24.671702] IPv6: ADDRCONF(NETDEV_CHANGE): lxc65a53a2669a3: link becomes ready [ 124.702979] eth0: renamed from tmpf52e0 [ 124.722512] IPv6: ADDRCONF(NETDEV_CHANGE): lxca0fbdb3aa5d2: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:44:06 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:44:07 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 129.180138] kauditd_printk_skb: 4117 callbacks suppressed [ 129.180141] audit: type=1334 audit(1696275849.107:3977): prog-id=1674 op=LOAD [ 129.182839] audit: type=1300 audit(1696275849.107:3977): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff55c61ac0 a2=74 a3=7fff55c61ac0 items=0 ppid=4141 pid=4215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.189643] audit: type=1327 audit(1696275849.107:3977): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 129.194425] audit: type=1334 audit(1696275849.107:3978): prog-id=1674 op=UNLOAD [ 129.196049] audit: type=1334 audit(1696275849.107:3979): prog-id=1675 op=LOAD [ 129.197626] audit: type=1300 audit(1696275849.107:3979): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff55c61a50 a2=80 a3=0 items=0 ppid=4141 pid=4215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.204253] audit: type=1327 audit(1696275849.107:3979): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 129.209153] audit: type=1334 audit(1696275849.110:3980): prog-id=1675 op=UNLOAD [ 129.212667] audit: type=1334 audit(1696275849.110:3981): prog-id=1676 op=LOAD [ 129.214689] audit: type=1300 audit(1696275849.110:3981): arch=c000003e syscall=321 success=yes exit=32 a0=5 a1=7fff55c617c0 a2=80 a3=0 items=0 ppid=4141 pid=4215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.346892] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:44:13 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:44:14 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 148.789260] kauditd_printk_skb: 456 callbacks suppressed [ 148.789262] audit: type=1334 audit(1696275868.716:4149): prog-id=1712 op=LOAD [ 148.792076] audit: type=1300 audit(1696275868.716:4149): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd49ef2a60 a2=74 a3=7ffd49ef2a60 items=0 ppid=4604 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.799842] audit: type=1327 audit(1696275868.716:4149): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 148.802107] audit: type=1334 audit(1696275868.717:4150): prog-id=1712 op=UNLOAD [ 148.804275] audit: type=1334 audit(1696275868.717:4151): prog-id=1713 op=LOAD [ 148.806023] audit: type=1300 audit(1696275868.717:4151): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd49ef1ae0 a2=90 a3=2 items=0 ppid=4604 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.812448] audit: type=1327 audit(1696275868.717:4151): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 148.814715] audit: type=1334 audit(1696275868.717:4152): prog-id=1713 op=UNLOAD [ 148.816380] audit: type=1334 audit(1696275868.717:4153): prog-id=1714 op=LOAD [ 148.818291] audit: type=1300 audit(1696275868.717:4153): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd49ef1ae0 a2=90 a3=2 items=0 ppid=4604 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.034687] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 152.644720] eth0: renamed from tmp2de57 [ 152.651001] eth0: renamed from tmpc1494 [ 152.658124] IPv6: ADDRCONF(NETDEV_CHANGE): lxcab077b5cccb8: link becomes ready [ 152.662357] IPv6: ADDRCONF(NETDEV_CHANGE): lxc5c22bbfc304c: link becomes ready [ 154.128512] kauditd_printk_skb: 4195 callbacks suppressed [ 154.128515] audit: type=1334 audit(1696275874.055:6086): prog-id=2539 op=LOAD [ 154.131415] audit: type=1300 audit(1696275874.055:6086): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff4cf24580 a2=74 a3=7fff4cf24580 items=0 ppid=4604 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.142744] audit: type=1327 audit(1696275874.055:6086): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003131395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 154.149264] audit: type=1334 audit(1696275874.065:6087): prog-id=2539 op=UNLOAD [ 154.151104] audit: type=1334 audit(1696275874.065:6088): prog-id=2540 op=LOAD [ 154.153030] audit: type=1300 audit(1696275874.065:6088): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff4cf24510 a2=80 a3=0 items=0 ppid=4604 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.160087] audit: type=1327 audit(1696275874.065:6088): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003131395F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 154.165241] audit: type=1334 audit(1696275874.065:6089): prog-id=2540 op=UNLOAD [ 154.167123] audit: type=1334 audit(1696275874.066:6090): prog-id=2541 op=LOAD [ 154.168919] audit: type=1300 audit(1696275874.066:6090): arch=c000003e syscall=321 success=yes exit=38 a0=5 a1=7fff4cf24280 a2=80 a3=0 items=0 ppid=4604 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:44:34 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:44:35 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 163.622930] kauditd_printk_skb: 66 callbacks suppressed [ 163.622933] audit: type=1130 audit(1696275883.550:6118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.17.1:22-139.178.89.65:49236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.797697] audit: type=1101 audit(1696275883.725:6119): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.806287] audit: type=1103 audit(1696275883.733:6120): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.814482] audit: type=1006 audit(1696275883.733:6121): pid=5157 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 163.818650] audit: type=1300 audit(1696275883.733:6121): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc50e662e0 a2=3 a3=0 items=0 ppid=1 pid=5157 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.832933] audit: type=1327 audit(1696275883.733:6121): proctitle=737368643A20636F7265205B707269765D [ 163.835473] audit: type=1105 audit(1696275883.756:6122): pid=5157 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.842408] audit: type=1103 audit(1696275883.759:6123): pid=5160 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.029876] audit: type=1106 audit(1696275883.957:6124): pid=5157 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.038108] audit: type=1104 audit(1696275883.957:6125): pid=5157 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.055263] kauditd_printk_skb: 1 callbacks suppressed [ 174.055266] audit: type=1130 audit(1696275893.981:6127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.17.1:22-139.178.89.65:59926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 174.243453] audit: type=1101 audit(1696275894.170:6128): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.251411] audit: type=1103 audit(1696275894.177:6129): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.257512] audit: type=1006 audit(1696275894.177:6130): pid=5170 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 174.261276] audit: type=1300 audit(1696275894.177:6130): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6edbb480 a2=3 a3=0 items=0 ppid=1 pid=5170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.269065] audit: type=1327 audit(1696275894.177:6130): proctitle=737368643A20636F7265205B707269765D [ 174.277553] audit: type=1105 audit(1696275894.204:6131): pid=5170 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.286512] audit: type=1103 audit(1696275894.207:6132): pid=5173 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.487932] audit: type=1106 audit(1696275894.414:6133): pid=5170 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.494819] audit: type=1104 audit(1696275894.421:6134): pid=5170 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.166902] kauditd_printk_skb: 3903 callbacks suppressed [ 179.166905] audit: type=1325 audit(1696275899.093:7972): table=filter:339 family=2 entries=1 op=nft_register_chain pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 179.171331] audit: type=1300 audit(1696275899.093:7972): arch=c000003e syscall=46 success=yes exit=148 a0=3 a1=7fff1b02a450 a2=0 a3=7fff1b02a43c items=0 ppid=5201 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.178890] audit: type=1327 audit(1696275899.093:7972): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F494E505554004F4C445F43494C49554D5F494E505554 [ 179.182408] audit: type=1325 audit(1696275899.098:7973): table=filter:340 family=2 entries=1 op=nft_register_chain pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 179.185602] audit: type=1300 audit(1696275899.098:7973): arch=c000003e syscall=46 success=yes exit=148 a0=3 a1=7ffc2a0920c0 a2=0 a3=7ffc2a0920ac items=0 ppid=5201 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.192096] audit: type=1327 audit(1696275899.098:7973): proctitle=69707461626C6573002D770035002D740066696C746572002D450043494C49554D5F4F5554505554004F4C445F43494C49554D5F4F5554505554 [ 179.200676] audit: type=1325 audit(1696275899.127:7974): table=raw:341 family=2 entries=1 op=nft_register_chain pid=5500 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 179.204239] audit: type=1300 audit(1696275899.127:7974): arch=c000003e syscall=46 success=yes exit=144 a0=3 a1=7ffe338d1e30 a2=0 a3=7ffe338d1e1c items=0 ppid=5201 pid=5500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.211047] audit: type=1327 audit(1696275899.127:7974): proctitle=69707461626C6573002D770035002D7400726177002D450043494C49554D5F4F55545055545F726177004F4C445F43494C49554D5F4F55545055545F726177 [ 179.214507] audit: type=1325 audit(1696275899.134:7975): table=nat:342 family=2 entries=1 op=nft_register_chain pid=5503 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 179.582055] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:45:02 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:45:03 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 184.510783] kauditd_printk_skb: 316 callbacks suppressed [ 184.510788] audit: type=1130 audit(1696275904.437:8084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.1:22-139.178.89.65:43298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.689416] audit: type=1101 audit(1696275904.616:8085): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.696822] audit: type=1103 audit(1696275904.623:8086): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.702856] audit: type=1006 audit(1696275904.623:8087): pid=5702 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 184.706403] audit: type=1300 audit(1696275904.623:8087): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2f2b630 a2=3 a3=0 items=0 ppid=1 pid=5702 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.721986] audit: type=1327 audit(1696275904.623:8087): proctitle=737368643A20636F7265205B707269765D [ 184.734270] audit: type=1105 audit(1696275904.660:8088): pid=5702 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.742471] audit: type=1103 audit(1696275904.661:8089): pid=5705 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.931700] audit: type=1106 audit(1696275904.858:8090): pid=5702 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.939560] audit: type=1104 audit(1696275904.858:8091): pid=5702 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.954658] kauditd_printk_skb: 1 callbacks suppressed [ 194.954661] audit: type=1130 audit(1696275914.882:8093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.17.1:22-139.178.89.65:45270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.129642] audit: type=1101 audit(1696275915.057:8094): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.136680] audit: type=1103 audit(1696275915.064:8095): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.144733] audit: type=1006 audit(1696275915.065:8096): pid=5742 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 195.148643] audit: type=1300 audit(1696275915.065:8096): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc94e90f0 a2=3 a3=0 items=0 ppid=1 pid=5742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.161782] audit: type=1327 audit(1696275915.065:8096): proctitle=737368643A20636F7265205B707269765D [ 195.164806] audit: type=1105 audit(1696275915.085:8097): pid=5742 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.170887] audit: type=1103 audit(1696275915.088:8098): pid=5745 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.359590] audit: type=1106 audit(1696275915.287:8099): pid=5742 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.369495] audit: type=1104 audit(1696275915.288:8100): pid=5742 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.522744] kauditd_printk_skb: 23 callbacks suppressed [ 207.522747] audit: type=1130 audit(1696275927.451:8120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.1:22-139.178.89.65:35848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.696523] audit: type=1101 audit(1696275927.624:8121): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.709590] audit: type=1103 audit(1696275927.637:8122): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.717024] audit: type=1006 audit(1696275927.637:8123): pid=5782 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 207.721091] audit: type=1300 audit(1696275927.637:8123): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd610e7c0 a2=3 a3=0 items=0 ppid=1 pid=5782 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.735194] audit: type=1327 audit(1696275927.637:8123): proctitle=737368643A20636F7265205B707269765D [ 207.740913] audit: type=1105 audit(1696275927.669:8124): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.748800] audit: type=1103 audit(1696275927.669:8125): pid=5785 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.982784] audit: type=1106 audit(1696275927.911:8126): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 208.000181] audit: type=1104 audit(1696275927.920:8127): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.009184] kauditd_printk_skb: 1 callbacks suppressed [ 218.009187] audit: type=1130 audit(1696275937.936:8129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.1:22-139.178.89.65:44462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 218.196762] audit: type=1101 audit(1696275938.124:8130): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.204119] audit: type=1103 audit(1696275938.131:8131): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.210498] audit: type=1006 audit(1696275938.131:8132): pid=5795 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 218.214832] audit: type=1300 audit(1696275938.131:8132): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8c642d90 a2=3 a3=0 items=0 ppid=1 pid=5795 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 218.222873] audit: type=1327 audit(1696275938.131:8132): proctitle=737368643A20636F7265205B707269765D [ 218.225753] audit: type=1105 audit(1696275938.153:8133): pid=5795 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.233096] audit: type=1103 audit(1696275938.160:8134): pid=5798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.450349] audit: type=1106 audit(1696275938.377:8135): pid=5795 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.458662] audit: type=1104 audit(1696275938.378:8136): pid=5795 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 223.011067] kauditd_printk_skb: 1469 callbacks suppressed [ 223.011070] audit: type=1334 audit(1696275942.938:8838): prog-id=3706 op=LOAD [ 223.014486] audit: type=1300 audit(1696275942.938:8838): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcdf4f6ec0 a2=90 a3=2 items=0 ppid=5842 pid=5903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.026352] audit: type=1327 audit(1696275942.938:8838): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 223.028868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.028871] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 223.031631] audit: backlog limit exceeded [ 223.033178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.034590] audit: audit_lost=79 audit_rate_limit=0 audit_backlog_limit=64 [ 223.036086] audit: type=1334 audit(1696275942.938:8839): prog-id=3706 op=UNLOAD [ 223.036229] audit: backlog limit exceeded [ 223.391690] systemd-journald[1352]: Data hash table of /var/log/journal/ec270e630983335cc9eda8efe5b84988/system.journal has a fill level at 75.0 (33393 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 223.396604] systemd-journald[1352]: /var/log/journal/ec270e630983335cc9eda8efe5b84988/system.journal: Journal header limits reached or header out-of-date, rotating. [ 226.089831] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:45:48 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 228.474674] kauditd_printk_skb: 2824 callbacks suppressed [ 228.474677] audit: type=1130 audit(1696275948.403:10119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.1:22-139.178.89.65:42450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 228.660073] audit: type=1101 audit(1696275948.588:10120): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.668801] audit: type=1103 audit(1696275948.596:10121): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.679360] audit: type=1006 audit(1696275948.596:10122): pid=6354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 228.684237] audit: type=1300 audit(1696275948.596:10122): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd15814950 a2=3 a3=0 items=0 ppid=1 pid=6354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 228.692026] audit: type=1327 audit(1696275948.596:10122): proctitle=737368643A20636F7265205B707269765D [ 228.712908] audit: type=1105 audit(1696275948.641:10123): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.723882] audit: type=1103 audit(1696275948.652:10124): pid=6363 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.966411] audit: type=1106 audit(1696275948.895:10125): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.987282] audit: type=1104 audit(1696275948.895:10126): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:45:49 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 238.994362] kauditd_printk_skb: 1 callbacks suppressed [ 238.994366] audit: type=1130 audit(1696275958.923:10128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.1:22-139.178.89.65:50914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 239.186418] audit: type=1101 audit(1696275959.115:10129): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.203245] audit: type=1103 audit(1696275959.127:10130): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.221201] audit: type=1006 audit(1696275959.128:10131): pid=6372 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 239.231168] audit: type=1300 audit(1696275959.128:10131): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb4408560 a2=3 a3=0 items=0 ppid=1 pid=6372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 239.241551] audit: type=1327 audit(1696275959.128:10131): proctitle=737368643A20636F7265205B707269765D [ 239.243496] audit: type=1105 audit(1696275959.160:10132): pid=6372 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.250106] audit: type=1103 audit(1696275959.163:10133): pid=6375 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.417514] audit: type=1106 audit(1696275959.346:10134): pid=6372 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.425304] audit: type=1104 audit(1696275959.346:10135): pid=6372 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.441464] kauditd_printk_skb: 1 callbacks suppressed [ 249.441467] audit: type=1130 audit(1696275969.370:10137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.1:22-139.178.89.65:57284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.625006] audit: type=1101 audit(1696275969.554:10138): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.638092] audit: type=1103 audit(1696275969.567:10139): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.648258] audit: type=1006 audit(1696275969.567:10140): pid=6410 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 249.652305] audit: type=1300 audit(1696275969.567:10140): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbb8293f0 a2=3 a3=0 items=0 ppid=1 pid=6410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 249.659876] audit: type=1327 audit(1696275969.567:10140): proctitle=737368643A20636F7265205B707269765D [ 249.670017] audit: type=1105 audit(1696275969.599:10141): pid=6410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.680952] audit: type=1103 audit(1696275969.610:10142): pid=6413 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.954203] audit: type=1106 audit(1696275969.883:10143): pid=6410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.962861] audit: type=1104 audit(1696275969.884:10144): pid=6410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 259.979718] kauditd_printk_skb: 1 callbacks suppressed [ 259.979722] audit: type=1130 audit(1696275979.908:10146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.1:22-139.178.89.65:60102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 260.159947] audit: type=1101 audit(1696275980.089:10147): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.170643] audit: type=1103 audit(1696275980.099:10148): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.177635] audit: type=1006 audit(1696275980.099:10149): pid=6423 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 260.181765] audit: type=1300 audit(1696275980.099:10149): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdec564ac0 a2=3 a3=0 items=0 ppid=1 pid=6423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 260.197072] audit: type=1327 audit(1696275980.099:10149): proctitle=737368643A20636F7265205B707269765D [ 260.199340] audit: type=1105 audit(1696275980.122:10150): pid=6423 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.212111] audit: type=1103 audit(1696275980.125:10151): pid=6426 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.404967] audit: type=1106 audit(1696275980.334:10152): pid=6423 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.412344] audit: type=1104 audit(1696275980.334:10153): pid=6423 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.429683] kauditd_printk_skb: 1 callbacks suppressed [ 270.429685] audit: type=1130 audit(1696275990.358:10155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.17.1:22-139.178.89.65:43518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 270.602562] audit: type=1101 audit(1696275990.531:10156): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.610796] audit: type=1103 audit(1696275990.540:10157): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.621952] audit: type=1006 audit(1696275990.540:10158): pid=6449 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 270.626359] audit: type=1300 audit(1696275990.540:10158): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce2881500 a2=3 a3=0 items=0 ppid=1 pid=6449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 270.634143] audit: type=1327 audit(1696275990.540:10158): proctitle=737368643A20636F7265205B707269765D [ 270.640061] audit: type=1105 audit(1696275990.567:10159): pid=6449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.647572] audit: type=1103 audit(1696275990.570:10160): pid=6452 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.845829] audit: type=1106 audit(1696275990.774:10161): pid=6449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.853796] audit: type=1104 audit(1696275990.774:10162): pid=6449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 280.868826] kauditd_printk_skb: 1 callbacks suppressed [ 280.868829] audit: type=1130 audit(1696276000.797:10164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.1:22-139.178.89.65:56564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 281.039039] audit: type=1101 audit(1696276000.967:10165): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.046300] audit: type=1103 audit(1696276000.974:10166): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.052320] audit: type=1006 audit(1696276000.974:10167): pid=6476 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 281.056127] audit: type=1300 audit(1696276000.974:10167): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffae59e960 a2=3 a3=0 items=0 ppid=1 pid=6476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 281.063338] audit: type=1327 audit(1696276000.974:10167): proctitle=737368643A20636F7265205B707269765D [ 281.067684] audit: type=1105 audit(1696276000.996:10168): pid=6476 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.075001] audit: type=1103 audit(1696276001.002:10169): pid=6479 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.265289] audit: type=1106 audit(1696276001.194:10170): pid=6476 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.293797] audit: type=1104 audit(1696276001.194:10171): pid=6476 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.290579] kauditd_printk_skb: 1 callbacks suppressed [ 291.290581] audit: type=1130 audit(1696276011.218:10173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.1:22-139.178.89.65:49900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 291.462226] audit: type=1101 audit(1696276011.390:10174): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.469599] audit: type=1103 audit(1696276011.397:10175): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.477484] audit: type=1006 audit(1696276011.397:10176): pid=6489 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 291.481667] audit: type=1300 audit(1696276011.397:10176): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5c2ccd90 a2=3 a3=0 items=0 ppid=1 pid=6489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 291.490325] audit: type=1327 audit(1696276011.397:10176): proctitle=737368643A20636F7265205B707269765D [ 291.508080] audit: type=1105 audit(1696276011.436:10177): pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.518580] audit: type=1103 audit(1696276011.438:10178): pid=6492 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.703782] audit: type=1106 audit(1696276011.631:10179): pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.713649] audit: type=1104 audit(1696276011.631:10180): pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.566547] kauditd_printk_skb: 9 callbacks suppressed [ 296.566550] audit: type=1106 audit(1696276016.494:10188): pid=6502 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.592382] audit: type=1104 audit(1696276016.494:10189): pid=6502 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.605202] audit: type=1131 audit(1696276016.496:10190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.1:22-139.178.89.65:49902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 296.615862] audit: type=1130 audit(1696276016.526:10191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.1:22-139.178.89.65:60002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 296.813939] audit: type=1101 audit(1696276016.741:10192): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.822071] audit: type=1103 audit(1696276016.749:10193): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.830516] audit: type=1006 audit(1696276016.749:10194): pid=6614 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 296.834412] audit: type=1300 audit(1696276016.749:10194): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff49c1c2b0 a2=3 a3=0 items=0 ppid=1 pid=6614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 296.848998] audit: type=1327 audit(1696276016.749:10194): proctitle=737368643A20636F7265205B707269765D [ 296.852810] audit: type=1105 audit(1696276016.775:10195): pid=6614 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 301.896857] kauditd_printk_skb: 1 callbacks suppressed [ 301.896860] audit: type=1334 audit(1696276021.821:10197): prog-id=4241 op=LOAD [ 301.907563] audit: type=1300 audit(1696276021.821:10197): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffdbf17550 a2=74 a3=7fffdbf17550 items=0 ppid=6949 pid=7004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 301.930331] audit: type=1327 audit(1696276021.821:10197): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 301.945965] audit: type=1334 audit(1696276021.825:10198): prog-id=4241 op=UNLOAD [ 301.949350] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.949389] audit: type=1334 audit(1696276021.825:10199): prog-id=4242 op=LOAD [ 301.952481] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64 [ 301.956643] audit: type=1300 audit(1696276021.825:10199): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffdbf165d0 a2=90 a3=2 items=0 ppid=6949 pid=7004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 301.958561] audit: backlog limit exceeded [ 301.977852] audit: type=1327 audit(1696276021.825:10199): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 302.691333] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni)) [ 306.241973] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 306.914585] kauditd_printk_skb: 4268 callbacks suppressed [ 306.914588] audit: type=1415 audit(1696276026.842:12139): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 src=192.168.0.81 dst=192.168.1.144 spi=3(0x3) res=0 [ 306.926043] audit: type=1300 audit(1696276026.842:12139): arch=c000003e syscall=44 success=yes exit=364 a0=31 a1=c000ac6c00 a2=16c a3=0 items=0 ppid=6635 pid=6949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 306.958155] audit: type=1327 audit(1696276026.842:12139): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 306.961591] audit: type=1415 audit(1696276026.865:12140): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=192.168.0.0 src_prefixlen=24 dst=192.168.1.0 dst_prefixlen=24 [ 306.977149] audit: type=1300 audit(1696276026.865:12140): arch=c000003e syscall=44 success=yes exit=264 a0=31 a1=c000574ea0 a2=108 a3=0 items=0 ppid=6635 pid=6949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 306.993541] audit: type=1327 audit(1696276026.865:12140): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 307.003936] audit: type=1415 audit(1696276026.865:12141): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.1.0 dst_prefixlen=24 [ 307.008040] audit: type=1300 audit(1696276026.865:12141): arch=c000003e syscall=44 success=yes exit=252 a0=31 a1=c000176a00 a2=fc a3=0 items=0 ppid=6635 pid=6949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 307.039522] audit: type=1327 audit(1696276026.865:12141): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 307.076759] eth0: renamed from tmp87813 [ 307.100324] IPv6: ADDRCONF(NETDEV_CHANGE): lxc610b0c807cd0: link becomes ready [ 307.155490] eth0: renamed from tmp2b023 [ 307.168358] IPv6: ADDRCONF(NETDEV_CHANGE): lxc48392a75c2f7: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:08 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:09 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 309.695016] audit: type=1334 audit(1696276029.622:12142): prog-id=5068 op=LOAD This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:10 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 312.015573] kauditd_printk_skb: 3838 callbacks suppressed [ 312.015576] audit: type=1334 audit(1696276031.943:13963): prog-id=5881 op=LOAD [ 312.018839] audit: type=1300 audit(1696276031.943:13963): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdc107b820 a2=74 a3=7ffdc107b820 items=0 ppid=7696 pid=7792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 312.025724] audit: type=1327 audit(1696276031.943:13963): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 312.030987] audit: type=1334 audit(1696276031.943:13964): prog-id=5881 op=UNLOAD [ 312.032558] audit: type=1334 audit(1696276031.943:13965): prog-id=5882 op=LOAD [ 312.034282] audit: type=1300 audit(1696276031.943:13965): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdc107b7b0 a2=80 a3=0 items=0 ppid=7696 pid=7792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 312.040893] audit: type=1327 audit(1696276031.943:13965): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 312.046233] audit: type=1334 audit(1696276031.947:13966): prog-id=5882 op=UNLOAD [ 312.047978] audit: type=1334 audit(1696276031.947:13967): prog-id=5883 op=LOAD [ 312.049936] audit: type=1300 audit(1696276031.947:13967): arch=c000003e syscall=321 success=yes exit=32 a0=5 a1=7ffdc107b520 a2=80 a3=0 items=0 ppid=7696 pid=7792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 313.294000] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 314.518824] eth0: renamed from tmp33f33 [ 314.533883] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 314.535798] IPv6: ADDRCONF(NETDEV_CHANGE): lxcecf2ed9ba28c: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:16 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:17 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 328.248136] kauditd_printk_skb: 570 callbacks suppressed [ 328.248139] audit: type=1334 audit(1696276048.176:14173): prog-id=5919 op=LOAD [ 328.252177] audit: type=1300 audit(1696276048.176:14173): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce7cb7630 a2=74 a3=7ffce7cb7630 items=0 ppid=8247 pid=8305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 328.260687] audit: type=1327 audit(1696276048.176:14173): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 328.264496] audit: type=1334 audit(1696276048.177:14174): prog-id=5919 op=UNLOAD [ 328.266817] audit: type=1334 audit(1696276048.177:14175): prog-id=5920 op=LOAD [ 328.269227] audit: type=1300 audit(1696276048.177:14175): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce7cb66b0 a2=90 a3=2 items=0 ppid=8247 pid=8305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 328.277170] audit: type=1327 audit(1696276048.177:14175): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 328.279910] audit: type=1334 audit(1696276048.180:14176): prog-id=5920 op=UNLOAD [ 328.282146] audit: type=1334 audit(1696276048.180:14177): prog-id=5921 op=LOAD [ 328.284177] audit: type=1300 audit(1696276048.180:14177): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce7cb66b0 a2=90 a3=2 items=0 ppid=8247 pid=8305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 332.287940] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 333.100240] eth0: renamed from tmp66e74 [ 333.105743] IPv6: ADDRCONF(NETDEV_CHANGE): lxced785e3374c2: link becomes ready [ 333.574679] eth0: renamed from tmpb72cc [ 333.581436] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 333.583826] IPv6: ADDRCONF(NETDEV_CHANGE): lxc30f1bd069210: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:35 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:36 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:45:03 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 184.510783] kauditd_printk_skb: 316 callbacks suppressed [ 184.510788] audit: type=1130 audit(1696275904.437:8084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.1:22-139.178.89.65:43298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.689416] audit: type=1101 audit(1696275904.616:8085): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.696822] audit: type=1103 audit(1696275904.623:8086): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.702856] audit: type=1006 audit(1696275904.623:8087): pid=5702 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 184.706403] audit: type=1300 audit(1696275904.623:8087): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2f2b630 a2=3 a3=0 items=0 ppid=1 pid=5702 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.721986] audit: type=1327 audit(1696275904.623:8087): proctitle=737368643A20636F7265205B707269765D [ 184.734270] audit: type=1105 audit(1696275904.660:8088): pid=5702 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.742471] audit: type=1103 audit(1696275904.661:8089): pid=5705 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.931700] audit: type=1106 audit(1696275904.858:8090): pid=5702 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.939560] audit: type=1104 audit(1696275904.858:8091): pid=5702 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.954658] kauditd_printk_skb: 1 callbacks suppressed [ 194.954661] audit: type=1130 audit(1696275914.882:8093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.17.1:22-139.178.89.65:45270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.129642] audit: type=1101 audit(1696275915.057:8094): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.136680] audit: type=1103 audit(1696275915.064:8095): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.144733] audit: type=1006 audit(1696275915.065:8096): pid=5742 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 195.148643] audit: type=1300 audit(1696275915.065:8096): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc94e90f0 a2=3 a3=0 items=0 ppid=1 pid=5742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.161782] audit: type=1327 audit(1696275915.065:8096): proctitle=737368643A20636F7265205B707269765D [ 195.164806] audit: type=1105 audit(1696275915.085:8097): pid=5742 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.170887] audit: type=1103 audit(1696275915.088:8098): pid=5745 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.359590] audit: type=1106 audit(1696275915.287:8099): pid=5742 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.369495] audit: type=1104 audit(1696275915.288:8100): pid=5742 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.522744] kauditd_printk_skb: 23 callbacks suppressed [ 207.522747] audit: type=1130 audit(1696275927.451:8120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.1:22-139.178.89.65:35848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.696523] audit: type=1101 audit(1696275927.624:8121): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.709590] audit: type=1103 audit(1696275927.637:8122): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.717024] audit: type=1006 audit(1696275927.637:8123): pid=5782 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 207.721091] audit: type=1300 audit(1696275927.637:8123): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd610e7c0 a2=3 a3=0 items=0 ppid=1 pid=5782 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.735194] audit: type=1327 audit(1696275927.637:8123): proctitle=737368643A20636F7265205B707269765D [ 207.740913] audit: type=1105 audit(1696275927.669:8124): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.748800] audit: type=1103 audit(1696275927.669:8125): pid=5785 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.982784] audit: type=1106 audit(1696275927.911:8126): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 208.000181] audit: type=1104 audit(1696275927.920:8127): pid=5782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.009184] kauditd_printk_skb: 1 callbacks suppressed [ 218.009187] audit: type=1130 audit(1696275937.936:8129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.1:22-139.178.89.65:44462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 218.196762] audit: type=1101 audit(1696275938.124:8130): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.204119] audit: type=1103 audit(1696275938.131:8131): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.210498] audit: type=1006 audit(1696275938.131:8132): pid=5795 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 218.214832] audit: type=1300 audit(1696275938.131:8132): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8c642d90 a2=3 a3=0 items=0 ppid=1 pid=5795 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 218.222873] audit: type=1327 audit(1696275938.131:8132): proctitle=737368643A20636F7265205B707269765D [ 218.225753] audit: type=1105 audit(1696275938.153:8133): pid=5795 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.233096] audit: type=1103 audit(1696275938.160:8134): pid=5798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.450349] audit: type=1106 audit(1696275938.377:8135): pid=5795 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.458662] audit: type=1104 audit(1696275938.378:8136): pid=5795 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 223.011067] kauditd_printk_skb: 1469 callbacks suppressed [ 223.011070] audit: type=1334 audit(1696275942.938:8838): prog-id=3706 op=LOAD [ 223.014486] audit: type=1300 audit(1696275942.938:8838): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcdf4f6ec0 a2=90 a3=2 items=0 ppid=5842 pid=5903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.026352] audit: type=1327 audit(1696275942.938:8838): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 223.028868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.028871] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 223.031631] audit: backlog limit exceeded [ 223.033178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.034590] audit: audit_lost=79 audit_rate_limit=0 audit_backlog_limit=64 [ 223.036086] audit: type=1334 audit(1696275942.938:8839): prog-id=3706 op=UNLOAD [ 223.036229] audit: backlog limit exceeded [ 223.391690] systemd-journald[1352]: Data hash table of /var/log/journal/ec270e630983335cc9eda8efe5b84988/system.journal has a fill level at 75.0 (33393 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 223.396604] systemd-journald[1352]: /var/log/journal/ec270e630983335cc9eda8efe5b84988/system.journal: Journal header limits reached or header out-of-date, rotating. [ 226.089831] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:45:48 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 228.474674] kauditd_printk_skb: 2824 callbacks suppressed [ 228.474677] audit: type=1130 audit(1696275948.403:10119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.1:22-139.178.89.65:42450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 228.660073] audit: type=1101 audit(1696275948.588:10120): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.668801] audit: type=1103 audit(1696275948.596:10121): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.679360] audit: type=1006 audit(1696275948.596:10122): pid=6354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 228.684237] audit: type=1300 audit(1696275948.596:10122): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd15814950 a2=3 a3=0 items=0 ppid=1 pid=6354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 228.692026] audit: type=1327 audit(1696275948.596:10122): proctitle=737368643A20636F7265205B707269765D [ 228.712908] audit: type=1105 audit(1696275948.641:10123): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.723882] audit: type=1103 audit(1696275948.652:10124): pid=6363 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.966411] audit: type=1106 audit(1696275948.895:10125): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.987282] audit: type=1104 audit(1696275948.895:10126): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:45:49 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 238.994362] kauditd_printk_skb: 1 callbacks suppressed [ 238.994366] audit: type=1130 audit(1696275958.923:10128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.17.1:22-139.178.89.65:50914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 239.186418] audit: type=1101 audit(1696275959.115:10129): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.203245] audit: type=1103 audit(1696275959.127:10130): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.221201] audit: type=1006 audit(1696275959.128:10131): pid=6372 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 239.231168] audit: type=1300 audit(1696275959.128:10131): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb4408560 a2=3 a3=0 items=0 ppid=1 pid=6372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 239.241551] audit: type=1327 audit(1696275959.128:10131): proctitle=737368643A20636F7265205B707269765D [ 239.243496] audit: type=1105 audit(1696275959.160:10132): pid=6372 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.250106] audit: type=1103 audit(1696275959.163:10133): pid=6375 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.417514] audit: type=1106 audit(1696275959.346:10134): pid=6372 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.425304] audit: type=1104 audit(1696275959.346:10135): pid=6372 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.441464] kauditd_printk_skb: 1 callbacks suppressed [ 249.441467] audit: type=1130 audit(1696275969.370:10137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.17.1:22-139.178.89.65:57284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.625006] audit: type=1101 audit(1696275969.554:10138): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.638092] audit: type=1103 audit(1696275969.567:10139): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.648258] audit: type=1006 audit(1696275969.567:10140): pid=6410 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 249.652305] audit: type=1300 audit(1696275969.567:10140): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbb8293f0 a2=3 a3=0 items=0 ppid=1 pid=6410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 249.659876] audit: type=1327 audit(1696275969.567:10140): proctitle=737368643A20636F7265205B707269765D [ 249.670017] audit: type=1105 audit(1696275969.599:10141): pid=6410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.680952] audit: type=1103 audit(1696275969.610:10142): pid=6413 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.954203] audit: type=1106 audit(1696275969.883:10143): pid=6410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 249.962861] audit: type=1104 audit(1696275969.884:10144): pid=6410 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 259.979718] kauditd_printk_skb: 1 callbacks suppressed [ 259.979722] audit: type=1130 audit(1696275979.908:10146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.17.1:22-139.178.89.65:60102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 260.159947] audit: type=1101 audit(1696275980.089:10147): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.170643] audit: type=1103 audit(1696275980.099:10148): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.177635] audit: type=1006 audit(1696275980.099:10149): pid=6423 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 260.181765] audit: type=1300 audit(1696275980.099:10149): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdec564ac0 a2=3 a3=0 items=0 ppid=1 pid=6423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 260.197072] audit: type=1327 audit(1696275980.099:10149): proctitle=737368643A20636F7265205B707269765D [ 260.199340] audit: type=1105 audit(1696275980.122:10150): pid=6423 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.212111] audit: type=1103 audit(1696275980.125:10151): pid=6426 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.404967] audit: type=1106 audit(1696275980.334:10152): pid=6423 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 260.412344] audit: type=1104 audit(1696275980.334:10153): pid=6423 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.429683] kauditd_printk_skb: 1 callbacks suppressed [ 270.429685] audit: type=1130 audit(1696275990.358:10155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.17.1:22-139.178.89.65:43518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 270.602562] audit: type=1101 audit(1696275990.531:10156): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.610796] audit: type=1103 audit(1696275990.540:10157): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.621952] audit: type=1006 audit(1696275990.540:10158): pid=6449 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 270.626359] audit: type=1300 audit(1696275990.540:10158): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce2881500 a2=3 a3=0 items=0 ppid=1 pid=6449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 270.634143] audit: type=1327 audit(1696275990.540:10158): proctitle=737368643A20636F7265205B707269765D [ 270.640061] audit: type=1105 audit(1696275990.567:10159): pid=6449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.647572] audit: type=1103 audit(1696275990.570:10160): pid=6452 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.845829] audit: type=1106 audit(1696275990.774:10161): pid=6449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 270.853796] audit: type=1104 audit(1696275990.774:10162): pid=6449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 280.868826] kauditd_printk_skb: 1 callbacks suppressed [ 280.868829] audit: type=1130 audit(1696276000.797:10164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.1:22-139.178.89.65:56564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 281.039039] audit: type=1101 audit(1696276000.967:10165): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.046300] audit: type=1103 audit(1696276000.974:10166): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.052320] audit: type=1006 audit(1696276000.974:10167): pid=6476 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 281.056127] audit: type=1300 audit(1696276000.974:10167): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffae59e960 a2=3 a3=0 items=0 ppid=1 pid=6476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 281.063338] audit: type=1327 audit(1696276000.974:10167): proctitle=737368643A20636F7265205B707269765D [ 281.067684] audit: type=1105 audit(1696276000.996:10168): pid=6476 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.075001] audit: type=1103 audit(1696276001.002:10169): pid=6479 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.265289] audit: type=1106 audit(1696276001.194:10170): pid=6476 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 281.293797] audit: type=1104 audit(1696276001.194:10171): pid=6476 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.290579] kauditd_printk_skb: 1 callbacks suppressed [ 291.290581] audit: type=1130 audit(1696276011.218:10173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.17.1:22-139.178.89.65:49900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 291.462226] audit: type=1101 audit(1696276011.390:10174): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.469599] audit: type=1103 audit(1696276011.397:10175): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.477484] audit: type=1006 audit(1696276011.397:10176): pid=6489 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 291.481667] audit: type=1300 audit(1696276011.397:10176): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5c2ccd90 a2=3 a3=0 items=0 ppid=1 pid=6489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 291.490325] audit: type=1327 audit(1696276011.397:10176): proctitle=737368643A20636F7265205B707269765D [ 291.508080] audit: type=1105 audit(1696276011.436:10177): pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.518580] audit: type=1103 audit(1696276011.438:10178): pid=6492 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.703782] audit: type=1106 audit(1696276011.631:10179): pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 291.713649] audit: type=1104 audit(1696276011.631:10180): pid=6489 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.566547] kauditd_printk_skb: 9 callbacks suppressed [ 296.566550] audit: type=1106 audit(1696276016.494:10188): pid=6502 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.592382] audit: type=1104 audit(1696276016.494:10189): pid=6502 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.605202] audit: type=1131 audit(1696276016.496:10190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.17.1:22-139.178.89.65:49902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 296.615862] audit: type=1130 audit(1696276016.526:10191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.1:22-139.178.89.65:60002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 296.813939] audit: type=1101 audit(1696276016.741:10192): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.822071] audit: type=1103 audit(1696276016.749:10193): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 296.830516] audit: type=1006 audit(1696276016.749:10194): pid=6614 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 296.834412] audit: type=1300 audit(1696276016.749:10194): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff49c1c2b0 a2=3 a3=0 items=0 ppid=1 pid=6614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 296.848998] audit: type=1327 audit(1696276016.749:10194): proctitle=737368643A20636F7265205B707269765D [ 296.852810] audit: type=1105 audit(1696276016.775:10195): pid=6614 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 301.896857] kauditd_printk_skb: 1 callbacks suppressed [ 301.896860] audit: type=1334 audit(1696276021.821:10197): prog-id=4241 op=LOAD [ 301.907563] audit: type=1300 audit(1696276021.821:10197): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffdbf17550 a2=74 a3=7fffdbf17550 items=0 ppid=6949 pid=7004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 301.930331] audit: type=1327 audit(1696276021.821:10197): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 301.945965] audit: type=1334 audit(1696276021.825:10198): prog-id=4241 op=UNLOAD [ 301.949350] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.949389] audit: type=1334 audit(1696276021.825:10199): prog-id=4242 op=LOAD [ 301.952481] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64 [ 301.956643] audit: type=1300 audit(1696276021.825:10199): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffdbf165d0 a2=90 a3=2 items=0 ppid=6949 pid=7004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 301.958561] audit: backlog limit exceeded [ 301.977852] audit: type=1327 audit(1696276021.825:10199): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 302.691333] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni)) [ 306.241973] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 306.914585] kauditd_printk_skb: 4268 callbacks suppressed [ 306.914588] audit: type=1415 audit(1696276026.842:12139): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 src=192.168.0.81 dst=192.168.1.144 spi=3(0x3) res=0 [ 306.926043] audit: type=1300 audit(1696276026.842:12139): arch=c000003e syscall=44 success=yes exit=364 a0=31 a1=c000ac6c00 a2=16c a3=0 items=0 ppid=6635 pid=6949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 306.958155] audit: type=1327 audit(1696276026.842:12139): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 306.961591] audit: type=1415 audit(1696276026.865:12140): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=192.168.0.0 src_prefixlen=24 dst=192.168.1.0 dst_prefixlen=24 [ 306.977149] audit: type=1300 audit(1696276026.865:12140): arch=c000003e syscall=44 success=yes exit=264 a0=31 a1=c000574ea0 a2=108 a3=0 items=0 ppid=6635 pid=6949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 306.993541] audit: type=1327 audit(1696276026.865:12140): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 307.003936] audit: type=1415 audit(1696276026.865:12141): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.1.0 dst_prefixlen=24 [ 307.008040] audit: type=1300 audit(1696276026.865:12141): arch=c000003e syscall=44 success=yes exit=252 a0=31 a1=c000176a00 a2=fc a3=0 items=0 ppid=6635 pid=6949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 307.039522] audit: type=1327 audit(1696276026.865:12141): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 307.076759] eth0: renamed from tmp87813 [ 307.100324] IPv6: ADDRCONF(NETDEV_CHANGE): lxc610b0c807cd0: link becomes ready [ 307.155490] eth0: renamed from tmp2b023 [ 307.168358] IPv6: ADDRCONF(NETDEV_CHANGE): lxc48392a75c2f7: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:08 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:09 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 309.695016] audit: type=1334 audit(1696276029.622:12142): prog-id=5068 op=LOAD This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:10 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 312.015573] kauditd_printk_skb: 3838 callbacks suppressed [ 312.015576] audit: type=1334 audit(1696276031.943:13963): prog-id=5881 op=LOAD [ 312.018839] audit: type=1300 audit(1696276031.943:13963): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdc107b820 a2=74 a3=7ffdc107b820 items=0 ppid=7696 pid=7792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 312.025724] audit: type=1327 audit(1696276031.943:13963): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 312.030987] audit: type=1334 audit(1696276031.943:13964): prog-id=5881 op=UNLOAD [ 312.032558] audit: type=1334 audit(1696276031.943:13965): prog-id=5882 op=LOAD [ 312.034282] audit: type=1300 audit(1696276031.943:13965): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdc107b7b0 a2=80 a3=0 items=0 ppid=7696 pid=7792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 312.040893] audit: type=1327 audit(1696276031.943:13965): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 312.046233] audit: type=1334 audit(1696276031.947:13966): prog-id=5882 op=UNLOAD [ 312.047978] audit: type=1334 audit(1696276031.947:13967): prog-id=5883 op=LOAD [ 312.049936] audit: type=1300 audit(1696276031.947:13967): arch=c000003e syscall=321 success=yes exit=32 a0=5 a1=7ffdc107b520 a2=80 a3=0 items=0 ppid=7696 pid=7792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 313.294000] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 314.518824] eth0: renamed from tmp33f33 [ 314.533883] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 314.535798] IPv6: ADDRCONF(NETDEV_CHANGE): lxcecf2ed9ba28c: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:16 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:17 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 328.248136] kauditd_printk_skb: 570 callbacks suppressed [ 328.248139] audit: type=1334 audit(1696276048.176:14173): prog-id=5919 op=LOAD [ 328.252177] audit: type=1300 audit(1696276048.176:14173): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce7cb7630 a2=74 a3=7ffce7cb7630 items=0 ppid=8247 pid=8305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 328.260687] audit: type=1327 audit(1696276048.176:14173): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 328.264496] audit: type=1334 audit(1696276048.177:14174): prog-id=5919 op=UNLOAD [ 328.266817] audit: type=1334 audit(1696276048.177:14175): prog-id=5920 op=LOAD [ 328.269227] audit: type=1300 audit(1696276048.177:14175): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce7cb66b0 a2=90 a3=2 items=0 ppid=8247 pid=8305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 328.277170] audit: type=1327 audit(1696276048.177:14175): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 328.279910] audit: type=1334 audit(1696276048.180:14176): prog-id=5920 op=UNLOAD [ 328.282146] audit: type=1334 audit(1696276048.180:14177): prog-id=5921 op=LOAD [ 328.284177] audit: type=1300 audit(1696276048.180:14177): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce7cb66b0 a2=90 a3=2 items=0 ppid=8247 pid=8305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 332.287940] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 333.100240] eth0: renamed from tmp66e74 [ 333.105743] IPv6: ADDRCONF(NETDEV_CHANGE): lxced785e3374c2: link becomes ready [ 333.574679] eth0: renamed from tmpb72cc [ 333.581436] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 333.583826] IPv6: ADDRCONF(NETDEV_CHANGE): lxc30f1bd069210: link becomes ready This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:35 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: This is ip-172-31-17-1 (Linux x86_64 5.15.132-flatcar) 19:47:36 SSH host key: SHA256:dm4YyXdPpO5sKN2epVetywuPr5b1fVX0oOwfETlb8AI (RSA) SSH host key: SHA256:ho68Y9qqls+lUcBwJwoR+VJKk3954LBpAB69UZTot50 (ECDSA) SSH host key: SHA256:4xvKwOw57wiDtU4eHTr2rqbovWsc4wFmKWegnxeX3xs (ED25519) eth0: 172.31.17.1 fe80::4a1:afff:fe92:85f9 ip-172-31-17-1 login: [ 358.266189] kauditd_printk_skb: 4295 callbacks suppressed [ 358.266192] audit: type=1334 audit(1696276078.195:16156): prog-id=6746 op=LOAD [ 358.268924] audit: type=1300 audit(1696276078.195:16156): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffee4bbaeb0 a2=74 a3=7ffee4bbaeb0 items=0 ppid=8926 pid=8983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 358.277263] audit: type=1327 audit(1696276078.195:16156): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 358.279978] audit: type=1334 audit(1696276078.195:16157): prog-id=6746 op=UNLOAD [ 358.281662] audit: type=1334 audit(1696276078.195:16158): prog-id=6747 op=LOAD [ 358.283572] audit: type=1300 audit(1696276078.195:16158): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffee4bb9f30 a2=90 a3=2 items=0 ppid=8926 pid=8983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 358.290503] audit: type=1327 audit(1696276078.195:16158): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 358.293052] audit: type=1334 audit(1696276078.198:16159): prog-id=6747 op=UNLOAD [ 358.294872] audit: type=1334 audit(1696276078.198:16160): prog-id=6748 op=LOAD [ 358.296601] audit: type=1300 audit(1696276078.198:16160): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffee4bb9f30 a2=90 a3=2 items=0 ppid=8926 pid=8983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 384.037497] kauditd_printk_skb: 3866 callbacks suppressed [ 384.037500] audit: type=1106 audit(1696276103.966:17944): pid=1840 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 384.055326] audit: type=1104 audit(1696276103.966:17945): pid=1840 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 384.061535] audit: type=1131 audit(1696276103.978:17946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.17.1:22-139.178.89.65:42440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-addon\x2dconfig.slice. [ OK ] Removed slice system-addon\x2drun.slice. [ OK ] Removed slice system-modprobe.slice. [ OK ] Removed slice system-sshd.slice. [ OK ] Removed slice system-system\x2dcloudinit.slice. [ OK ] Stopped target multi-user.target. [ OK ] Stopped target getty.target. [ OK ] Stopped target machines.target. [ OK ] Stopped target nss-lookup.target. [ OK ] Stopped target remote-cryptsetup.target. [ OK ] Stopped target timers.target. [ OK ] Stopped logrotate.timer. [ OK ] Stopped [ 384.835885] audit: type=1131 audit(1696276104.764:17947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' mdadm.timer. [ OK ] Stopped systemd-tmpfiles-clean.timer. [ OK ] Stopped target time-set.target. [ OK ] Stopped target user-config.target. [ OK ] Stopped target system-config.target. Unmounting boot.mount... Stopping amazon-ssm-agent.service... [ OK ] Stopped coreos-metadata-sshkeys@core.service. [ OK ] Removed slice system-coreos\x2dmetadata\x2dsshkeys.slice. Stopping docker.service... Stopping getty@tty1.service... Stopping kubelet.service... Stopping locksmithd.service... Stopping polkit.service..[ 384.853827] audit: type=1131 audit(1696276104.783:17948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-cni-plugins comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' . [ OK ] Stopped prepare-cni-plugins.service. [[0;3[ 384.859853] audit: type=1131 audit(1696276104.789:17949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-critools comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' 2m OK ] Stopped prepare-critools.service. Stopping serial-getty@ttyS0.service... [ OK ] Stopped sshd-keygen.service. [ 384.873897] audit: type=1131 audit(1696276104.802:17950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping systemd-logind.service... [ OK ] Stopped systemd-machine-id-commit.service. [ 384.887014] audit: type=1131 audit(1696276104.815:17951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped target first-boot-complete.target. Stopping systemd-random-seed.service... [ OK ] Stopped update-ssh-keys-after-ignition.service. Stopping user@500.service.[ 384.911852] audit: type=1131 audit(1696276104.830:17952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=update-ssh-keys-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' .. [ OK ] Stopped amazon-ssm-agent.service. [ 384.937799] audit: type=1131 audit(1696276104.865:17953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=amazon-ssm-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped systemd-logind.service. [ OK ] Stopped polkit.service. [ OK ] Stopped getty@tty1.service. [ OK ] Stopped serial-getty@ttyS0.service. [ OK ] Stopped locksmithd.service. [ OK ] Stopped user@500.service. [ OK ] Stopped docker.service. [ OK ] Stopped kubelet.service. [ OK ] Unmounted boot.mount. [ OK ] Stopped systemd-random-seed.service. [ OK ] Removed slice system-getty.slice. [ OK ] Removed slice system-serial\x2dgetty.slice. [ OK ] Stopped target network-online.target. Stopping containerd.service... [ OK ] Stopped systemd-fsck@dev-d…2dlabel-EFI\x2dSYSTEM.service. [ OK ] Stopped systemd-networkd-wait-online.service. Stopping systemd-user-sessions.service... Stopping update-engine.service... Stopping user-runtime-dir@500.service... [ OK ] Unmounted run-user-500.mount. [ OK ] Stopped containerd.service. [ OK ] Stopped systemd-user-sessions.service. [ OK ] Stopped user-runtime-dir@500.service. [ OK ] Removed slice user-500.slice. [ OK ] Stopped target network.target. [ OK ] Stopped target remote-fs.target. Stopping dbus.service... Stopping systemd-networkd.service... [ OK ] Stopped systemd-networkd.service. [ OK ] Stopped dbus.service. [ OK ] Stopped target network-pre.target. [ OK ] Stopped systemd-network-generator.service. [ OK ] Stopped update-engine.service. [ OK ] Stopped target basic.target. [ OK ] Stopped target paths.target. [ OK ] Stopped motdgen.path. [ OK ] Stopped user-cloudinit@var…car\x2dinstall-user_data.path. [ OK ] Stopped target slices.target. [ OK ] Removed slice user.slice. [ OK ] Stopped target sockets.target. [ OK ] Closed dbus.socket. [ OK ] Closed docker.socket. [ OK ] Closed sshd.socket. [ OK ] Stopped target sysinit.target. [ OK ] Unset automount proc-sys-fs-binfmt_misc.automount. [ OK ] Stopped target integritysetup.target. [ OK ] Stopped target veritysetup.target. [ OK ] Closed systemd-networkd.socket. Stopping audit-rules.service... Stopping systemd-resolved.service... [ OK ] Stopped systemd-sysctl.service. [ OK ] Closed systemd-coredump.socket. [ OK ] Stopped systemd-modules-load.service. Stopping systemd-timesyncd.service... [ OK ] Stopped systemd-update-done.service. [ OK ] Stopped ldconfig.service. [ OK ] Stopped systemd-boot-update.service. [ OK ] Stopped systemd-hwdb-update.service. [ OK ] Stopped systemd-journal-catalog-update.service. Stopping systemd-update-utmp.service... [ OK ] Unmounted run-credentials-…stemd\x2dsysctl.service.mount. [ OK ] Stopped systemd-resolved.service. [ OK ] Stopped systemd-timesyncd.service. [ OK ] Stopped audit-rules.service. [ OK ] Stopped systemd-update-utmp.service. [ OK ] Stopped systemd-tmpfiles-setup.service. [ OK ] Stopped target local-fs.target. Unmounting media.mount... Unmounting run-cilium-cgroupv2.mount... Unmounting run-containerd-…5831e600e8f68914e-shm.mount... Unmounting run-containerd-…9b94f555b88493091-shm.mount... Unmounting run-containerd-…a0636040530492dbf-shm.mount... Unmounting run-containerd-…839d6909d225d2a56-shm.mount... Unmounting run-containerd-…1e600e8f68914e-rootfs.mount... Unmounting run-containerd-…4f555b88493091-rootfs.mount... Unmounting run-containerd-…4f7ddbc7ab4db7-rootfs.mount... Unmounting run-containerd-…36040530492dbf-rootfs.mount... Unmounting run-containerd-…14f95fa0f0990e-rootfs.mount... Unmounting run-containerd-…980718fa4756cb-rootfs.mount... Unmounting run-containerd-…0329ecca8af0fc-rootfs.mount... Unmounting run-containerd-…d6909d225d2a56-rootfs.mount... Unmounting run-credentials…d\x2dsysusers.service.mount... Unmounting run-credentials…iles\x2dsetup.service.mount... Unmounting run-credentials…dsetup\x2ddev.service.mount... Unmounting run-netns-cni\x…d36b1\x2d839d6b8ec97c.mount... Unmounting run-netns-cni\x…d2acb\x2daf03ca52b92c.mount... Unmounting run-torcx-unpack.mount... Unmounting tmp.mount... Unmounting usr-share-oem.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dhfbz2.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2d9rmf6.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dbfkmb.mount... [ OK ] Unmounted media.mount. [ OK ] Unmounted run-cilium-cgroupv2.mount. [ OK ] Unmounted run-containerd-i…3a5831e600e8f68914e-shm.mount. [ OK ] Unmounted run-containerd-i…0b9b94f555b88493091-shm.mount. [ OK ] Unmounted run-containerd-i…afa0636040530492dbf-shm.mount. [ OK ] Unmounted run-containerd-i…b94f555b88493091-rootfs.mount. [ OK ] Unmounted run-containerd-i…8c839d6909d225d2a56-shm.mount. [ OK ] Unmounted run-containerd-i…831e600e8f68914e-rootfs.mount. [ OK ] Unmounted run-containerd-i…114f7ddbc7ab4db7-rootfs.mount. [ OK ] Unmounted run-containerd-i…0636040530492dbf-rootfs.mount. [ OK ] Unmounted run-containerd-i…f514f95fa0f0990e-rootfs.mount. [ OK ] Unmounted run-containerd-i…ca980718fa4756cb-rootfs.mount. [ OK ] Unmounted run-containerd-i…ac0329ecca8af0fc-rootfs.mount. [ OK ] Unmounted run-containerd-i…39d6909d225d2a56-rootfs.mount. [ OK ] Unmounted run-credentials-…emd\x2dsysusers.service.mount. [ OK ] Unmounted run-credentials-…pfiles\x2dsetup.service.mount. [ OK ] Unmounted run-credentials-…x2dsetup\x2ddev.service.mount. [ OK ] Unmounted run-netns-cni\x2…x2d36b1\x2d839d6b8ec97c.mount. [ OK ] Unmounted run-netns-cni\x2…x2d2acb\x2daf03ca52b92c.mount. [FAILED] Failed unmounting run-torcx-unpack.mount. [ OK ] Unmounted tmp.mount. [ OK ] Unmounted usr-share-oem.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dhfbz2.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2d9rmf6.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dbfkmb.mount. [ OK ] Stopped target swap.target. [ OK ] Reached target umount.target. [ OK ] Stopped systemd-fsck@dev-disk-by\x2dlabel-OEM.service. [ OK ] Removed slice system-systemd\x2dfsck.slice. [ OK ] Stopped target local-fs-pre.target. [ OK ] Stopped lvm2-activation.service. [ OK ] Stopped target cryptsetup.target. [ OK ] Stopped systemd-ask-password-console.path. [ OK ] Stopped systemd-ask-password-wall.path. [ OK ] Stopped lvm2-activation-early.service. [ OK ] Stopped systemd-tmpfiles-setup-dev.service. [ OK ] Stopped systemd-sysusers.service. [ OK ] Stopped systemd-remount-fs.service. [ OK ] Reached target shutdown.target. [ OK ] Reached target final.target. [ OK ] Finished systemd-poweroff.service. [ OK ] Reached target poweroff.target. [ 385.690416] systemd-shutdown[1]: Syncing filesystems and block devices. [ 385.749350] systemd-shutdown[1]: Sending SIGTERM to remaining processes... [ 385.766311] systemd-journald[1352]: Received SIGTERM from PID 1 (systemd-shutdow).