 systemd-logind[1206]: New session 23 of user core. Nov 1 00:10:32.887505 systemd[1]: Started session-23.scope. Nov 1 00:10:32.895000 audit[5135]: USER_START pid=5135 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:32.895000 audit[5137]: CRED_ACQ pid=5137 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:32.902791 kernel: audit: type=1105 audit(1761955832.895:1502): pid=5135 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:32.902840 kernel: audit: type=1103 audit(1761955832.895:1503): pid=5137 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:33.034369 sshd[5135]: pam_unix(sshd:session): session closed for user core Nov 1 00:10:33.033000 audit[5135]: USER_END pid=5135 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:33.033000 audit[5135]: CRED_DISP pid=5135 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:33.042569 kernel: audit: type=1106 audit(1761955833.033:1504): pid=5135 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:33.042639 kernel: audit: type=1104 audit(1761955833.033:1505): pid=5135 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Nov 1 00:10:33.044337 systemd[1]: sshd@22-10.0.0.24:22-10.0.0.1:49702.service: Deactivated successfully. Nov 1 00:10:33.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.24:22-10.0.0.1:49702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:33.045215 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:10:33.046284 systemd-logind[1206]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:10:33.047000 systemd-logind[1206]: Removed session 23. Nov 1 00:10:33.619959 kubelet[1971]: E1101 00:10:33.619921 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6495f5c798-dgqbz" podUID="9d3532b8-6e07-462d-911f-721c28e34778" Nov 1 00:10:34.619548 kubelet[1971]: E1101 00:10:34.619504 1971 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-6c7694554f-flcbv" podUID="d6dfbd61-197d-4e2c-99bc-c8ced9ca27b7"