36 family=2 entries=1 op=nft_unregister_chain pid=4725 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 122.490111] audit: type=1300 audit(1696274822.121:4103): arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffefae10b0 a2=0 a3=ffffa5db65c0 items=0 ppid=4319 pid=4725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.502102] audit: type=1327 audit(1696274822.121:4103): proctitle=69707461626C6573002D770035002D740066696C746572002D58004F4C445F43494C49554D5F4F5554505554 [ 122.507292] audit: type=1325 audit(1696274822.150:4104): table=raw:237 family=2 entries=1 op=nft_unregister_chain pid=4729 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 122.515965] audit: type=1300 audit(1696274822.150:4104): arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffec4b9a20 a2=0 a3=ffff946f55c0 items=0 ppid=4319 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.528502] audit: type=1327 audit(1696274822.150:4104): proctitle=69707461626C6573002D770035002D7400726177002D58004F4C445F43494C49554D5F4F55545055545F726177 [ 122.534175] audit: type=1325 audit(1696274822.166:4105): table=nat:238 family=2 entries=1 op=nft_unregister_chain pid=4733 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 122.718625] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:27:05 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:27:06 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: [ 138.249292] kauditd_printk_skb: 26 callbacks suppressed [ 138.249296] audit: type=1334 audit(1696274837.892:4114): prog-id=1664 op=LOAD [ 138.253966] audit: type=1300 audit(1696274837.892:4114): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd891de28 a2=74 a3=0 items=0 ppid=4862 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.266059] audit: type=1327 audit(1696274837.892:4114): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 138.269961] audit: type=1334 audit(1696274837.892:4115): prog-id=1664 op=UNLOAD [ 138.272830] audit: type=1334 audit(1696274837.892:4116): prog-id=1665 op=LOAD [ 138.275636] audit: type=1300 audit(1696274837.892:4116): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd891ce68 a2=90 a3=2 items=0 ppid=4862 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.286835] audit: type=1327 audit(1696274837.892:4116): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 138.291634] audit: type=1334 audit(1696274837.895:4117): prog-id=1665 op=UNLOAD [ 138.294895] audit: type=1334 audit(1696274837.895:4118): prog-id=1666 op=LOAD [ 138.297843] audit: type=1300 audit(1696274837.895:4118): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd891ce68 a2=90 a3=2 items=0 ppid=4862 pid=4919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.251111] kauditd_printk_skb: 4169 callbacks suppressed [ 143.251115] audit: type=1325 audit(1696274842.894:6012): table=filter:325 family=2 entries=1 op=nft_unregister_rule pid=5273 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 143.259018] audit: type=1300 audit(1696274842.894:6012): arch=c00000b7 syscall=211 success=yes exit=592 a0=3 a1=ffffee025740 a2=0 a3=ffffac1f75c0 items=0 ppid=4862 pid=5273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.270601] audit: type=1327 audit(1696274842.894:6012): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D69006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20636C75737465722D3E616E79206F6E206C78632B20666F727761726420616363657074002D6A00414343455054 [ 143.281043] audit: type=1325 audit(1696274842.897:6013): table=filter:326 family=2 entries=1 op=nft_unregister_rule pid=5274 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 143.286736] audit: type=1300 audit(1696274842.897:6013): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe73f9cb0 a2=0 a3=ffff82e895c0 items=0 ppid=4862 pid=5274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.298452] audit: type=1327 audit(1696274842.897:6013): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D690063696C69756D5F6E6574002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20636C75737465722D3E616E79206F6E2063696C69756D5F6E657420666F72776172642061636365 [ 143.313463] audit: type=1325 audit(1696274842.956:6014): table=filter:327 family=2 entries=1 op=nft_unregister_rule pid=5275 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 143.319335] audit: type=1300 audit(1696274842.956:6014): arch=c00000b7 syscall=211 success=yes exit=592 a0=3 a1=fffff95f6bd0 a2=0 a3=ffffa9ff15c0 items=0 ppid=4862 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.331229] audit: type=1327 audit(1696274842.956:6014): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D6F006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E636C7573746572206F6E206C78632B20666F727761726420616363657074002D6A00414343455054 [ 143.347331] audit: type=1325 audit(1696274842.990:6015): table=filter:328 family=2 entries=1 op=nft_unregister_rule pid=5276 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 143.618948] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 144.398650] eth0: renamed from tmp4e0fa [ 144.412380] IPv6: ADDRCONF(NETDEV_CHANGE): lxc9806c8df629e: link becomes ready [ 144.426516] eth0: renamed from tmp43320 [ 144.438679] IPv6: ADDRCONF(NETDEV_CHANGE): lxc35a26266986a: link becomes ready This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:27:26 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:27:27 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: [ 149.624765] kauditd_printk_skb: 38 callbacks suppressed [ 149.624770] audit: type=1130 audit(1696274849.268:6028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.118:22-139.178.89.65:57874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.810751] audit: type=1101 audit(1696274849.454:6029): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.821220] audit: type=1103 audit(1696274849.457:6030): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.831306] audit: type=1006 audit(1696274849.458:6031): pid=5409 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 149.838655] audit: type=1300 audit(1696274849.458:6031): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebcce240 a2=3 a3=1 items=0 ppid=1 pid=5409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.865556] audit: type=1327 audit(1696274849.458:6031): proctitle=737368643A20636F7265205B707269765D [ 149.873449] audit: type=1105 audit(1696274849.496:6032): pid=5409 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.884712] audit: type=1103 audit(1696274849.503:6033): pid=5412 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.119898] audit: type=1106 audit(1696274849.763:6034): pid=5409 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.133853] audit: type=1104 audit(1696274849.764:6035): pid=5409 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.146030] kauditd_printk_skb: 1 callbacks suppressed [ 160.146036] audit: type=1130 audit(1696274859.789:6037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.118:22-139.178.89.65:57114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 160.337162] audit: type=1101 audit(1696274859.981:6038): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.350546] audit: type=1103 audit(1696274859.994:6039): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.360918] audit: type=1006 audit(1696274859.994:6040): pid=5424 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 160.367876] audit: type=1300 audit(1696274859.994:6040): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd929840 a2=3 a3=1 items=0 ppid=1 pid=5424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 160.378829] audit: type=1327 audit(1696274859.994:6040): proctitle=737368643A20636F7265205B707269765D [ 160.398547] audit: type=1105 audit(1696274860.042:6041): pid=5424 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.412707] audit: type=1103 audit(1696274860.056:6042): pid=5427 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.676661] audit: type=1106 audit(1696274860.320:6043): pid=5424 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.690575] audit: type=1104 audit(1696274860.320:6044): pid=5424 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.702367] kauditd_printk_skb: 1 callbacks suppressed [ 170.702372] audit: type=1130 audit(1696274870.346:6046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.118:22-139.178.89.65:58238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.890096] audit: type=1101 audit(1696274870.534:6047): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.903722] audit: type=1103 audit(1696274870.547:6048): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.913551] audit: type=1006 audit(1696274870.547:6049): pid=5438 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 170.919931] audit: type=1300 audit(1696274870.547:6049): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff95602a0 a2=3 a3=1 items=0 ppid=1 pid=5438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.931202] audit: type=1327 audit(1696274870.547:6049): proctitle=737368643A20636F7265205B707269765D [ 170.961565] audit: type=1105 audit(1696274870.605:6050): pid=5438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.978682] audit: type=1103 audit(1696274870.611:6051): pid=5441 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.375228] audit: type=1106 audit(1696274871.019:6052): pid=5438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.387937] audit: type=1104 audit(1696274871.019:6053): pid=5438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.865099] kauditd_printk_skb: 3901 callbacks suppressed [ 175.865105] audit: type=1334 audit(1696274875.509:7887): prog-id=3311 op=LOAD [ 175.870460] audit: type=1300 audit(1696274875.509:7887): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe814b268 a2=74 a3=d items=0 ppid=5565 pid=5667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.881967] audit: type=1327 audit(1696274875.509:7887): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00656772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F0073656300746F2D6F7665726C6179 [ 175.890879] audit: type=1334 audit(1696274875.512:7888): prog-id=3311 op=UNLOAD [ 175.894041] audit: type=1334 audit(1696274875.512:7889): prog-id=3312 op=LOAD [ 175.897061] audit: type=1300 audit(1696274875.512:7889): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe814b248 a2=80 a3=0 items=0 ppid=5565 pid=5667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.908314] audit: type=1327 audit(1696274875.512:7889): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00656772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F0073656300746F2D6F7665726C6179 [ 175.917700] audit: type=1334 audit(1696274875.514:7890): prog-id=3312 op=UNLOAD [ 175.920697] audit: type=1334 audit(1696274875.514:7891): prog-id=3313 op=LOAD [ 175.923827] audit: type=1300 audit(1696274875.514:7891): arch=c00000b7 syscall=280 success=yes exit=32 a0=5 a1=ffffe814af88 a2=80 a3=0 items=0 ppid=5565 pid=5667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.602012] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 177.979821] eth0: renamed from tmpc3c7a [ 177.986087] IPv6: ADDRCONF(NETDEV_CHANGE): lxc223cb475940c: link becomes ready [ 178.098222] eth0: renamed from tmp0aa90 [ 178.105063] IPv6: ADDRCONF(NETDEV_CHANGE): lxccb021ce80ab6: link becomes ready This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:27:59 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:28:00 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: [ 184.884796] kauditd_printk_skb: 310 callbacks suppressed [ 184.884800] audit: type=1130 audit(1696274884.529:7997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.118:22-139.178.89.65:59204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.071362] audit: type=1101 audit(1696274884.716:7998): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.082060] audit: type=1103 audit(1696274884.718:7999): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.092519] audit: type=1006 audit(1696274884.719:8000): pid=6071 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 185.098758] audit: type=1300 audit(1696274884.719:8000): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1427c50 a2=3 a3=1 items=0 ppid=1 pid=6071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.111196] audit: type=1327 audit(1696274884.719:8000): proctitle=737368643A20636F7265205B707269765D [ 185.130404] audit: type=1105 audit(1696274884.775:8001): pid=6071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.145922] audit: type=1103 audit(1696274884.787:8002): pid=6074 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.410210] audit: type=1106 audit(1696274885.055:8003): pid=6071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.423795] audit: type=1104 audit(1696274885.055:8004): pid=6071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.433416] kauditd_printk_skb: 1 callbacks suppressed [ 195.433421] audit: type=1130 audit(1696274895.079:8006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.118:22-139.178.89.65:36630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.625853] audit: type=1101 audit(1696274895.272:8007): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.638987] audit: type=1103 audit(1696274895.285:8008): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.649130] audit: type=1006 audit(1696274895.289:8009): pid=6085 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 195.655735] audit: type=1300 audit(1696274895.289:8009): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef59ffe0 a2=3 a3=1 items=0 ppid=1 pid=6085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.667351] audit: type=1327 audit(1696274895.289:8009): proctitle=737368643A20636F7265205B707269765D [ 195.689276] audit: type=1105 audit(1696274895.335:8010): pid=6085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.702347] audit: type=1103 audit(1696274895.348:8011): pid=6088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.966064] audit: type=1106 audit(1696274895.612:8012): pid=6085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.979016] audit: type=1104 audit(1696274895.612:8013): pid=6085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.988139] kauditd_printk_skb: 1 callbacks suppressed [ 205.988145] audit: type=1130 audit(1696274905.633:8015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.118:22-139.178.89.65:54894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.176212] audit: type=1101 audit(1696274905.821:8016): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.187022] audit: type=1103 audit(1696274905.825:8017): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.197340] audit: type=1006 audit(1696274905.825:8018): pid=6097 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 206.203829] audit: type=1300 audit(1696274905.825:8018): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff987edf0 a2=3 a3=1 items=0 ppid=1 pid=6097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.214512] audit: type=1327 audit(1696274905.825:8018): proctitle=737368643A20636F7265205B707269765D [ 206.236279] audit: type=1105 audit(1696274905.881:8019): pid=6097 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.251734] audit: type=1103 audit(1696274905.895:8020): pid=6100 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.511045] audit: type=1106 audit(1696274906.156:8021): pid=6097 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.523125] audit: type=1104 audit(1696274906.157:8022): pid=6097 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 216.535619] kauditd_printk_skb: 1 callbacks suppressed [ 216.535623] audit: type=1130 audit(1696274916.181:8024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.118:22-139.178.89.65:46572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.724369] audit: type=1101 audit(1696274916.370:8025): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 216.738072] audit: type=1103 audit(1696274916.383:8026): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 216.748963] audit: type=1006 audit(1696274916.383:8027): pid=6135 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 216.756533] audit: type=1300 audit(1696274916.383:8027): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb231400 a2=3 a3=1 items=0 ppid=1 pid=6135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.767433] audit: type=1327 audit(1696274916.383:8027): proctitle=737368643A20636F7265205B707269765D [ 216.785667] audit: type=1105 audit(1696274916.430:8028): pid=6135 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 216.801617] audit: type=1103 audit(1696274916.447:8029): pid=6138 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 217.061672] audit: type=1106 audit(1696274916.707:8030): pid=6135 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 217.080536] audit: type=1104 audit(1696274916.710:8031): pid=6135 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 227.086918] kauditd_printk_skb: 1 callbacks suppressed [ 227.086923] audit: type=1130 audit(1696274926.733:8033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.118:22-139.178.89.65:50418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 227.277787] audit: type=1101 audit(1696274926.924:8034): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 227.289011] audit: type=1103 audit(1696274926.930:8035): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 227.299357] audit: type=1006 audit(1696274926.930:8036): pid=6148 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 227.305566] audit: type=1300 audit(1696274926.930:8036): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff55d0d10 a2=3 a3=1 items=0 ppid=1 pid=6148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 227.316719] audit: type=1327 audit(1696274926.930:8036): proctitle=737368643A20636F7265205B707269765D [ 227.339310] audit: type=1105 audit(1696274926.985:8037): pid=6148 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 227.353144] audit: type=1103 audit(1696274926.999:8038): pid=6151 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 227.614322] audit: type=1106 audit(1696274927.261:8039): pid=6148 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 227.636403] audit: type=1104 audit(1696274927.273:8040): pid=6148 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 233.171260] kauditd_printk_skb: 1 callbacks suppressed [ 233.171265] audit: type=1334 audit(1696274932.818:8042): prog-id=3318 op=LOAD [ 233.176630] audit: type=1300 audit(1696274932.818:8042): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffebea5288 a2=74 a3=0 items=0 ppid=6178 pid=6234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.188223] audit: type=1327 audit(1696274932.818:8042): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 233.192492] audit: type=1334 audit(1696274932.818:8043): prog-id=3318 op=UNLOAD [ 233.195492] audit: type=1334 audit(1696274932.818:8044): prog-id=3319 op=LOAD [ 233.198560] audit: type=1300 audit(1696274932.818:8044): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffebea42c8 a2=90 a3=2 items=0 ppid=6178 pid=6234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.210097] audit: type=1327 audit(1696274932.818:8044): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 233.213948] audit: type=1334 audit(1696274932.820:8045): prog-id=3319 op=UNLOAD [ 233.216774] audit: type=1334 audit(1696274932.820:8046): prog-id=3320 op=LOAD [ 233.219453] audit: type=1300 audit(1696274932.820:8046): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffebea42c8 a2=90 a3=2 items=0 ppid=6178 pid=6234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 234.027940] systemd-journald[1520]: Data hash table of /var/log/journal/ec29428ba2034325ae197aa206fd650d/system.journal has a fill level at 75.0 (33392 of 44522 items, 25165824 file size, 753 bytes per hash table item), suggesting rotation. [ 234.043141] systemd-journald[1520]: /var/log/journal/ec29428ba2034325ae197aa206fd650d/system.journal: Journal header limits reached or header out-of-date, rotating. [ 238.176982] kauditd_printk_skb: 4136 callbacks suppressed [ 238.176987] audit: type=1325 audit(1696274937.824:9976): table=filter:515 family=2 entries=1 op=nft_unregister_rule pid=6582 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 238.187070] audit: type=1300 audit(1696274937.824:9976): arch=c00000b7 syscall=211 success=yes exit=592 a0=3 a1=ffffe107a850 a2=0 a3=ffffbf3d95c0 items=0 ppid=6178 pid=6582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 238.207120] audit: type=1327 audit(1696274937.824:9976): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D6F006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E636C7573746572206F6E206C78632B20666F727761726420616363657074002D6A00414343455054 [ 238.218136] audit: type=1325 audit(1696274937.854:9977): table=filter:516 family=2 entries=1 op=nft_unregister_rule pid=6583 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 238.224708] audit: type=1300 audit(1696274937.854:9977): arch=c00000b7 syscall=211 success=yes exit=592 a0=3 a1=fffff5356bb0 a2=0 a3=ffff90ecc5c0 items=0 ppid=6178 pid=6583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 238.237195] audit: type=1327 audit(1696274937.854:9977): proctitle=69707461626C6573002D770035002D740066696C746572002D44004F4C445F43494C49554D5F464F5257415244002D69006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20636C75737465722D3E616E79206F6E206C78632B20666F72776172642061636365707420286E6F6465706F7274 [ 238.256790] audit: type=1106 audit(1696274937.884:9978): pid=6482 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 238.268357] audit: type=1104 audit(1696274937.884:9979): pid=6482 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 238.277713] audit: type=1131 audit(1696274937.896:9980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.118:22-139.178.89.65:37176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 238.287799] audit: type=1325 audit(1696274937.901:9981): table=filter:517 family=2 entries=1 op=nft_unregister_chain pid=6587 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 238.520721] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 239.167775] eth0: renamed from tmp3ed09 [ 239.179017] IPv6: ADDRCONF(NETDEV_CHANGE): lxca46e867ee9ef: link becomes ready [ 239.296225] eth0: renamed from tmpce4ba [ 239.332674] IPv6: ADDRCONF(NETDEV_CHANGE): lxc8298f70e8459: link becomes ready This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:29:00 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:29:01 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: [ 248.257696] kauditd_printk_skb: 35 callbacks suppressed [ 248.257701] audit: type=1130 audit(1696274947.905:9993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.118:22-139.178.89.65:48762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 248.441056] audit: type=1101 audit(1696274948.088:9994): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 248.454051] audit: type=1103 audit(1696274948.101:9995): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 248.464316] audit: type=1006 audit(1696274948.101:9996): pid=6762 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 248.470678] audit: type=1300 audit(1696274948.101:9996): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc522440 a2=3 a3=1 items=0 ppid=1 pid=6762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 248.481262] audit: type=1327 audit(1696274948.101:9996): proctitle=737368643A20636F7265205B707269765D [ 248.502754] audit: type=1105 audit(1696274948.149:9997): pid=6762 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 248.515917] audit: type=1103 audit(1696274948.163:9998): pid=6765 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 248.771544] audit: type=1106 audit(1696274948.419:9999): pid=6762 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 248.783417] audit: type=1104 audit(1696274948.423:10000): pid=6762 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 258.797372] kauditd_printk_skb: 1 callbacks suppressed [ 258.797377] audit: type=1130 audit(1696274958.444:10002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.118:22-139.178.89.65:57828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 258.986376] audit: type=1101 audit(1696274958.633:10003): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 258.996787] audit: type=1103 audit(1696274958.637:10004): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 259.006904] audit: type=1006 audit(1696274958.637:10005): pid=6787 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 259.013820] audit: type=1300 audit(1696274958.637:10005): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4489a50 a2=3 a3=1 items=0 ppid=1 pid=6787 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 259.024238] audit: type=1327 audit(1696274958.637:10005): proctitle=737368643A20636F7265205B707269765D [ 259.045854] audit: type=1105 audit(1696274958.692:10006): pid=6787 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 259.057292] audit: type=1103 audit(1696274958.699:10007): pid=6790 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 259.328405] audit: type=1106 audit(1696274958.975:10008): pid=6787 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 259.340971] audit: type=1104 audit(1696274958.979:10009): pid=6787 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 269.353883] kauditd_printk_skb: 1 callbacks suppressed [ 269.353890] audit: type=1130 audit(1696274969.000:10011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.118:22-139.178.89.65:47268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 269.540843] audit: type=1101 audit(1696274969.187:10012): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 269.552340] audit: type=1103 audit(1696274969.192:10013): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 269.563907] audit: type=1006 audit(1696274969.192:10014): pid=6800 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 269.570446] audit: type=1300 audit(1696274969.192:10014): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbcbd460 a2=3 a3=1 items=0 ppid=1 pid=6800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 269.585996] audit: type=1327 audit(1696274969.192:10014): proctitle=737368643A20636F7265205B707269765D [ 269.590625] audit: type=1105 audit(1696274969.223:10015): pid=6800 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 269.602488] audit: type=1103 audit(1696274969.237:10016): pid=6803 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 269.854283] audit: type=1106 audit(1696274969.501:10017): pid=6800 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 269.866989] audit: type=1104 audit(1696274969.505:10018): pid=6800 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.625323] kauditd_printk_skb: 9 callbacks suppressed [ 275.625329] audit: type=1106 audit(1696274975.270:10026): pid=6812 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.643653] audit: type=1104 audit(1696274975.270:10027): pid=6812 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.653416] audit: type=1131 audit(1696274975.286:10028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.118:22-139.178.89.65:47284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 275.665659] audit: type=1130 audit(1696274975.300:10029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.30.118:22-139.178.89.65:47286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 275.846105] audit: type=1101 audit(1696274975.492:10030): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.857002] audit: type=1103 audit(1696274975.496:10031): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 275.867059] audit: type=1006 audit(1696274975.496:10032): pid=7095 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 275.873453] audit: type=1300 audit(1696274975.496:10032): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb265d50 a2=3 a3=1 items=0 ppid=1 pid=7095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 275.885175] audit: type=1327 audit(1696274975.496:10032): proctitle=737368643A20636F7265205B707269765D [ 275.894934] audit: type=1105 audit(1696274975.541:10033): pid=7095 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 284.091813] kauditd_printk_skb: 1 callbacks suppressed [ 284.091818] audit: type=1334 audit(1696274983.739:10035): prog-id=4145 op=LOAD [ 284.097371] audit: type=1300 audit(1696274983.739:10035): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffde1bf308 a2=74 a3=0 items=0 ppid=7410 pid=7464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 284.109834] audit: type=1327 audit(1696274983.739:10035): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 284.114296] audit: type=1334 audit(1696274983.739:10036): prog-id=4145 op=UNLOAD [ 284.118565] audit: type=1334 audit(1696274983.739:10037): prog-id=4146 op=LOAD [ 284.122852] audit: type=1300 audit(1696274983.739:10037): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffde1be348 a2=90 a3=2 items=0 ppid=7410 pid=7464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 284.134817] audit: type=1327 audit(1696274983.739:10037): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 284.139101] audit: type=1334 audit(1696274983.741:10038): prog-id=4146 op=UNLOAD [ 284.142037] audit: type=1334 audit(1696274983.741:10039): prog-id=4147 op=LOAD [ 284.144839] audit: type=1300 audit(1696274983.741:10039): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffde1be348 a2=90 a3=2 items=0 ppid=7410 pid=7464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 285.062421] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106(gcm-aes-ce))) [ 289.094958] kauditd_printk_skb: 4005 callbacks suppressed [ 289.094963] audit: type=1325 audit(1696274988.741:11902): table=raw:552 family=2 entries=1 op=nft_register_rule pid=7801 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 289.102685] audit: type=1300 audit(1696274988.741:11902): arch=c00000b7 syscall=211 success=yes exit=756 a0=3 a1=ffffdcf13de0 a2=0 a3=ffff957905c0 items=0 ppid=7410 pid=7801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 289.114751] audit: type=1327 audit(1696274988.741:11902): proctitle=69707461626C6573002D770035002D7400726177002D410043494C49554D5F4F55545055545F726177002D6F0063696C69756D5F686F7374002D6D006D61726B002D2D6D61726B00307830303030303830302F30783030303030653030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A204E4F545241 [ 289.126211] audit: type=1325 audit(1696274988.743:11903): table=filter:553 family=2 entries=1 op=nft_register_rule pid=7802 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 289.133952] audit: type=1300 audit(1696274988.743:11903): arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffdc710770 a2=0 a3=ffffa65aa5c0 items=0 ppid=7410 pid=7802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 289.150463] audit: type=1327 audit(1696274988.743:11903): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F4F5554505554002D6D006D61726B002D2D6D61726B00307830303030306130302F30786666666666656666002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A2041434345505420666F722070726F78792072657475 [ 289.170529] audit: type=1325 audit(1696274988.749:11904): table=filter:554 family=2 entries=1 op=nft_register_rule pid=7803 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 289.177627] audit: type=1300 audit(1696274988.749:11904): arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe88d9c80 a2=0 a3=ffffa2d505c0 items=0 ppid=7410 pid=7803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 289.190439] audit: type=1327 audit(1696274988.749:11904): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F4F5554505554002D6D006D61726B002D2D6D61726B00307830303030303830302F30783030303030653030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A2041434345505420666F72206C372070726F78792075 [ 289.201273] audit: type=1325 audit(1696274988.754:11905): table=mangle:555 family=2 entries=1 op=nft_register_rule pid=7804 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 289.946272] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 290.970973] eth0: renamed from tmp54d19 [ 290.977175] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 290.979755] IPv6: ADDRCONF(NETDEV_CHANGE): lxc67ff72f29963: link becomes ready This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:29:52 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:29:53 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: [ 294.095690] kauditd_printk_skb: 3298 callbacks suppressed [ 294.095694] audit: type=1400 audit(1696274993.742:13440): avc: denied { confidentiality } for pid=8210 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 294.109975] audit: type=1300 audit(1696274993.742:13440): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffeaa29a68 a2=90 a3=2 items=0 ppid=8129 pid=8210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 294.123126] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.124493] audit: type=1327 audit(1696274993.742:13440): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 294.125451] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 294.130117] audit: type=1400 audit(1696274993.753:13441): avc: denied { confidentiality } for pid=8210 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 [ 294.131819] audit: backlog limit exceeded [ 294.141209] audit: type=1300 audit(1696274993.753:13441): arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffeaa29a68 a2=90 a3=2 items=0 ppid=8129 pid=8210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 294.153303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.155401] audit: audit_lost=72 audit_rate_limit=0 audit_backlog_limit=64 [ 298.875138] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 299.155724] kauditd_printk_skb: 1246 callbacks suppressed [ 299.155729] audit: type=1400 audit(1696274998.802:13948): avc: denied { open } for pid=8129 comm="cilium-agent" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=0 [ 299.171029] audit: type=1300 audit(1696274998.802:13948): arch=c00000b7 syscall=241 success=no exit=-13 a0=4000bc7728 a1=ffffffffffffffff a2=0 a3=ffffffffffffffff items=0 ppid=7118 pid=8129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-agent" exe="/usr/bin/cilium-agent" subj=system_u:system_r:kernel_t:s0 key=(null) [ 299.208589] audit: type=1327 audit(1696274998.802:13948): proctitle=63696C69756D2D6167656E74002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170 This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:30:01 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: This is ip-172-31-30-118 (Linux aarch64 5.15.132-flatcar) 19:30:02 SSH host key: SHA256:+pVQrhwyhdAKdtb9BJuW2bfIcGSqj8zDmo6HNNM9MQQ (RSA) SSH host key: SHA256:ZuoGwggX6yCMVoGqxHhwuxqpMd7SB/fGcv9vPqvWU7g (ECDSA) SSH host key: SHA256:Wv26Jy/5MoD9HrXvIAOi9UaHiplumqTbYLEF3Pv8SXc (ED25519) eth0: 172.31.30.118 fe80::410:d2ff:fe2d:97fd ip-172-31-30-118 login: [ 324.214936] audit: type=1334 audit(1696275023.861:13949): prog-id=5799 op=LOAD [ 324.217950] audit: type=1300 audit(1696275023.861:13949): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdec17bf8 a2=74 a3=0 items=0 ppid=8776 pid=8832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 324.230254] audit: type=1327 audit(1696275023.861:13949): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 324.234221] audit: type=1334 audit(1696275023.870:13950): prog-id=5799 op=UNLOAD [ 324.236955] audit: type=1334 audit(1696275023.870:13951): prog-id=5800 op=LOAD [ 324.239638] audit: type=1300 audit(1696275023.870:13951): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdec16c38 a2=90 a3=2 items=0 ppid=8776 pid=8832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 324.250835] audit: type=1327 audit(1696275023.870:13951): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 324.255151] audit: type=1334 audit(1696275023.876:13952): prog-id=5800 op=UNLOAD [ 324.258230] audit: type=1334 audit(1696275023.876:13953): prog-id=5801 op=LOAD [ 324.261214] audit: type=1300 audit(1696275023.876:13953): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdec16c38 a2=90 a3=2 items=0 ppid=8776 pid=8832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 329.215436] kauditd_printk_skb: 4013 callbacks suppressed [ 329.215441] audit: type=1325 audit(1696275028.861:15838): table=filter:790 family=2 entries=1 op=nft_register_rule pid=9154 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 329.223589] audit: type=1300 audit(1696275028.861:15838): arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd30b1670 a2=0 a3=ffffb78755c0 items=0 ppid=8776 pid=9154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 329.235606] audit: type=1327 audit(1696275028.861:15838): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F464F5257415244002D6D006D61726B002D2D6D61726B00307830303030306430302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D2066696C74 [ 329.246116] audit: type=1325 audit(1696275028.871:15839): table=filter:791 family=2 entries=1 op=nft_register_rule pid=9155 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 329.252038] audit: type=1300 audit(1696275028.871:15839): arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff5882e20 a2=0 a3=ffffafd665c0 items=0 ppid=8776 pid=9155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 329.264093] audit: type=1327 audit(1696275028.871:15839): proctitle=69707461626C6573002D770035002D740066696C746572002D410043494C49554D5F464F5257415244002D6D006D61726B002D2D6D61726B00307830303030306530302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D2066696C74 [ 329.274725] audit: type=1325 audit(1696275028.876:15840): table=nat:792 family=2 entries=1 op=nft_register_rule pid=9156 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 329.280485] audit: type=1300 audit(1696275028.876:15840): arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffde12d780 a2=0 a3=ffff8b4865c0 items=0 ppid=8776 pid=9156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 329.292443] audit: type=1327 audit(1696275028.876:15840): proctitle=69707461626C6573002D770035002D74006E6174002D410043494C49554D5F504F53545F6E6174002D6D006D61726B002D2D6D61726B00307830303030306430302F30783030303030663030002D6D00636F6D6D656E74002D2D636F6D6D656E74006578636C756465207866726D206D61726B732066726F6D206E6174204349 [ 329.303352] audit: type=1325 audit(1696275028.882:15841): table=nat:793 family=2 entries=1 op=nft_register_rule pid=9157 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 330.125270] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready