mjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:50:33 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 144.211712] kauditd_printk_skb: 113 callbacks suppressed [ 144.211717] audit: type=1130 audit(1696272645.710:4103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.160:22-139.178.89.65:59328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 144.400713] audit: type=1101 audit(1696272645.899:4104): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.414350] audit: type=1103 audit(1696272645.912:4105): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.425044] audit: type=1006 audit(1696272645.912:4106): pid=4592 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 144.431454] audit: type=1300 audit(1696272645.912:4106): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc62e7070 a2=3 a3=1 items=0 ppid=1 pid=4592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.444157] audit: type=1327 audit(1696272645.912:4106): proctitle=737368643A20636F7265205B707269765D [ 144.466524] audit: type=1105 audit(1696272645.965:4107): pid=4592 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.479721] audit: type=1103 audit(1696272645.978:4108): pid=4595 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.786370] audit: type=1106 audit(1696272646.284:4109): pid=4592 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.798206] audit: type=1104 audit(1696272646.287:4110): pid=4592 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.213599] kauditd_printk_skb: 1177 callbacks suppressed [ 149.213604] audit: type=1400 audit(1696272650.712:4672): avc: denied { confidentiality } for pid=4681 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 149.230884] audit: type=1300 audit(1696272650.712:4672): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe5362a18 a2=90 a3=2 items=0 ppid=4625 pid=4681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.252139] audit: type=1327 audit(1696272650.712:4672): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 149.261064] audit: type=1400 audit(1696272650.712:4673): avc: denied { confidentiality } for pid=4681 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 149.270048] audit: type=1300 audit(1696272650.712:4673): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe5362a18 a2=90 a3=2 items=0 ppid=4625 pid=4681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.281713] audit: type=1327 audit(1696272650.712:4673): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 149.285644] audit: type=1400 audit(1696272650.720:4674): avc: denied { confidentiality } for pid=4681 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 149.294850] audit: type=1300 audit(1696272650.720:4674): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe5362a18 a2=90 a3=2 items=0 ppid=4625 pid=4681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.306334] audit: type=1327 audit(1696272650.720:4674): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 149.310273] audit: type=1400 audit(1696272650.720:4675): avc: denied { confidentiality } for pid=4681 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 154.303696] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 154.531777] kauditd_printk_skb: 3019 callbacks suppressed [ 154.531782] audit: type=1400 audit(1696272656.029:6025): avc: denied { open } for pid=4625 comm="cilium-agent" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=0 [ 154.544775] audit: type=1300 audit(1696272656.029:6025): arch=c00000b7 syscall=241 success=no exit=-13 a0=4000c37728 a1=ffffffffffffffff a2=0 a3=ffffffffffffffff items=0 ppid=3003 pid=4625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.557363] audit: type=1327 audit(1696272656.029:6025): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 154.812059] audit: type=1130 audit(1696272656.309:6026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.160:22-139.178.89.65:33806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.034621] audit: type=1101 audit(1696272656.532:6027): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.045081] audit: type=1103 audit(1696272656.532:6028): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.068157] audit: type=1006 audit(1696272656.532:6029): pid=5084 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 155.090445] audit: type=1300 audit(1696272656.532:6029): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf31dc80 a2=3 a3=1 items=0 ppid=1 pid=5084 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.103418] audit: type=1327 audit(1696272656.532:6029): proctitle=737368643A20636F7265205B707269765D [ 155.123061] audit: type=1105 audit(1696272656.613:6030): pid=5084 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:50:58 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:50:59 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 165.517565] kauditd_printk_skb: 4 callbacks suppressed [ 165.517570] audit: type=1130 audit(1696272667.015:6035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.160:22-139.178.89.65:36442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.715383] audit: type=1101 audit(1696272667.213:6036): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.729897] audit: type=1103 audit(1696272667.227:6037): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.740693] audit: type=1006 audit(1696272667.227:6038): pid=5139 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 165.748115] audit: type=1300 audit(1696272667.227:6038): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdf96f70 a2=3 a3=1 items=0 ppid=1 pid=5139 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.761687] audit: type=1327 audit(1696272667.227:6038): proctitle=737368643A20636F7265205B707269765D [ 165.785357] audit: type=1105 audit(1696272667.283:6039): pid=5139 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.799759] audit: type=1103 audit(1696272667.297:6040): pid=5142 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.065145] audit: type=1106 audit(1696272667.563:6041): pid=5139 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.081769] audit: type=1104 audit(1696272667.563:6042): pid=5139 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.087078] kauditd_printk_skb: 1 callbacks suppressed [ 176.087083] audit: type=1130 audit(1696272677.585:6044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.160:22-139.178.89.65:52630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.277599] audit: type=1101 audit(1696272677.775:6045): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.288017] audit: type=1103 audit(1696272677.778:6046): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.297733] audit: type=1006 audit(1696272677.778:6047): pid=5176 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 176.304154] audit: type=1300 audit(1696272677.778:6047): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeec157f0 a2=3 a3=1 items=0 ppid=1 pid=5176 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.315580] audit: type=1327 audit(1696272677.778:6047): proctitle=737368643A20636F7265205B707269765D [ 176.339437] audit: type=1105 audit(1696272677.836:6048): pid=5176 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.351796] audit: type=1103 audit(1696272677.850:6049): pid=5179 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.623344] audit: type=1106 audit(1696272678.121:6050): pid=5176 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.634916] audit: type=1104 audit(1696272678.121:6051): pid=5176 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 182.014220] kauditd_printk_skb: 3859 callbacks suppressed [ 182.014225] audit: type=1334 audit(1696272683.513:7881): prog-id=3304 op=LOAD [ 182.019056] audit: type=1300 audit(1696272683.513:7881): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffcb49ab88 a2=74 a3=d items=0 ppid=5317 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.030130] audit: type=1327 audit(1696272683.513:7881): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 182.039001] audit: type=1334 audit(1696272683.516:7882): prog-id=3304 op=UNLOAD [ 182.041770] audit: type=1334 audit(1696272683.516:7883): prog-id=3305 op=LOAD [ 182.044492] audit: type=1300 audit(1696272683.516:7883): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffcb49ab68 a2=80 a3=0 items=0 ppid=5317 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.058135] audit: type=1327 audit(1696272683.516:7883): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 182.066842] audit: type=1334 audit(1696272683.518:7884): prog-id=3305 op=UNLOAD [ 182.069645] audit: type=1334 audit(1696272683.519:7885): prog-id=3306 op=LOAD [ 182.074297] audit: type=1300 audit(1696272683.519:7885): arch=c00000b7 syscall=280 success=yes exit=32 a0=5 a1=ffffcb49a8a8 a2=80 a3=0 items=0 ppid=5317 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.302451] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 184.624282] eth0: renamed from tmpe2f19 [ 184.649596] IPv6: ADDRCONF(NETDEV_CHANGE): lxc6c09cf79713a: link becomes ready [ 184.682123] eth0: renamed from tmpecc59 [ 184.706024] IPv6: ADDRCONF(NETDEV_CHANGE): lxcefef06290edb: link becomes ready This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:51:27 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:51:28 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:51:29 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 190.022769] kauditd_printk_skb: 342 callbacks suppressed [ 190.022775] audit: type=1130 audit(1696272691.522:8005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.160:22-139.178.89.65:50922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.208684] audit: type=1101 audit(1696272691.708:8006): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.222404] audit: type=1103 audit(1696272691.721:8007): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.232399] audit: type=1006 audit(1696272691.721:8008): pid=5763 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 190.238740] audit: type=1300 audit(1696272691.721:8008): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffb483f0 a2=3 a3=1 items=0 ppid=1 pid=5763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.249249] audit: type=1327 audit(1696272691.721:8008): proctitle=737368643A20636F7265205B707269765D [ 190.272979] audit: type=1105 audit(1696272691.772:8009): pid=5763 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.288257] audit: type=1103 audit(1696272691.788:8010): pid=5766 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.554120] audit: type=1106 audit(1696272692.053:8011): pid=5763 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.566978] audit: type=1104 audit(1696272692.056:8012): pid=5763 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.579553] kauditd_printk_skb: 1 callbacks suppressed [ 200.579558] audit: type=1130 audit(1696272702.077:8014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.160:22-139.178.89.65:59102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.758551] audit: type=1101 audit(1696272702.257:8015): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.773126] audit: type=1103 audit(1696272702.271:8016): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.783645] audit: type=1006 audit(1696272702.271:8017): pid=5775 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 200.790169] audit: type=1300 audit(1696272702.271:8017): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9d528c0 a2=3 a3=1 items=0 ppid=1 pid=5775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.800574] audit: type=1327 audit(1696272702.271:8017): proctitle=737368643A20636F7265205B707269765D [ 200.822064] audit: type=1105 audit(1696272702.321:8018): pid=5775 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.836175] audit: type=1103 audit(1696272702.335:8019): pid=5778 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.119209] audit: type=1106 audit(1696272702.618:8020): pid=5775 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.133270] audit: type=1104 audit(1696272702.620:8021): pid=5775 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.145546] kauditd_printk_skb: 1 callbacks suppressed [ 211.145550] audit: type=1130 audit(1696272712.645:8023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.160:22-139.178.89.65:55120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.331113] audit: type=1101 audit(1696272712.830:8024): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.344363] audit: type=1103 audit(1696272712.843:8025): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.354274] audit: type=1006 audit(1696272712.843:8026): pid=5790 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 211.360821] audit: type=1300 audit(1696272712.843:8026): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe70ffa00 a2=3 a3=1 items=0 ppid=1 pid=5790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.371411] audit: type=1327 audit(1696272712.843:8026): proctitle=737368643A20636F7265205B707269765D [ 211.394182] audit: type=1105 audit(1696272712.893:8027): pid=5790 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.408502] audit: type=1103 audit(1696272712.898:8028): pid=5793 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.676630] audit: type=1106 audit(1696272713.176:8029): pid=5790 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.690795] audit: type=1104 audit(1696272713.176:8030): pid=5790 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.698144] kauditd_printk_skb: 1 callbacks suppressed [ 221.698149] audit: type=1130 audit(1696272723.198:8032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.160:22-139.178.89.65:41028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 221.880163] audit: type=1101 audit(1696272723.381:8033): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.894261] audit: type=1103 audit(1696272723.381:8034): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.904967] audit: type=1006 audit(1696272723.381:8035): pid=5828 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 221.911227] audit: type=1300 audit(1696272723.381:8035): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd1af540 a2=3 a3=1 items=0 ppid=1 pid=5828 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 221.921724] audit: type=1327 audit(1696272723.381:8035): proctitle=737368643A20636F7265205B707269765D [ 221.941798] audit: type=1105 audit(1696272723.442:8036): pid=5828 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.960353] audit: type=1103 audit(1696272723.447:8037): pid=5831 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 222.279038] audit: type=1106 audit(1696272723.779:8038): pid=5828 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 222.292111] audit: type=1104 audit(1696272723.780:8039): pid=5828 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.302756] kauditd_printk_skb: 1 callbacks suppressed [ 232.302761] audit: type=1130 audit(1696272733.802:8041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.160:22-139.178.89.65:42920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 232.485321] audit: type=1101 audit(1696272733.985:8042): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.497153] audit: type=1103 audit(1696272733.988:8043): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.508794] audit: type=1006 audit(1696272733.988:8044): pid=5841 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 232.515161] audit: type=1300 audit(1696272733.988:8044): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd09b5600 a2=3 a3=1 items=0 ppid=1 pid=5841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 232.531118] audit: type=1327 audit(1696272733.988:8044): proctitle=737368643A20636F7265205B707269765D [ 232.535020] audit: type=1105 audit(1696272734.025:8045): pid=5841 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.546441] audit: type=1103 audit(1696272734.031:8046): pid=5844 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.807838] audit: type=1106 audit(1696272734.308:8047): pid=5841 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.820208] audit: type=1104 audit(1696272734.310:8048): pid=5841 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.938874] kauditd_printk_skb: 1 callbacks suppressed [ 239.938879] audit: type=1334 audit(1696272741.439:8050): prog-id=3318 op=LOAD [ 239.943468] audit: type=1300 audit(1696272741.439:8050): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe7dc7aa8 a2=74 a3=0 items=0 ppid=5871 pid=5927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 239.954570] audit: type=1327 audit(1696272741.439:8050): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 239.958471] audit: type=1334 audit(1696272741.441:8051): prog-id=3318 op=UNLOAD [ 239.961199] audit: type=1334 audit(1696272741.441:8052): prog-id=3319 op=LOAD [ 239.963850] audit: type=1300 audit(1696272741.441:8052): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe7dc6ae8 a2=90 a3=2 items=0 ppid=5871 pid=5927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 239.975216] audit: type=1327 audit(1696272741.441:8052): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 239.979322] audit: type=1334 audit(1696272741.444:8053): prog-id=3319 op=UNLOAD [ 239.982220] audit: type=1334 audit(1696272741.444:8054): prog-id=3320 op=LOAD [ 239.985174] audit: type=1300 audit(1696272741.444:8054): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe7dc6ae8 a2=90 a3=2 items=0 ppid=5871 pid=5927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 240.626759] systemd-journald[1359]: Data hash table of /var/log/journal/ec2b225258b1bb8d943f127e3b87dd84/system.journal has a fill level at 75.0 (33393 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 240.634909] systemd-journald[1359]: /var/log/journal/ec2b225258b1bb8d943f127e3b87dd84/system.journal: Journal header limits reached or header out-of-date, rotating. [ 244.941043] kauditd_printk_skb: 4139 callbacks suppressed [ 244.941048] audit: type=1325 audit(1696272746.441:9987): table=filter:515 family=2 entries=1 op=nft_unregister_rule pid=6279 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 244.948778] audit: type=1300 audit(1696272746.441:9987): arch=c00000b7 syscall=211 success=yes exit=592 a0=3 a1=ffffc09ca6e0 a2=0 a3=ffffac58e5c0 items=0 ppid=5871 pid=6279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 244.960534] audit: type=1327 audit(1696272746.441:9987): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D6F006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E636C7573746572206F6E206C78632B20666F727761726420616363657074002D6A00414343455054 [ 244.970848] audit: type=1325 audit(1696272746.448:9988): table=filter:516 family=2 entries=1 op=nft_unregister_rule pid=6280 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 244.978512] audit: type=1300 audit(1696272746.448:9988): arch=c00000b7 syscall=211 success=yes exit=592 a0=3 a1=ffffe90d3cb0 a2=0 a3=ffff9707d5c0 items=0 ppid=5871 pid=6280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 244.990364] audit: type=1327 audit(1696272746.448:9988): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D69006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20636C75737465722D3E616E79206F6E206C78632B20666F72776172642061636365707420286E6F6465706F7274 [ 245.017212] audit: type=1325 audit(1696272746.517:9989): table=filter:517 family=2 entries=1 op=nft_unregister_chain pid=6284 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 245.023021] audit: type=1300 audit(1696272746.517:9989): arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffee0eaff0 a2=0 a3=ffff981195c0 items=0 ppid=5871 pid=6284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 245.034851] audit: type=1327 audit(1696272746.517:9989): proctitle=69707461626C6573002D770035002D740066696C746572002D58004F4C445F43494C49554D5F494E505554 [ 245.040220] audit: type=1325 audit(1696272746.538:9990): table=filter:518 family=2 entries=1 op=nft_unregister_chain pid=6288 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 245.246346] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 245.844516] eth0: renamed from tmpdd50a [ 245.854572] IPv6: ADDRCONF(NETDEV_CHANGE): lxc9e77c0f55993: link becomes ready [ 245.894685] eth0: renamed from tmp3f3c0 [ 245.906037] IPv6: ADDRCONF(NETDEV_CHANGE): lxc049f7db3a54f: link becomes ready This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:52:29 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:52:30 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 253.443382] kauditd_printk_skb: 32 callbacks suppressed [ 253.443387] audit: type=1130 audit(1696272754.943:10001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.160:22-139.178.89.65:52942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 253.630888] audit: type=1101 audit(1696272755.131:10002): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.644342] audit: type=1103 audit(1696272755.144:10003): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.654348] audit: type=1006 audit(1696272755.145:10004): pid=6432 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 253.660880] audit: type=1300 audit(1696272755.145:10004): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0d8b800 a2=3 a3=1 items=0 ppid=1 pid=6432 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 253.671431] audit: type=1327 audit(1696272755.145:10004): proctitle=737368643A20636F7265205B707269765D [ 253.695342] audit: type=1105 audit(1696272755.195:10005): pid=6432 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.708321] audit: type=1103 audit(1696272755.208:10006): pid=6435 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.985361] audit: type=1106 audit(1696272755.485:10007): pid=6432 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.997653] audit: type=1104 audit(1696272755.486:10008): pid=6432 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.009098] kauditd_printk_skb: 1 callbacks suppressed [ 264.009105] audit: type=1130 audit(1696272765.508:10010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.160:22-139.178.89.65:55416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 264.191471] audit: type=1101 audit(1696272765.691:10011): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.204787] audit: type=1103 audit(1696272765.704:10012): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.214563] audit: type=1006 audit(1696272765.704:10013): pid=6446 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 264.220807] audit: type=1300 audit(1696272765.704:10013): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0b20640 a2=3 a3=1 items=0 ppid=1 pid=6446 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 264.232228] audit: type=1327 audit(1696272765.704:10013): proctitle=737368643A20636F7265205B707269765D [ 264.254881] audit: type=1105 audit(1696272765.755:10014): pid=6446 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.272967] audit: type=1103 audit(1696272765.768:10015): pid=6449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.532939] audit: type=1106 audit(1696272766.034:10016): pid=6446 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.545455] audit: type=1104 audit(1696272766.034:10017): pid=6446 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 274.557201] kauditd_printk_skb: 1 callbacks suppressed [ 274.557207] audit: type=1130 audit(1696272776.056:10019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.160:22-139.178.89.65:35936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 274.740985] audit: type=1101 audit(1696272776.240:10020): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 274.752077] audit: type=1103 audit(1696272776.244:10021): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 274.762179] audit: type=1006 audit(1696272776.244:10022): pid=6458 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 274.768754] audit: type=1300 audit(1696272776.244:10022): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6c7b410 a2=3 a3=1 items=0 ppid=1 pid=6458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 274.779509] audit: type=1327 audit(1696272776.244:10022): proctitle=737368643A20636F7265205B707269765D [ 274.804670] audit: type=1105 audit(1696272776.304:10023): pid=6458 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 274.816852] audit: type=1103 audit(1696272776.312:10024): pid=6463 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.098034] audit: type=1106 audit(1696272776.597:10025): pid=6458 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.110805] audit: type=1104 audit(1696272776.600:10026): pid=6458 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.574827] kauditd_printk_skb: 9 callbacks suppressed [ 282.574832] audit: type=1106 audit(1696272784.074:10034): pid=6472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.590130] audit: type=1104 audit(1696272784.074:10035): pid=6472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.608557] audit: type=1131 audit(1696272784.088:10036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.160:22-139.178.89.65:35948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 282.618300] audit: type=1130 audit(1696272784.104:10037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.160:22-139.178.89.65:35954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 282.792627] audit: type=1101 audit(1696272784.292:10038): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.803535] audit: type=1103 audit(1696272784.296:10039): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.814300] audit: type=1006 audit(1696272784.296:10040): pid=6606 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 282.820737] audit: type=1300 audit(1696272784.296:10040): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4f6b3f0 a2=3 a3=1 items=0 ppid=1 pid=6606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 282.832153] audit: type=1327 audit(1696272784.296:10040): proctitle=737368643A20636F7265205B707269765D [ 282.849273] audit: type=1105 audit(1696272784.347:10041): pid=6606 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 289.756820] kauditd_printk_skb: 1 callbacks suppressed [ 289.756825] audit: type=1334 audit(1696272791.256:10043): prog-id=4145 op=LOAD [ 289.762834] audit: type=1300 audit(1696272791.256:10043): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc2ea6f8 a2=74 a3=0 items=0 ppid=6921 pid=6977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 289.774770] audit: type=1327 audit(1696272791.256:10043): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 289.778894] audit: type=1334 audit(1696272791.261:10044): prog-id=4145 op=UNLOAD [ 289.781793] audit: type=1334 audit(1696272791.261:10045): prog-id=4146 op=LOAD [ 289.784503] audit: type=1300 audit(1696272791.261:10045): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc2e9738 a2=90 a3=2 items=0 ppid=6921 pid=6977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 289.795719] audit: type=1327 audit(1696272791.261:10045): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 289.799609] audit: type=1334 audit(1696272791.261:10046): prog-id=4146 op=UNLOAD [ 289.802371] audit: type=1334 audit(1696272791.261:10047): prog-id=4147 op=LOAD [ 289.805028] audit: type=1300 audit(1696272791.261:10047): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc2e9738 a2=90 a3=2 items=0 ppid=6921 pid=6977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 290.643429] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106(gcm-aes-ce))) [ 294.759407] kauditd_printk_skb: 4015 callbacks suppressed [ 294.761425] audit: type=1325 audit(1696272796.258:11932): table=filter:560 family=2 entries=1 op=nft_register_rule pid=7310 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 294.767414] audit: type=1300 audit(1696272796.258:11932): arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd9b4c440 a2=0 a3=ffff87b605c0 items=0 ppid=6921 pid=7310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 294.779815] audit: type=1327 audit(1696272796.258:11932): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F464F5257415244002D6D006D61726B002D2D6D61726B00307830303030306430302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D2066696C74 [ 294.791666] audit: type=1325 audit(1696272796.267:11933): table=filter:561 family=2 entries=1 op=nft_register_rule pid=7311 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 294.798993] audit: type=1300 audit(1696272796.267:11933): arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd2511b90 a2=0 a3=ffffba4645c0 items=0 ppid=6921 pid=7311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 294.811878] audit: type=1327 audit(1696272796.267:11933): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F464F5257415244002D6D006D61726B002D2D6D61726B00307830303030306530302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D2066696C74 [ 294.823106] audit: type=1325 audit(1696272796.272:11934): table=nat:562 family=2 entries=1 op=nft_register_rule pid=7312 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 294.830047] audit: type=1300 audit(1696272796.272:11934): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffdf5616d0 a2=0 a3=ffff841515c0 items=0 ppid=6921 pid=7312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 294.843051] audit: type=1327 audit(1696272796.272:11934): proctitle=69707461626C6573002D770035002D74006E6174002D410043494C49554D5F504F53545F6E6174002D6D006D61726B002D2D6D61726B00307830303030306430302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D206E6174204349 [ 294.854150] audit: type=1325 audit(1696272796.279:11935): table=nat:563 family=2 entries=1 op=nft_register_rule pid=7313 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 295.524559] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:53:19 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:53:20 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 299.760785] kauditd_printk_skb: 3599 callbacks suppressed [ 299.760790] audit: type=1400 audit(1696272801.260:13599): avc: denied { confidentiality } for pid=7666 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 299.772680] audit: type=1300 audit(1696272801.260:13599): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffde2bf9b8 a2=90 a3=2 items=0 ppid=7586 pid=7666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 299.784397] audit: type=1327 audit(1696272801.260:13599): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 299.788962] audit: type=1400 audit(1696272801.260:13600): avc: denied { confidentiality } for pid=7666 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 299.799671] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.801133] audit: type=1300 audit(1696272801.260:13600): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffde2bf9b8 a2=90 a3=2 items=0 ppid=7586 pid=7666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 299.802089] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 299.814717] audit: type=1327 audit(1696272801.260:13600): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 299.816049] audit: backlog limit exceeded [ 299.820351] audit: type=1334 audit(1696272801.260:13601): prog-id=5689 op=LOAD [ 304.837012] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 305.111589] kauditd_printk_skb: 928 callbacks suppressed [ 305.111595] audit: type=1400 audit(1696272806.611:13979): avc: denied { open } for pid=7586 comm="cilium-agent" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=0 [ 305.128966] audit: type=1300 audit(1696272806.611:13979): arch=c00000b7 syscall=241 success=no exit=-13 a0=4000e83728 a1=ffffffffffffffff a2=0 a3=ffffffffffffffff items=0 ppid=6627 pid=7586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 305.142272] audit: type=1327 audit(1696272806.611:13979): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 305.822480] audit: type=1415 audit(1696272807.321:13980): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 src=192.168.0.72 dst=192.168.1.200 spi=3(0x3) res=0 [ 305.830125] audit: type=1300 audit(1696272807.321:13980): arch=c00000b7 syscall=206 success=yes exit=364 a0=37 a1=4000aea900 a2=16c a3=0 items=0 ppid=6627 pid=7586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 305.844957] audit: type=1327 audit(1696272807.321:13980): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 305.853101] audit: type=1415 audit(1696272807.322:13981): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=192.168.0.0 src_prefixlen=24 dst=192.168.1.0 dst_prefixlen=24 [ 305.861127] audit: type=1300 audit(1696272807.322:13981): arch=c00000b7 syscall=206 success=yes exit=264 a0=37 a1=400036d200 a2=108 a3=0 items=0 ppid=6627 pid=7586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 305.879022] audit: type=1327 audit(1696272807.322:13981): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 305.885316] audit: type=1415 audit(1696272807.322:13982): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.1.0 dst_prefixlen=24 This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:53:29 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:53:30 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 190.022769] kauditd_printk_skb: 342 callbacks suppressed [ 190.022775] audit: type=1130 audit(1696272691.522:8005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.160:22-139.178.89.65:50922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.208684] audit: type=1101 audit(1696272691.708:8006): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.222404] audit: type=1103 audit(1696272691.721:8007): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.232399] audit: type=1006 audit(1696272691.721:8008): pid=5763 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 190.238740] audit: type=1300 audit(1696272691.721:8008): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffb483f0 a2=3 a3=1 items=0 ppid=1 pid=5763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.249249] audit: type=1327 audit(1696272691.721:8008): proctitle=737368643A20636F7265205B707269765D [ 190.272979] audit: type=1105 audit(1696272691.772:8009): pid=5763 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.288257] audit: type=1103 audit(1696272691.788:8010): pid=5766 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.554120] audit: type=1106 audit(1696272692.053:8011): pid=5763 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.566978] audit: type=1104 audit(1696272692.056:8012): pid=5763 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.579553] kauditd_printk_skb: 1 callbacks suppressed [ 200.579558] audit: type=1130 audit(1696272702.077:8014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.160:22-139.178.89.65:59102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.758551] audit: type=1101 audit(1696272702.257:8015): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.773126] audit: type=1103 audit(1696272702.271:8016): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.783645] audit: type=1006 audit(1696272702.271:8017): pid=5775 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 200.790169] audit: type=1300 audit(1696272702.271:8017): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9d528c0 a2=3 a3=1 items=0 ppid=1 pid=5775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.800574] audit: type=1327 audit(1696272702.271:8017): proctitle=737368643A20636F7265205B707269765D [ 200.822064] audit: type=1105 audit(1696272702.321:8018): pid=5775 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.836175] audit: type=1103 audit(1696272702.335:8019): pid=5778 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.119209] audit: type=1106 audit(1696272702.618:8020): pid=5775 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.133270] audit: type=1104 audit(1696272702.620:8021): pid=5775 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.145546] kauditd_printk_skb: 1 callbacks suppressed [ 211.145550] audit: type=1130 audit(1696272712.645:8023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.160:22-139.178.89.65:55120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.331113] audit: type=1101 audit(1696272712.830:8024): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.344363] audit: type=1103 audit(1696272712.843:8025): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.354274] audit: type=1006 audit(1696272712.843:8026): pid=5790 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 211.360821] audit: type=1300 audit(1696272712.843:8026): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe70ffa00 a2=3 a3=1 items=0 ppid=1 pid=5790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.371411] audit: type=1327 audit(1696272712.843:8026): proctitle=737368643A20636F7265205B707269765D [ 211.394182] audit: type=1105 audit(1696272712.893:8027): pid=5790 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.408502] audit: type=1103 audit(1696272712.898:8028): pid=5793 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.676630] audit: type=1106 audit(1696272713.176:8029): pid=5790 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.690795] audit: type=1104 audit(1696272713.176:8030): pid=5790 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.698144] kauditd_printk_skb: 1 callbacks suppressed [ 221.698149] audit: type=1130 audit(1696272723.198:8032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.160:22-139.178.89.65:41028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 221.880163] audit: type=1101 audit(1696272723.381:8033): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.894261] audit: type=1103 audit(1696272723.381:8034): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.904967] audit: type=1006 audit(1696272723.381:8035): pid=5828 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 221.911227] audit: type=1300 audit(1696272723.381:8035): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd1af540 a2=3 a3=1 items=0 ppid=1 pid=5828 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 221.921724] audit: type=1327 audit(1696272723.381:8035): proctitle=737368643A20636F7265205B707269765D [ 221.941798] audit: type=1105 audit(1696272723.442:8036): pid=5828 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.960353] audit: type=1103 audit(1696272723.447:8037): pid=5831 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 222.279038] audit: type=1106 audit(1696272723.779:8038): pid=5828 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 222.292111] audit: type=1104 audit(1696272723.780:8039): pid=5828 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.302756] kauditd_printk_skb: 1 callbacks suppressed [ 232.302761] audit: type=1130 audit(1696272733.802:8041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.160:22-139.178.89.65:42920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 232.485321] audit: type=1101 audit(1696272733.985:8042): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.497153] audit: type=1103 audit(1696272733.988:8043): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.508794] audit: type=1006 audit(1696272733.988:8044): pid=5841 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 232.515161] audit: type=1300 audit(1696272733.988:8044): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd09b5600 a2=3 a3=1 items=0 ppid=1 pid=5841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 232.531118] audit: type=1327 audit(1696272733.988:8044): proctitle=737368643A20636F7265205B707269765D [ 232.535020] audit: type=1105 audit(1696272734.025:8045): pid=5841 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.546441] audit: type=1103 audit(1696272734.031:8046): pid=5844 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.807838] audit: type=1106 audit(1696272734.308:8047): pid=5841 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 232.820208] audit: type=1104 audit(1696272734.310:8048): pid=5841 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 239.938874] kauditd_printk_skb: 1 callbacks suppressed [ 239.938879] audit: type=1334 audit(1696272741.439:8050): prog-id=3318 op=LOAD [ 239.943468] audit: type=1300 audit(1696272741.439:8050): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe7dc7aa8 a2=74 a3=0 items=0 ppid=5871 pid=5927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 239.954570] audit: type=1327 audit(1696272741.439:8050): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 239.958471] audit: type=1334 audit(1696272741.441:8051): prog-id=3318 op=UNLOAD [ 239.961199] audit: type=1334 audit(1696272741.441:8052): prog-id=3319 op=LOAD [ 239.963850] audit: type=1300 audit(1696272741.441:8052): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe7dc6ae8 a2=90 a3=2 items=0 ppid=5871 pid=5927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 239.975216] audit: type=1327 audit(1696272741.441:8052): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 239.979322] audit: type=1334 audit(1696272741.444:8053): prog-id=3319 op=UNLOAD [ 239.982220] audit: type=1334 audit(1696272741.444:8054): prog-id=3320 op=LOAD [ 239.985174] audit: type=1300 audit(1696272741.444:8054): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe7dc6ae8 a2=90 a3=2 items=0 ppid=5871 pid=5927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 240.626759] systemd-journald[1359]: Data hash table of /var/log/journal/ec2b225258b1bb8d943f127e3b87dd84/system.journal has a fill level at 75.0 (33393 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 240.634909] systemd-journald[1359]: /var/log/journal/ec2b225258b1bb8d943f127e3b87dd84/system.journal: Journal header limits reached or header out-of-date, rotating. [ 244.941043] kauditd_printk_skb: 4139 callbacks suppressed [ 244.941048] audit: type=1325 audit(1696272746.441:9987): table=filter:515 family=2 entries=1 op=nft_unregister_rule pid=6279 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 244.948778] audit: type=1300 audit(1696272746.441:9987): arch=c00000b7 syscall=211 success=yes exit=592 a0=3 a1=ffffc09ca6e0 a2=0 a3=ffffac58e5c0 items=0 ppid=5871 pid=6279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 244.960534] audit: type=1327 audit(1696272746.441:9987): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D6F006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E636C7573746572206F6E206C78632B20666F727761726420616363657074002D6A00414343455054 [ 244.970848] audit: type=1325 audit(1696272746.448:9988): table=filter:516 family=2 entries=1 op=nft_unregister_rule pid=6280 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 244.978512] audit: type=1300 audit(1696272746.448:9988): arch=c00000b7 syscall=211 success=yes exit=592 a0=3 a1=ffffe90d3cb0 a2=0 a3=ffff9707d5c0 items=0 ppid=5871 pid=6280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 244.990364] audit: type=1327 audit(1696272746.448:9988): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D69006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20636C75737465722D3E616E79206F6E206C78632B20666F72776172642061636365707420286E6F6465706F7274 [ 245.017212] audit: type=1325 audit(1696272746.517:9989): table=filter:517 family=2 entries=1 op=nft_unregister_chain pid=6284 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 245.023021] audit: type=1300 audit(1696272746.517:9989): arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffee0eaff0 a2=0 a3=ffff981195c0 items=0 ppid=5871 pid=6284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 245.034851] audit: type=1327 audit(1696272746.517:9989): proctitle=69707461626C6573002D770035002D740066696C746572002D58004F4C445F43494C49554D5F494E505554 [ 245.040220] audit: type=1325 audit(1696272746.538:9990): table=filter:518 family=2 entries=1 op=nft_unregister_chain pid=6288 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 245.246346] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 245.844516] eth0: renamed from tmpdd50a [ 245.854572] IPv6: ADDRCONF(NETDEV_CHANGE): lxc9e77c0f55993: link becomes ready [ 245.894685] eth0: renamed from tmp3f3c0 [ 245.906037] IPv6: ADDRCONF(NETDEV_CHANGE): lxc049f7db3a54f: link becomes ready This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:52:29 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:52:30 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 253.443382] kauditd_printk_skb: 32 callbacks suppressed [ 253.443387] audit: type=1130 audit(1696272754.943:10001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.160:22-139.178.89.65:52942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 253.630888] audit: type=1101 audit(1696272755.131:10002): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.644342] audit: type=1103 audit(1696272755.144:10003): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.654348] audit: type=1006 audit(1696272755.145:10004): pid=6432 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 253.660880] audit: type=1300 audit(1696272755.145:10004): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0d8b800 a2=3 a3=1 items=0 ppid=1 pid=6432 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 253.671431] audit: type=1327 audit(1696272755.145:10004): proctitle=737368643A20636F7265205B707269765D [ 253.695342] audit: type=1105 audit(1696272755.195:10005): pid=6432 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.708321] audit: type=1103 audit(1696272755.208:10006): pid=6435 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.985361] audit: type=1106 audit(1696272755.485:10007): pid=6432 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 253.997653] audit: type=1104 audit(1696272755.486:10008): pid=6432 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.009098] kauditd_printk_skb: 1 callbacks suppressed [ 264.009105] audit: type=1130 audit(1696272765.508:10010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.160:22-139.178.89.65:55416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 264.191471] audit: type=1101 audit(1696272765.691:10011): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.204787] audit: type=1103 audit(1696272765.704:10012): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.214563] audit: type=1006 audit(1696272765.704:10013): pid=6446 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 264.220807] audit: type=1300 audit(1696272765.704:10013): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0b20640 a2=3 a3=1 items=0 ppid=1 pid=6446 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 264.232228] audit: type=1327 audit(1696272765.704:10013): proctitle=737368643A20636F7265205B707269765D [ 264.254881] audit: type=1105 audit(1696272765.755:10014): pid=6446 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.272967] audit: type=1103 audit(1696272765.768:10015): pid=6449 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.532939] audit: type=1106 audit(1696272766.034:10016): pid=6446 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 264.545455] audit: type=1104 audit(1696272766.034:10017): pid=6446 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 274.557201] kauditd_printk_skb: 1 callbacks suppressed [ 274.557207] audit: type=1130 audit(1696272776.056:10019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.160:22-139.178.89.65:35936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 274.740985] audit: type=1101 audit(1696272776.240:10020): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 274.752077] audit: type=1103 audit(1696272776.244:10021): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 274.762179] audit: type=1006 audit(1696272776.244:10022): pid=6458 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 274.768754] audit: type=1300 audit(1696272776.244:10022): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6c7b410 a2=3 a3=1 items=0 ppid=1 pid=6458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 274.779509] audit: type=1327 audit(1696272776.244:10022): proctitle=737368643A20636F7265205B707269765D [ 274.804670] audit: type=1105 audit(1696272776.304:10023): pid=6458 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 274.816852] audit: type=1103 audit(1696272776.312:10024): pid=6463 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.098034] audit: type=1106 audit(1696272776.597:10025): pid=6458 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.110805] audit: type=1104 audit(1696272776.600:10026): pid=6458 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.574827] kauditd_printk_skb: 9 callbacks suppressed [ 282.574832] audit: type=1106 audit(1696272784.074:10034): pid=6472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.590130] audit: type=1104 audit(1696272784.074:10035): pid=6472 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.608557] audit: type=1131 audit(1696272784.088:10036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.160:22-139.178.89.65:35948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 282.618300] audit: type=1130 audit(1696272784.104:10037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.160:22-139.178.89.65:35954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 282.792627] audit: type=1101 audit(1696272784.292:10038): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.803535] audit: type=1103 audit(1696272784.296:10039): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 282.814300] audit: type=1006 audit(1696272784.296:10040): pid=6606 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 282.820737] audit: type=1300 audit(1696272784.296:10040): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4f6b3f0 a2=3 a3=1 items=0 ppid=1 pid=6606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 282.832153] audit: type=1327 audit(1696272784.296:10040): proctitle=737368643A20636F7265205B707269765D [ 282.849273] audit: type=1105 audit(1696272784.347:10041): pid=6606 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 289.756820] kauditd_printk_skb: 1 callbacks suppressed [ 289.756825] audit: type=1334 audit(1696272791.256:10043): prog-id=4145 op=LOAD [ 289.762834] audit: type=1300 audit(1696272791.256:10043): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc2ea6f8 a2=74 a3=0 items=0 ppid=6921 pid=6977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 289.774770] audit: type=1327 audit(1696272791.256:10043): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 289.778894] audit: type=1334 audit(1696272791.261:10044): prog-id=4145 op=UNLOAD [ 289.781793] audit: type=1334 audit(1696272791.261:10045): prog-id=4146 op=LOAD [ 289.784503] audit: type=1300 audit(1696272791.261:10045): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc2e9738 a2=90 a3=2 items=0 ppid=6921 pid=6977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 289.795719] audit: type=1327 audit(1696272791.261:10045): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 289.799609] audit: type=1334 audit(1696272791.261:10046): prog-id=4146 op=UNLOAD [ 289.802371] audit: type=1334 audit(1696272791.261:10047): prog-id=4147 op=LOAD [ 289.805028] audit: type=1300 audit(1696272791.261:10047): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc2e9738 a2=90 a3=2 items=0 ppid=6921 pid=6977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 290.643429] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106(gcm-aes-ce))) [ 294.759407] kauditd_printk_skb: 4015 callbacks suppressed [ 294.761425] audit: type=1325 audit(1696272796.258:11932): table=filter:560 family=2 entries=1 op=nft_register_rule pid=7310 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 294.767414] audit: type=1300 audit(1696272796.258:11932): arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd9b4c440 a2=0 a3=ffff87b605c0 items=0 ppid=6921 pid=7310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 294.779815] audit: type=1327 audit(1696272796.258:11932): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F464F5257415244002D6D006D61726B002D2D6D61726B00307830303030306430302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D2066696C74 [ 294.791666] audit: type=1325 audit(1696272796.267:11933): table=filter:561 family=2 entries=1 op=nft_register_rule pid=7311 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 294.798993] audit: type=1300 audit(1696272796.267:11933): arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd2511b90 a2=0 a3=ffffba4645c0 items=0 ppid=6921 pid=7311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 294.811878] audit: type=1327 audit(1696272796.267:11933): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F464F5257415244002D6D006D61726B002D2D6D61726B00307830303030306530302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D2066696C74 [ 294.823106] audit: type=1325 audit(1696272796.272:11934): table=nat:562 family=2 entries=1 op=nft_register_rule pid=7312 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 294.830047] audit: type=1300 audit(1696272796.272:11934): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffdf5616d0 a2=0 a3=ffff841515c0 items=0 ppid=6921 pid=7312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 294.843051] audit: type=1327 audit(1696272796.272:11934): proctitle=69707461626C6573002D770035002D74006E6174002D410043494C49554D5F504F53545F6E6174002D6D006D61726B002D2D6D61726B00307830303030306430302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D206E6174204349 [ 294.854150] audit: type=1325 audit(1696272796.279:11935): table=nat:563 family=2 entries=1 op=nft_register_rule pid=7313 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 295.524559] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:53:19 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:53:20 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 299.760785] kauditd_printk_skb: 3599 callbacks suppressed [ 299.760790] audit: type=1400 audit(1696272801.260:13599): avc: denied { confidentiality } for pid=7666 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 299.772680] audit: type=1300 audit(1696272801.260:13599): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffde2bf9b8 a2=90 a3=2 items=0 ppid=7586 pid=7666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 299.784397] audit: type=1327 audit(1696272801.260:13599): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 299.788962] audit: type=1400 audit(1696272801.260:13600): avc: denied { confidentiality } for pid=7666 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 299.799671] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.801133] audit: type=1300 audit(1696272801.260:13600): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffde2bf9b8 a2=90 a3=2 items=0 ppid=7586 pid=7666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 299.802089] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 299.814717] audit: type=1327 audit(1696272801.260:13600): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 299.816049] audit: backlog limit exceeded [ 299.820351] audit: type=1334 audit(1696272801.260:13601): prog-id=5689 op=LOAD [ 304.837012] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 305.111589] kauditd_printk_skb: 928 callbacks suppressed [ 305.111595] audit: type=1400 audit(1696272806.611:13979): avc: denied { open } for pid=7586 comm="cilium-agent" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=0 [ 305.128966] audit: type=1300 audit(1696272806.611:13979): arch=c00000b7 syscall=241 success=no exit=-13 a0=4000e83728 a1=ffffffffffffffff a2=0 a3=ffffffffffffffff items=0 ppid=6627 pid=7586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 305.142272] audit: type=1327 audit(1696272806.611:13979): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 305.822480] audit: type=1415 audit(1696272807.321:13980): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 src=192.168.0.72 dst=192.168.1.200 spi=3(0x3) res=0 [ 305.830125] audit: type=1300 audit(1696272807.321:13980): arch=c00000b7 syscall=206 success=yes exit=364 a0=37 a1=4000aea900 a2=16c a3=0 items=0 ppid=6627 pid=7586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 305.844957] audit: type=1327 audit(1696272807.321:13980): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 305.853101] audit: type=1415 audit(1696272807.322:13981): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=192.168.0.0 src_prefixlen=24 dst=192.168.1.0 dst_prefixlen=24 [ 305.861127] audit: type=1300 audit(1696272807.322:13981): arch=c00000b7 syscall=206 success=yes exit=264 a0=37 a1=400036d200 a2=108 a3=0 items=0 ppid=6627 pid=7586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 305.879022] audit: type=1327 audit(1696272807.322:13981): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 305.885316] audit: type=1415 audit(1696272807.322:13982): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.1.0 dst_prefixlen=24 This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:53:29 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:53:30 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 330.994889] kauditd_printk_skb: 2 callbacks suppressed [ 330.994894] audit: type=1334 audit(1696272832.494:13983): prog-id=5799 op=LOAD [ 331.000398] audit: type=1300 audit(1696272832.494:13983): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffde652388 a2=74 a3=0 items=0 ppid=8226 pid=8282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 331.012105] audit: type=1327 audit(1696272832.494:13983): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 331.016390] audit: type=1334 audit(1696272832.494:13984): prog-id=5799 op=UNLOAD [ 331.019402] audit: type=1334 audit(1696272832.494:13985): prog-id=5800 op=LOAD [ 331.022374] audit: type=1300 audit(1696272832.494:13985): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffde6513c8 a2=90 a3=2 items=0 ppid=8226 pid=8282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 331.033855] audit: type=1327 audit(1696272832.494:13985): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 331.037992] audit: type=1334 audit(1696272832.497:13986): prog-id=5800 op=UNLOAD [ 331.040944] audit: type=1334 audit(1696272832.497:13987): prog-id=5801 op=LOAD [ 331.043899] audit: type=1300 audit(1696272832.497:13987): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffde6513c8 a2=90 a3=2 items=0 ppid=8226 pid=8282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 336.097733] kauditd_printk_skb: 3893 callbacks suppressed [ 336.097738] audit: type=1415 audit(1696272837.597:15832): op=SAD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 src=0.0.0.0 dst=192.168.0.72 spi=3(0x3) res=0 [ 336.106472] audit: type=1300 audit(1696272837.597:15832): arch=c00000b7 syscall=206 success=yes exit=364 a0=1a a1=4000278480 a2=16c a3=0 items=0 ppid=6627 pid=8226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 336.118753] audit: type=1327 audit(1696272837.597:15832): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 336.126588] audit: type=1415 audit(1696272837.597:15833): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.0.0 dst_prefixlen=24 [ 336.134163] audit: type=1300 audit(1696272837.597:15833): arch=c00000b7 syscall=206 success=yes exit=264 a0=1a a1=400036c6c0 a2=108 a3=0 items=0 ppid=6627 pid=8226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 336.146609] audit: type=1327 audit(1696272837.597:15833): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 336.154804] audit: type=1415 audit(1696272837.598:15834): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.0.0 dst_prefixlen=24 [ 336.162122] audit: type=1300 audit(1696272837.598:15834): arch=c00000b7 syscall=206 success=yes exit=264 a0=1a a1=400036c7e0 a2=108 a3=0 items=0 ppid=6627 pid=8226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 336.175205] audit: type=1327 audit(1696272837.598:15834): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 [ 336.184779] audit: type=1415 audit(1696272837.598:15835): op=SPD-add auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 src=0.0.0.0 src_prefixlen=0 dst=192.168.0.0 dst_prefixlen=24 [ 337.546402] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:54:01 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: This is ip-172-31-20-160 (Linux aarch64 5.15.132-flatcar) 18:54:02 SSH host key: SHA256:xjevcmqJGdginHVipQJEHaBUEJlXYDcjVHumjmtLhNQ (RSA) SSH host key: SHA256:Qbn/4bIxZpB6L/HaDyuT8W4lgsafgHtik7mHknY+6mM (ECDSA) SSH host key: SHA256:/fRMPcMRf+spTBShZVHID5S+Sz269V69ZBUnQmT+EHo (ED25519) eth0: 172.31.20.160 fe80::46f:c2ff:fe76:f18d ip-172-31-20-160 login: [ 346.057001] kauditd_printk_skb: 392 callbacks suppressed [ 346.057006] audit: type=1106 audit(1696272847.556:15966): pid=6606 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 346.080043] audit: type=1104 audit(1696272847.556:15967): pid=6606 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 346.090083] audit: type=1131 audit(1696272847.559:15968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.160:22-139.178.89.65:35954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 348.899070] audit: type=1106 audit(1696272850.398:15969): pid=1849 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 348.913501] audit: type=1104 audit(1696272850.398:15970): pid=1849 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 348.929528] audit: type=1131 audit(1696272850.398:15971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.20.160:22-139.178.89.65:39944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-addon\x2dconfig.slice. [ OK ] Removed slice system-addon\x2drun.slice. [ OK ] Removed slice system-modprobe.slice. [ OK ] Removed slice system-sshd.slice. [ OK ] Removed slice system-system\x2dcloudinit.slice. [ OK ] Stopped target multi-user.target. [ OK ] Stopped target getty.target. [ OK ] Stopped target machines.target. [ OK ] Stopped target nss-lookup.target. [ OK ] Stopped target remote-cryptsetup.target. [ OK ] Stopped target timers.target. [ OK ] Stopped logrotate.timer. [ OK ] Stopped mdadm.timer. [ OK ] Stopped systemd-tmpfiles-clean.timer. [ OK ] Stopped target time-set.target. [ OK ] Stopped target user-config.target. [ OK ] Stopped target system-config.target. Unmounting boot.mount... Stopping amazon-ssm-agent.service... [ OK ] Stopped coreos-metadata-sshkeys@core.service. [ 349.234486] audit: type=1131 audit(1696272850.734:15972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-coreos\x2dmetadata\x2dsshkeys.slice. Stopping docker.service... Stopping getty@tty1.service... Stopping kubelet.service... Stopping locksmithd.service... Stopping polkit.service... [ OK ] Stopped prepare-cni-plugins.service. [ 349.273936] audit: type=1131 audit(1696272850.773:15973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-cni-plugins comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped prepare-critools.service. Stopping serial-getty@ttyS0.service... [ 349.288476] audit: type=1131 audit(1696272850.784:15974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-critools comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped sshd-keygen.service. Stopping systemd-logind.service... [ OK ] Stopped systemd-machine-id-commit.service. [ OK ] Stopped target first-boot-complete.target. Stopping systemd-random-seed.service... [ OK [[ 349.312425] audit: type=1131 audit(1696272850.798:15975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' 0m] Stopped update-ssh-keys-after-ignition.service. Stopping user@500.service... [ OK ] Stopped amazon-ssm-agent.service. [ OK ] Stopped polkit.service. [ OK ] Stopped systemd-logind.service. [ OK ] Stopped getty@tty1.service. [ OK ] Stopped serial-getty@ttyS0.service. [ OK ] Stopped user@500.service. [ OK ] Unmounted boot.mount. [ OK ] Stopped kubelet.service. [ OK ] Removed slice system-getty.slice. [ OK ] Removed slice system-serial\x2dgetty.slice. [ OK ] Stopped systemd-fsck@dev-d…2dlabel-EFI\x2dSYSTEM.service. Stopping systemd-user-sessions.service... Stopping user-runtime-dir@500.service... [ OK ] Stopped docker.service. [ OK ] Stopped target network-online.target. Stopping containerd.service... [ OK ] Stopped systemd-networkd-wait-online.service. [ OK ] Unmounted run-user-500.mount. [ OK ] Stopped systemd-random-seed.service. [ OK ] Stopped user-runtime-dir@500.service. [ OK ] Stopped containerd.service. [ OK ] Removed slice user-500.slice. Stopping dbus.service... [ OK ] Stopped update-engine.service. [ OK ] Stopped dbus.service. [ OK ] Stopped systemd-user-sessions.service. [ OK ] Stopped locksmithd.service. [ OK ] Stopped target basic.target. [ OK ] Stopped target network.target. [ OK ] Stopped target paths.target. [ OK ] Stopped motdgen.path. [ OK ] Stopped user-cloudinit@var…car\x2dinstall-user_data.path. [ OK ] Stopped target remote-fs.target. [ OK ] Stopped target slices.target. [ OK ] Removed slice user.slice. [ OK ] Stopped target sockets.target. [ OK ] Closed dbus.socket. [ OK ] Closed docker.socket. [ OK ] Closed sshd.socket. [ OK ] Stopped target sysinit.target. [ OK ] Unset automount proc-sys-fs-binfmt_misc.automount. [ OK ] Stopped target integritysetup.target. [ OK ] Stopped target veritysetup.target. Stopping audit-rules.service... Stopping systemd-networkd.service... Stopping systemd-resolved.service... Stopping systemd-timesyncd.service... [ OK ] Stopped systemd-update-done.service. [ OK ] Stopped ldconfig.service. [ OK ] Stopped systemd-boot-update.service. [ OK ] Stopped systemd-hwdb-update.service. [ OK ] Stopped systemd-journal-catalog-update.service. Stopping systemd-update-utmp.service... [ OK ] Stopped systemd-resolved.service. [ OK ] Stopped systemd-timesyncd.service. [ OK ] Stopped systemd-networkd.service. [ OK ] Stopped audit-rules.service. [ OK ] Stopped target network-pre.target. [ OK ] Closed systemd-networkd.socket. [ OK ] Stopped systemd-network-generator.service. [ OK ] Stopped systemd-sysctl.service. [ OK ] Closed systemd-coredump.socket. [ OK ] Stopped systemd-modules-load.service. [ OK ] Unmounted run-credentials-…stemd\x2dsysctl.service.mount. [ OK ] Stopped systemd-update-utmp.service. [ OK ] Stopped systemd-tmpfiles-setup.service. [ OK ] Stopped target local-fs.target. Unmounting media.mount... Unmounting run-cilium-cgroupv2.mount... Unmounting run-containerd-…c966050f78a778f91-shm.mount... Unmounting run-containerd-…86464de79655293ae-shm.mount... Unmounting run-containerd-…369e70705094e3807-shm.mount... Unmounting run-containerd-…056d92b5f951a97ae-shm.mount... Unmounting run-containerd-…6cf341dcdaa77f-rootfs.mount... Unmounting run-containerd-…71ce8b08211b2a-rootfs.mount... Unmounting run-containerd-…6050f78a778f91-rootfs.mount... Unmounting run-containerd-…5c7b9e9fd54c44-rootfs.mount... Unmounting run-containerd-…64de79655293ae-rootfs.mount... Unmounting run-containerd-…e70705094e3807-rootfs.mount... Unmounting run-containerd-…a613df8040d7da-rootfs.mount... Unmounting run-containerd-…d92b5f951a97ae-rootfs.mount... Unmounting run-credentials…d\x2dsysusers.service.mount... Unmounting run-credentials…iles\x2dsetup.service.mount... Unmounting run-credentials…dsetup\x2ddev.service.mount... Unmounting run-torcx-unpack.mount... Unmounting tmp.mount... Unmounting usr-share-oem.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dpvvqq.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dfvtzt.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dlgzq7.mount... [ OK ] Unmounted media.mount. [ OK ] Unmounted run-cilium-cgroupv2.mount. [ OK ] Unmounted run-containerd-i…dac966050f78a778f91-shm.mount. [ OK ] Unmounted run-containerd-i…cc86464de79655293ae-shm.mount. [ OK ] Unmounted run-containerd-i…de369e70705094e3807-shm.mount. [ OK ] Unmounted run-containerd-i…616cf341dcdaa77f-rootfs.mount. [ OK ] Unmounted run-containerd-i…f3056d92b5f951a97ae-shm.mount. [ OK ] Unmounted run-containerd-i…ca71ce8b08211b2a-rootfs.mount. [ OK ] Unmounted run-containerd-i…966050f78a778f91-rootfs.mount. [ OK ] Unmounted run-containerd-i…945c7b9e9fd54c44-rootfs.mount. [ OK ] Unmounted run-containerd-i…6464de79655293ae-rootfs.mount. [ OK ] Unmounted run-containerd-i…69e70705094e3807-rootfs.mount. [ OK ] Unmounted run-containerd-i…a6a613df8040d7da-rootfs.mount. [ OK ] Unmounted run-containerd-i…56d92b5f951a97ae-rootfs.mount. [ OK ] Unmounted run-credentials-…emd\x2dsysusers.service.mount. [ OK ] Unmounted run-credentials-…pfiles\x2dsetup.service.mount. [ OK ] Unmounted run-credentials-…x2dsetup\x2ddev.service.mount. [FAILED] Failed unmounting run-torcx-unpack.mount. [ OK ] Unmounted tmp.mount. [ OK ] Unmounted usr-share-oem.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dpvvqq.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dfvtzt.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dlgzq7.mount. [ OK ] Stopped target swap.target. [ OK ] Reached target umount.target. [ OK ] Stopped systemd-fsck@dev-disk-by\x2dlabel-OEM.service. [ OK ] Removed slice system-systemd\x2dfsck.slice. [ OK ] Stopped target local-fs-pre.target. [ OK ] Stopped lvm2-activation.service. [ OK ] Stopped target cryptsetup.target. [ OK ] Stopped systemd-ask-password-console.path. [ OK ] Stopped systemd-ask-password-wall.path. [ OK ] Stopped lvm2-activation-early.service. [ OK ] Stopped systemd-tmpfiles-setup-dev.service. [ OK ] Stopped systemd-sysusers.service. [ OK ] Stopped systemd-remount-fs.service. [ OK ] Reached target shutdown.target. [ OK ] Reached target final.target. [ OK ] Finished systemd-poweroff.service. [ OK ] Reached target poweroff.target. [ 350.391816] systemd-shutdown[1]: Syncing filesystems and block devices. [ 350.456896] systemd-shutdown[1]: Sending SIGTERM to remaining processes... [ 350.475333] systemd-journald[1359]: Received SIGTERM from PID 1 (systemd-shutdow). [ 350.528839] systemd-shutdown[1]: Sending SIGKILL to remaining processes... [ 350.539083] systemd-shutdown[1]: Unmounting file systems. [ 350.543704] (sd-umount)[9028]: Unmounting '/run/torcx/unpack'. [ 350.583286] (sd-remount)[9029]: Remounting '/' read-only with options 'seclabel'. [ 350.605325] (sd-remount)[9029]: Failed to remount '/' read-only: Device or resource busy [ 350.611915] (sd-remount)[9030]: Remounting '/' read-only with options 'seclabel'. [ 350.614961] (sd-remount)[9030]: Failed to remount '/' read-only: Device or resource busy [ 350.618280] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 350.620791] systemd-shutdown[1]: Deactivating swaps. [ 350.622713] systemd-shutdown[1]: All swaps deactivated. [ 350.624672] systemd-shutdown[1]: Detaching loop devices. [ 350.627675] systemd-shutdown[1]: All loop devices detached. [ 350.629728] systemd-shutdown[1]: Stopping MD devices. [ 350.631681] systemd-shutdown[1]: All MD devices stopped. [ 350.633668] systemd-shutdown[1]: Detaching DM devices. [ 350.635951] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 350.638209] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 350.641129] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 350.643761] systemd-shutdown[1]: Unmounting file systems. [ 350.648255] (sd-remount)[9031]: Remounting '/' read-only with options 'seclabel'. [ 350.651312] (sd-remount)[9031]: Failed to remount '/' read-only: Device or resource busy [ 350.654708] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 350.657222] systemd-shutdown[1]: Detaching DM devices. [ 350.659626] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 350.661876] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 350.664819] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 350.667458] systemd-shutdown[1]: Unmounting file systems. [ 350.671913] (sd-remount)[9032]: Remounting '/' read-only with options 'seclabel'. [ 350.674976] (sd-remount)[9032]: Failed to remount '/' read-only: Device or resource busy [ 350.678338] systemd-shutdown[1]: Not all file systems unmounted, 1 left. [ 350.680767] systemd-shutdown[1]: Detaching DM devices. [ 350.683125] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 350.685383] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 350.688315] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 350.690661] systemd-shutdown[1]: Cannot finalize remaining file systems, DM devices, continuing. [ 350.716538] systemd-shutdown[1]: Failed to finalize file systems, DM devices, ignoring. [ 350.719777] systemd-shutdown[1]: Syncing filesystems and block devices. [ 350.722605] systemd-shutdown[1]: Powering off. [ 350.855904] reboot: Power down