1707504903.980:1001): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 92.668812] audit: type=1400 audit(1707504903.980:1002): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 92.680537] audit: type=1400 audit(1707504903.980:1003): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 92.687566] audit: type=1400 audit(1707504903.980:1004): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 92.692768] audit: type=1400 audit(1707504903.980:1005): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.015795] kauditd_printk_skb: 303 callbacks suppressed [ 96.015799] audit: type=1400 audit(1707504907.343:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.021669] audit: type=1400 audit(1707504907.343:1093): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.027491] audit: type=1400 audit(1707504907.343:1094): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.036186] audit: type=1400 audit(1707504907.343:1095): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.042526] audit: type=1400 audit(1707504907.343:1096): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.048370] audit: type=1400 audit(1707504907.343:1097): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.057913] audit: type=1400 audit(1707504907.343:1098): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.073012] audit: type=1400 audit(1707504907.343:1099): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.083111] audit: type=1400 audit(1707504907.343:1100): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.090593] audit: type=1400 audit(1707504907.345:1101): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.154398] kauditd_printk_skb: 185 callbacks suppressed [ 102.154402] audit: type=1400 audit(1707504913.482:1154): avc: denied { perfmon } for pid=3382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.160251] audit: type=1300 audit(1707504913.482:1154): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3293 pid=3382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.166891] audit: type=1327 audit(1707504913.482:1154): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039383835393631643466656130653865646533313935333233326265 [ 102.176058] audit: type=1400 audit(1707504913.482:1155): avc: denied { bpf } for pid=3382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.181470] audit: type=1400 audit(1707504913.482:1155): avc: denied { bpf } for pid=3382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.188523] audit: type=1400 audit(1707504913.482:1155): avc: denied { bpf } for pid=3382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.198706] audit: type=1400 audit(1707504913.482:1155): avc: denied { perfmon } for pid=3382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.213017] audit: type=1400 audit(1707504913.482:1155): avc: denied { perfmon } for pid=3382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.219632] audit: type=1400 audit(1707504913.482:1155): avc: denied { perfmon } for pid=3382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.229010] audit: type=1400 audit(1707504913.482:1155): avc: denied { perfmon } for pid=3382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.651765] kauditd_printk_skb: 324 callbacks suppressed [ 107.651768] audit: type=1325 audit(1707504918.979:1250): table=filter:101 family=2 entries=16 op=nft_register_rule pid=3782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 107.656871] audit: type=1300 audit(1707504918.979:1250): arch=c000003e syscall=46 success=yes exit=5660 a0=3 a1=7ffe6598e1d0 a2=0 a3=7ffe6598e1bc items=0 ppid=2987 pid=3782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.668011] audit: type=1327 audit(1707504918.979:1250): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 107.674377] audit: type=1325 audit(1707504918.980:1251): table=nat:102 family=2 entries=12 op=nft_register_rule pid=3782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 107.678375] audit: type=1300 audit(1707504918.980:1251): arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7ffe6598e1d0 a2=0 a3=31030 items=0 ppid=2987 pid=3782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.686569] audit: type=1327 audit(1707504918.980:1251): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 112.351186] audit: type=1400 audit(1707504923.679:1252): avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 112.356436] audit: type=1300 audit(1707504923.679:1252): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3488 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.370825] audit: type=1327 audit(1707504923.679:1252): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233376239343637306237323835383465396665646330306131333730 [ 112.378411] audit: type=1400 audit(1707504923.679:1253): avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 113.552469] kauditd_printk_skb: 39 callbacks suppressed [ 113.552473] audit: type=1334 audit(1707504924.880:1258): prog-id=165 op=UNLOAD [ 116.814047] audit: type=1130 audit(1707504928.142:1259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.122:22-134.209.145.223:60342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 118.161499] audit: type=1100 audit(1707504929.489:1260): pid=4058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="danialw" exe="/usr/sbin/sshd" hostname=134.209.145.223 addr=134.209.145.223 terminal=ssh res=failed' [ 121.184948] audit: type=1131 audit(1707504932.512:1261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.122:22-134.209.145.223:60342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 123.003391] audit: type=1400 audit(1707504934.331:1262): avc: denied { perfmon } for pid=4072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.008214] audit: type=1300 audit(1707504934.331:1262): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3488 pid=4072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.016514] audit: type=1327 audit(1707504934.331:1262): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362343362643466396238333230626136373365393238323065626339 [ 123.026744] audit: type=1400 audit(1707504934.331:1263): avc: denied { bpf } for pid=4072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.032450] audit: type=1400 audit(1707504934.331:1263): avc: denied { bpf } for pid=4072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.037524] audit: type=1400 audit(1707504934.331:1263): avc: denied { bpf } for pid=4072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.042096] audit: type=1400 audit(1707504934.331:1263): avc: denied { perfmon } for pid=4072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.049036] audit: type=1400 audit(1707504934.331:1263): avc: denied { perfmon } for pid=4072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.054317] audit: type=1400 audit(1707504934.331:1263): avc: denied { perfmon } for pid=4072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.170823] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 123.172481] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 125.713217] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 125.714707] IPv6: ADDRCONF(NETDEV_CHANGE): cali98ff04c56de: link becomes ready [ 126.392299] IPv6: ADDRCONF(NETDEV_CHANGE): cali6d50083869b: link becomes ready [ 126.501908] kauditd_printk_skb: 126 callbacks suppressed [ 126.501911] audit: type=1400 audit(1707504937.829:1293): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.509639] audit: type=1400 audit(1707504937.829:1294): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.514349] audit: type=1400 audit(1707504937.829:1295): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.519388] audit: type=1400 audit(1707504937.829:1296): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.524301] audit: type=1400 audit(1707504937.829:1297): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.528762] audit: type=1400 audit(1707504937.829:1298): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.550217] audit: type=1400 audit(1707504937.829:1299): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.555278] audit: type=1400 audit(1707504937.829:1300): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.559862] audit: type=1400 audit(1707504937.829:1301): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 126.567314] audit: type=1400 audit(1707504937.829:1302): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 127.700341] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 127.702383] IPv6: ADDRCONF(NETDEV_CHANGE): caliae75473e4f2: link becomes ready This is ip-172-31-21-122 (Linux x86_64 5.15.148-flatcar) 18:55:39 SSH host key: SHA256:0I2jHhQtp5guHJ8qGXT2ocWDEyvSGKY6TH8YL+eKD4w (ECDSA) SSH host key: SHA256:qp71Q+35uszHhJv+IYEe/AkNdh1ED7G5MB0BDgO2OsQ (RSA) SSH host key: SHA256:MsjI+bsQtT/u4iuqLQPjcAnvraT4M1VP22PsQqFgD/w (ED25519) eth0: 172.31.21.122 fe80::46c:3cff:fe5b:7393 ip-172-31-21-122 login: This is ip-172-31-21-122 (Linux x86_64 5.15.148-flatcar) 18:55:40 SSH host key: SHA256:0I2jHhQtp5guHJ8qGXT2ocWDEyvSGKY6TH8YL+eKD4w (ECDSA) SSH host key: SHA256:qp71Q+35uszHhJv+IYEe/AkNdh1ED7G5MB0BDgO2OsQ (RSA) SSH host key: SHA256:MsjI+bsQtT/u4iuqLQPjcAnvraT4M1VP22PsQqFgD/w (ED25519) eth0: 172.31.21.122 fe80::46c:3cff:fe5b:7393 ip-172-31-21-122 login: This is ip-172-31-21-122 (Linux x86_64 5.15.148-flatcar) 18:55:41 SSH host key: SHA256:0I2jHhQtp5guHJ8qGXT2ocWDEyvSGKY6TH8YL+eKD4w (ECDSA) SSH host key: SHA256:qp71Q+35uszHhJv+IYEe/AkNdh1ED7G5MB0BDgO2OsQ (RSA) SSH host key: SHA256:MsjI+bsQtT/u4iuqLQPjcAnvraT4M1VP22PsQqFgD/w (ED25519) eth0: 172.31.21.122 fe80::46c:3cff:fe5b:7393 ip-172-31-21-122 login: [ 130.816907] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 130.822110] IPv6: ADDRCONF(NETDEV_CHANGE): cali80dc81287cd: link becomes ready This is ip-172-31-21-122 (Linux x86_64 5.15.148-flatcar) 18:55:44 SSH host key: SHA256:0I2jHhQtp5guHJ8qGXT2ocWDEyvSGKY6TH8YL+eKD4w (ECDSA) SSH host key: SHA256:qp71Q+35uszHhJv+IYEe/AkNdh1ED7G5MB0BDgO2OsQ (RSA) SSH host key: SHA256:MsjI+bsQtT/u4iuqLQPjcAnvraT4M1VP22PsQqFgD/w (ED25519) eth0: 172.31.21.122 fe80::46c:3cff:fe5b:7393 ip-172-31-21-122 login: [ 133.442630] kauditd_printk_skb: 350 callbacks suppressed [ 133.442632] audit: type=1325 audit(1707504944.770:1407): table=filter:109 family=2 entries=9 op=nft_register_rule pid=4910 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.455927] audit: type=1300 audit(1707504944.770:1407): arch=c000003e syscall=46 success=yes exit=2844 a0=3 a1=7fffe65d01b0 a2=0 a3=7fffe65d019c items=0 ppid=2987 pid=4910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.468267] audit: type=1327 audit(1707504944.770:1407): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 133.473413] audit: type=1325 audit(1707504944.795:1408): table=nat:110 family=2 entries=25 op=nft_register_chain pid=4910 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.478899] audit: type=1300 audit(1707504944.795:1408): arch=c000003e syscall=46 success=yes exit=8252 a0=3 a1=7fffe65d01b0 a2=0 a3=7fffe65d019c items=0 ppid=2987 pid=4910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.488636] audit: type=1327 audit(1707504944.795:1408): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 133.493345] audit: type=1130 audit(1707504944.806:1409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.122:22-139.178.68.195:35112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 133.580295] audit: type=1400 audit(1707504944.908:1410): avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 133.588236] audit: type=1300 audit(1707504944.908:1410): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4804 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.600462] audit: type=1327 audit(1707504944.908:1410): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632323264643636343532316134626630656634633832303635363137 This is ip-172-31-21-122 (Linux x86_64 5.15.148-flatcar) 18:55:47 SSH host key: SHA256:0I2jHhQtp5guHJ8qGXT2ocWDEyvSGKY6TH8YL+eKD4w (ECDSA) SSH host key: SHA256:qp71Q+35uszHhJv+IYEe/AkNdh1ED7G5MB0BDgO2OsQ (RSA) SSH host key: SHA256:MsjI+bsQtT/u4iuqLQPjcAnvraT4M1VP22PsQqFgD/w (ED25519) eth0: 172.31.21.122 fe80::46c:3cff:fe5b:7393 ip-172-31-21-122 login: This is ip-172-31-21-122 (Linux x86_64 5.15.148-flatcar) 18:55:48 SSH host key: SHA256:0I2jHhQtp5guHJ8qGXT2ocWDEyvSGKY6TH8YL+eKD4w (ECDSA) SSH host key: SHA256:qp71Q+35uszHhJv+IYEe/AkNdh1ED7G5MB0BDgO2OsQ (RSA) SSH host key: SHA256:MsjI+bsQtT/u4iuqLQPjcAnvraT4M1VP22PsQqFgD/w (ED25519) eth0: 172.31.21.122 fe80::46c:3cff:fe5b:7393 ip-172-31-21-122 login: [ 138.602420] kauditd_printk_skb: 202 callbacks suppressed [ 138.602423] audit: type=1400 audit(1707504949.930:1456): avc: denied { watch } for pid=2518 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c677,c784 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 138.610451] audit: type=1300 audit(1707504949.930:1456): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002494100 a2=fc6 a3=0 items=0 ppid=2354 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c677,c784 key=(null) [ 138.620094] audit: type=1327 audit(1707504949.930:1456): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 138.626798] audit: type=1400 audit(1707504949.936:1457): avc: denied { watch } for pid=2518 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c677,c784 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 138.633258] audit: type=1300 audit(1707504949.936:1457): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002494120 a2=fc6 a3=0 items=0 ppid=2354 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c677,c784 key=(null) [ 138.641332] audit: type=1327 audit(1707504949.936:1457): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 138.648277] audit: type=1400 audit(1707504949.937:1458): avc: denied { watch } for pid=2518 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c677,c784 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 138.655957] audit: type=1300 audit(1707504949.937:1458): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002494240 a2=fc6 a3=0 items=0 ppid=2354 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c677,c784 key=(null) [ 138.665194] audit: type=1327 audit(1707504949.937:1458): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 138.678881] audit: type=1400 audit(1707504949.938:1459): avc: denied { watch } for pid=2518 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c677,c784 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 145.095492] kauditd_printk_skb: 13 callbacks suppressed [ 145.095494] audit: type=1130 audit(1707504956.423:1469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.122:22-139.178.68.195:60982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.282353] audit: type=1101 audit(1707504956.610:1470): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.302120] audit: type=1103 audit(1707504956.630:1471): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.311223] audit: type=1006 audit(1707504956.630:1472): pid=5373 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 145.318221] audit: type=1300 audit(1707504956.630:1472): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde5846f30 a2=3 a3=0 items=0 ppid=1 pid=5373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.328746] audit: type=1327 audit(1707504956.630:1472): proctitle=737368643A20636F7265205B707269765D [ 145.330801] audit: type=1105 audit(1707504956.657:1473): pid=5373 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.337277] audit: type=1103 audit(1707504956.660:1474): pid=5375 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.531858] audit: type=1106 audit(1707504956.859:1475): pid=5373 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.539435] audit: type=1104 audit(1707504956.861:1476): pid=5373 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 150.575739] kauditd_printk_skb: 1 callbacks suppressed [ 150.575743] audit: type=1130 audit(1707504961.903:1478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.21.122:22-139.178.68.195:60988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.880771] audit: type=1101 audit(1707504962.208:1479): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 150.898351] audit: type=1103 audit(1707504962.226:1480): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 150.911435] audit: type=1006 audit(1707504962.226:1481): pid=5386 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 150.922908] audit: type=1300 audit(1707504962.226:1481): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff436c2af0 a2=3 a3=0 items=0 ppid=1 pid=5386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.930739] audit: type=1327 audit(1707504962.226:1481): proctitle=737368643A20636F7265205B707269765D [ 150.934125] audit: type=1105 audit(1707504962.262:1482): pid=5386 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 150.941823] audit: type=1103 audit(1707504962.265:1483): pid=5388 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 151.214439] audit: type=1106 audit(1707504962.542:1484): pid=5386 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 151.224237] audit: type=1104 audit(1707504962.542:1485): pid=5386 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.055184] kauditd_printk_skb: 23 callbacks suppressed [ 159.055187] audit: type=1130 audit(1707504970.383:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.122:22-139.178.68.195:55488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.233231] audit: type=1101 audit(1707504970.561:1506): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.244823] audit: type=1103 audit(1707504970.571:1507): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.251142] audit: type=1006 audit(1707504970.571:1508): pid=5433 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 159.256786] audit: type=1300 audit(1707504970.571:1508): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe36306260 a2=3 a3=0 items=0 ppid=1 pid=5433 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.264966] audit: type=1327 audit(1707504970.571:1508): proctitle=737368643A20636F7265205B707269765D [ 159.272644] audit: type=1105 audit(1707504970.600:1509): pid=5433 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.279531] audit: type=1103 audit(1707504970.607:1510): pid=5435 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.467928] audit: type=1106 audit(1707504970.796:1511): pid=5433 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.474773] audit: type=1104 audit(1707504970.796:1512): pid=5433 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.496348] kauditd_printk_skb: 1 callbacks suppressed [ 164.496351] audit: type=1130 audit(1707504975.825:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.122:22-139.178.68.195:55498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.661742] audit: type=1101 audit(1707504975.990:1515): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.668982] audit: type=1103 audit(1707504975.996:1516): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.676993] audit: type=1006 audit(1707504975.996:1517): pid=5472 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 164.684168] audit: type=1300 audit(1707504975.996:1517): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9d3353c0 a2=3 a3=0 items=0 ppid=1 pid=5472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.711186] audit: type=1327 audit(1707504975.996:1517): proctitle=737368643A20636F7265205B707269765D [ 164.723510] audit: type=1105 audit(1707504976.052:1518): pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.736644] audit: type=1103 audit(1707504976.065:1519): pid=5474 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.052227] audit: type=1106 audit(1707504976.381:1520): pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.062244] audit: type=1104 audit(1707504976.381:1521): pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.078637] kauditd_printk_skb: 1 callbacks suppressed [ 170.078640] audit: type=1130 audit(1707504981.407:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.122:22-139.178.68.195:36530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.254623] audit: type=1101 audit(1707504981.583:1524): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.266176] audit: type=1103 audit(1707504981.595:1525): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.272252] audit: type=1006 audit(1707504981.595:1526): pid=5485 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 170.276474] audit: type=1300 audit(1707504981.595:1526): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddb4e0690 a2=3 a3=0 items=0 ppid=1 pid=5485 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.283261] audit: type=1327 audit(1707504981.595:1526): proctitle=737368643A20636F7265205B707269765D [ 170.298087] audit: type=1105 audit(1707504981.623:1527): pid=5485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.304747] audit: type=1103 audit(1707504981.629:1528): pid=5487 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.519608] audit: type=1106 audit(1707504981.847:1529): pid=5485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.527183] audit: type=1104 audit(1707504981.847:1530): pid=5485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.546187] kauditd_printk_skb: 1 callbacks suppressed [ 175.546192] audit: type=1130 audit(1707504986.875:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.122:22-139.178.68.195:43418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.724010] audit: type=1101 audit(1707504987.053:1533): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.731300] audit: type=1103 audit(1707504987.060:1534): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.738049] audit: type=1006 audit(1707504987.060:1535): pid=5523 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 175.742554] audit: type=1300 audit(1707504987.060:1535): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd721485b0 a2=3 a3=0 items=0 ppid=1 pid=5523 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.749420] audit: type=1327 audit(1707504987.060:1535): proctitle=737368643A20636F7265205B707269765D [ 175.751471] audit: type=1105 audit(1707504987.079:1536): pid=5523 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.760149] audit: type=1103 audit(1707504987.081:1537): pid=5525 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.961765] audit: type=1106 audit(1707504987.290:1538): pid=5523 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.969253] audit: type=1104 audit(1707504987.291:1539): pid=5523 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 180.481036] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 180.482487] IPv6: ADDRCONF(NETDEV_CHANGE): cali2ed41a88c26: link becomes ready [ 180.692458] kauditd_printk_skb: 49 callbacks suppressed [ 180.692461] audit: type=1325 audit(1707504992.021:1571): table=filter:121 family=2 entries=59 op=nft_register_chain pid=5639 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 180.699263] audit: type=1300 audit(1707504992.021:1571): arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7ffcd77fdd30 a2=0 a3=7ffcd77fdd1c items=0 ppid=4970 pid=5639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.712021] audit: type=1327 audit(1707504992.021:1571): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 180.735666] audit: type=1400 audit(1707504992.063:1572): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.750826] audit: type=1400 audit(1707504992.063:1573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.761336] audit: type=1400 audit(1707504992.063:1574): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.767623] audit: type=1400 audit(1707504992.063:1575): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.773861] audit: type=1400 audit(1707504992.063:1576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.783261] audit: type=1400 audit(1707504992.063:1577): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.788948] audit: type=1400 audit(1707504992.063:1578): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-21-122 (Linux x86_64 5.15.148-flatcar) 18:56:34 SSH host key: SHA256:0I2jHhQtp5guHJ8qGXT2ocWDEyvSGKY6TH8YL+eKD4w (ECDSA) SSH host key: SHA256:qp71Q+35uszHhJv+IYEe/AkNdh1ED7G5MB0BDgO2OsQ (RSA) SSH host key: SHA256:MsjI+bsQtT/u4iuqLQPjcAnvraT4M1VP22PsQqFgD/w (ED25519) eth0: 172.31.21.122 fe80::46c:3cff:fe5b:7393 ip-172-31-21-122 login: [ 186.322757] kauditd_printk_skb: 64 callbacks suppressed [ 186.322760] audit: type=1400 audit(1707504997.652:1602): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.329433] audit: type=1400 audit(1707504997.652:1603): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.334898] audit: type=1400 audit(1707504997.652:1604): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.348091] audit: type=1400 audit(1707504997.652:1605): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.353477] audit: type=1400 audit(1707504997.652:1606): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.359651] audit: type=1400 audit(1707504997.652:1607): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.364859] audit: type=1400 audit(1707504997.652:1608): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.370065] audit: type=1400 audit(1707504997.652:1609): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.374920] audit: type=1400 audit(1707504997.652:1610): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.379478] audit: type=1400 audit(1707504997.658:1611): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 192.098543] kauditd_printk_skb: 73 callbacks suppressed [ 192.098545] audit: type=1325 audit(1707505003.427:1634): table=filter:126 family=2 entries=10 op=nft_register_rule pid=5775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.104216] audit: type=1300 audit(1707505003.427:1634): arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7fffe538d310 a2=0 a3=7fffe538d2fc items=0 ppid=2987 pid=5775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.113022] audit: type=1327 audit(1707505003.427:1634): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 192.117271] audit: type=1325 audit(1707505003.438:1635): table=nat:127 family=2 entries=44 op=nft_register_rule pid=5775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.120913] audit: type=1300 audit(1707505003.438:1635): arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7fffe538d310 a2=0 a3=7fffe538d2fc items=0 ppid=2987 pid=5775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.128870] audit: type=1327 audit(1707505003.438:1635): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 192.472932] audit: type=1130 audit(1707505003.801:1636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.122:22-139.178.68.195:33984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.669324] audit: type=1101 audit(1707505003.998:1637): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 192.678641] audit: type=1103 audit(1707505004.007:1638): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 192.687548] audit: type=1006 audit(1707505004.007:1639): pid=5777 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 198.045715] kauditd_printk_skb: 31 callbacks suppressed [ 198.045718] audit: type=1130 audit(1707505009.375:1653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.122:22-139.178.68.195:48206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.238773] audit: type=1101 audit(1707505009.568:1654): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.244955] audit: type=1103 audit(1707505009.574:1655): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.250648] audit: type=1006 audit(1707505009.574:1656): pid=5790 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 198.256237] audit: type=1300 audit(1707505009.574:1656): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9d9a1410 a2=3 a3=0 items=0 ppid=1 pid=5790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.265644] audit: type=1327 audit(1707505009.574:1656): proctitle=737368643A20636F7265205B707269765D [ 198.268325] audit: type=1105 audit(1707505009.596:1657): pid=5790 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.275376] audit: type=1103 audit(1707505009.597:1658): pid=5792 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.499335] audit: type=1106 audit(1707505009.828:1659): pid=5790 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.496348] kauditd_printk_skb: 1 callbacks suppressed [ 164.496351] audit: type=1130 audit(1707504975.825:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.122:22-139.178.68.195:55498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.661742] audit: type=1101 audit(1707504975.990:1515): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.668982] audit: type=1103 audit(1707504975.996:1516): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.676993] audit: type=1006 audit(1707504975.996:1517): pid=5472 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 164.684168] audit: type=1300 audit(1707504975.996:1517): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9d3353c0 a2=3 a3=0 items=0 ppid=1 pid=5472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.711186] audit: type=1327 audit(1707504975.996:1517): proctitle=737368643A20636F7265205B707269765D [ 164.723510] audit: type=1105 audit(1707504976.052:1518): pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.736644] audit: type=1103 audit(1707504976.065:1519): pid=5474 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.052227] audit: type=1106 audit(1707504976.381:1520): pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.062244] audit: type=1104 audit(1707504976.381:1521): pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.078637] kauditd_printk_skb: 1 callbacks suppressed [ 170.078640] audit: type=1130 audit(1707504981.407:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.122:22-139.178.68.195:36530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.254623] audit: type=1101 audit(1707504981.583:1524): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.266176] audit: type=1103 audit(1707504981.595:1525): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.272252] audit: type=1006 audit(1707504981.595:1526): pid=5485 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 170.276474] audit: type=1300 audit(1707504981.595:1526): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddb4e0690 a2=3 a3=0 items=0 ppid=1 pid=5485 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.283261] audit: type=1327 audit(1707504981.595:1526): proctitle=737368643A20636F7265205B707269765D [ 170.298087] audit: type=1105 audit(1707504981.623:1527): pid=5485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.304747] audit: type=1103 audit(1707504981.629:1528): pid=5487 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.519608] audit: type=1106 audit(1707504981.847:1529): pid=5485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.527183] audit: type=1104 audit(1707504981.847:1530): pid=5485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.546187] kauditd_printk_skb: 1 callbacks suppressed [ 175.546192] audit: type=1130 audit(1707504986.875:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.122:22-139.178.68.195:43418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.724010] audit: type=1101 audit(1707504987.053:1533): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.731300] audit: type=1103 audit(1707504987.060:1534): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.738049] audit: type=1006 audit(1707504987.060:1535): pid=5523 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 175.742554] audit: type=1300 audit(1707504987.060:1535): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd721485b0 a2=3 a3=0 items=0 ppid=1 pid=5523 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.749420] audit: type=1327 audit(1707504987.060:1535): proctitle=737368643A20636F7265205B707269765D [ 175.751471] audit: type=1105 audit(1707504987.079:1536): pid=5523 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.760149] audit: type=1103 audit(1707504987.081:1537): pid=5525 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.961765] audit: type=1106 audit(1707504987.290:1538): pid=5523 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.969253] audit: type=1104 audit(1707504987.291:1539): pid=5523 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 180.481036] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 180.482487] IPv6: ADDRCONF(NETDEV_CHANGE): cali2ed41a88c26: link becomes ready [ 180.692458] kauditd_printk_skb: 49 callbacks suppressed [ 180.692461] audit: type=1325 audit(1707504992.021:1571): table=filter:121 family=2 entries=59 op=nft_register_chain pid=5639 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 180.699263] audit: type=1300 audit(1707504992.021:1571): arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7ffcd77fdd30 a2=0 a3=7ffcd77fdd1c items=0 ppid=4970 pid=5639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.712021] audit: type=1327 audit(1707504992.021:1571): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 180.735666] audit: type=1400 audit(1707504992.063:1572): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.750826] audit: type=1400 audit(1707504992.063:1573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.761336] audit: type=1400 audit(1707504992.063:1574): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.767623] audit: type=1400 audit(1707504992.063:1575): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.773861] audit: type=1400 audit(1707504992.063:1576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.783261] audit: type=1400 audit(1707504992.063:1577): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 180.788948] audit: type=1400 audit(1707504992.063:1578): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-21-122 (Linux x86_64 5.15.148-flatcar) 18:56:34 SSH host key: SHA256:0I2jHhQtp5guHJ8qGXT2ocWDEyvSGKY6TH8YL+eKD4w (ECDSA) SSH host key: SHA256:qp71Q+35uszHhJv+IYEe/AkNdh1ED7G5MB0BDgO2OsQ (RSA) SSH host key: SHA256:MsjI+bsQtT/u4iuqLQPjcAnvraT4M1VP22PsQqFgD/w (ED25519) eth0: 172.31.21.122 fe80::46c:3cff:fe5b:7393 ip-172-31-21-122 login: [ 186.322757] kauditd_printk_skb: 64 callbacks suppressed [ 186.322760] audit: type=1400 audit(1707504997.652:1602): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.329433] audit: type=1400 audit(1707504997.652:1603): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.334898] audit: type=1400 audit(1707504997.652:1604): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.348091] audit: type=1400 audit(1707504997.652:1605): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.353477] audit: type=1400 audit(1707504997.652:1606): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.359651] audit: type=1400 audit(1707504997.652:1607): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.364859] audit: type=1400 audit(1707504997.652:1608): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.370065] audit: type=1400 audit(1707504997.652:1609): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.374920] audit: type=1400 audit(1707504997.652:1610): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 186.379478] audit: type=1400 audit(1707504997.658:1611): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 192.098543] kauditd_printk_skb: 73 callbacks suppressed [ 192.098545] audit: type=1325 audit(1707505003.427:1634): table=filter:126 family=2 entries=10 op=nft_register_rule pid=5775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.104216] audit: type=1300 audit(1707505003.427:1634): arch=c000003e syscall=46 success=yes exit=3548 a0=3 a1=7fffe538d310 a2=0 a3=7fffe538d2fc items=0 ppid=2987 pid=5775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.113022] audit: type=1327 audit(1707505003.427:1634): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 192.117271] audit: type=1325 audit(1707505003.438:1635): table=nat:127 family=2 entries=44 op=nft_register_rule pid=5775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.120913] audit: type=1300 audit(1707505003.438:1635): arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7fffe538d310 a2=0 a3=7fffe538d2fc items=0 ppid=2987 pid=5775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.128870] audit: type=1327 audit(1707505003.438:1635): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 192.472932] audit: type=1130 audit(1707505003.801:1636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.122:22-139.178.68.195:33984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.669324] audit: type=1101 audit(1707505003.998:1637): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 192.678641] audit: type=1103 audit(1707505004.007:1638): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 192.687548] audit: type=1006 audit(1707505004.007:1639): pid=5777 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 198.045715] kauditd_printk_skb: 31 callbacks suppressed [ 198.045718] audit: type=1130 audit(1707505009.375:1653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.122:22-139.178.68.195:48206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.238773] audit: type=1101 audit(1707505009.568:1654): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.244955] audit: type=1103 audit(1707505009.574:1655): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.250648] audit: type=1006 audit(1707505009.574:1656): pid=5790 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 198.256237] audit: type=1300 audit(1707505009.574:1656): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9d9a1410 a2=3 a3=0 items=0 ppid=1 pid=5790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.265644] audit: type=1327 audit(1707505009.574:1656): proctitle=737368643A20636F7265205B707269765D [ 198.268325] audit: type=1105 audit(1707505009.596:1657): pid=5790 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.275376] audit: type=1103 audit(1707505009.597:1658): pid=5792 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.499335] audit: type=1106 audit(1707505009.828:1659): pid=5790 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 198.507372] audit: type=1104 audit(1707505009.828:1660): pid=5790 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 203.541605] kauditd_printk_skb: 13 callbacks suppressed [ 203.541609] audit: type=1130 audit(1707505014.870:1666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.122:22-139.178.68.195:48220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.719654] audit: type=1101 audit(1707505015.048:1667): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 203.726557] audit: type=1103 audit(1707505015.055:1668): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 203.732491] audit: type=1006 audit(1707505015.055:1669): pid=5805 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 203.737092] audit: type=1300 audit(1707505015.055:1669): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9fe114b0 a2=3 a3=0 items=0 ppid=1 pid=5805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.745750] audit: type=1327 audit(1707505015.055:1669): proctitle=737368643A20636F7265205B707269765D [ 203.748431] audit: type=1105 audit(1707505015.077:1670): pid=5805 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 203.761738] audit: type=1103 audit(1707505015.080:1671): pid=5807 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 203.960565] audit: type=1106 audit(1707505015.289:1672): pid=5805 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 203.967436] audit: type=1104 audit(1707505015.290:1673): pid=5805 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 208.989382] kauditd_printk_skb: 1 callbacks suppressed [ 208.989385] audit: type=1130 audit(1707505020.318:1675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.122:22-139.178.68.195:44470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.159407] audit: type=1101 audit(1707505020.488:1676): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.165724] audit: type=1103 audit(1707505020.494:1677): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.171596] audit: type=1006 audit(1707505020.494:1678): pid=5838 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 209.177078] audit: type=1300 audit(1707505020.494:1678): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb3c74210 a2=3 a3=0 items=0 ppid=1 pid=5838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.183875] audit: type=1327 audit(1707505020.494:1678): proctitle=737368643A20636F7265205B707269765D [ 209.197379] audit: type=1105 audit(1707505020.526:1679): pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.205110] audit: type=1103 audit(1707505020.534:1680): pid=5841 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.432673] audit: type=1106 audit(1707505020.761:1681): pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 209.441726] audit: type=1104 audit(1707505020.762:1682): pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 214.458632] kauditd_printk_skb: 13 callbacks suppressed [ 214.458635] audit: type=1130 audit(1707505025.787:1688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.21.122:22-139.178.68.195:44472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 214.654228] audit: type=1101 audit(1707505025.983:1689): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 214.665932] audit: type=1103 audit(1707505025.995:1690): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 214.683339] audit: type=1006 audit(1707505025.995:1691): pid=5876 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 214.692800] audit: type=1300 audit(1707505025.995:1691): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcae8a0520 a2=3 a3=0 items=0 ppid=1 pid=5876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.721770] audit: type=1327 audit(1707505025.995:1691): proctitle=737368643A20636F7265205B707269765D [ 214.725462] audit: type=1105 audit(1707505026.054:1692): pid=5876 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 214.735986] audit: type=1103 audit(1707505026.056:1693): pid=5878 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 215.063883] audit: type=1106 audit(1707505026.393:1694): pid=5876 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 215.070840] audit: type=1104 audit(1707505026.394:1695): pid=5876 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 220.091879] kauditd_printk_skb: 1 callbacks suppressed [ 220.091882] audit: type=1130 audit(1707505031.421:1697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.21.122:22-139.178.68.195:47568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 220.265066] audit: type=1101 audit(1707505031.594:1698): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 220.271598] audit: type=1103 audit(1707505031.600:1699): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 220.278097] audit: type=1006 audit(1707505031.601:1700): pid=5895 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 220.286062] audit: type=1300 audit(1707505031.601:1700): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbe859040 a2=3 a3=0 items=0 ppid=1 pid=5895 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 220.298658] audit: type=1327 audit(1707505031.601:1700): proctitle=737368643A20636F7265205B707269765D [ 220.306777] audit: type=1105 audit(1707505031.636:1701): pid=5895 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 220.314180] audit: type=1103 audit(1707505031.638:1702): pid=5906 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 220.560351] audit: type=1106 audit(1707505031.889:1703): pid=5895 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 220.568316] audit: type=1104 audit(1707505031.889:1704): pid=5895 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 234.403827] kauditd_printk_skb: 1 callbacks suppressed [ 234.403830] audit: type=1334 audit(1707505045.732:1706): prog-id=129 op=UNLOAD [ 234.409114] audit: type=1334 audit(1707505045.738:1707): prog-id=132 op=UNLOAD [ 234.949405] audit: type=1400 audit(1707505046.278:1708): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 234.959109] audit: type=1400 audit(1707505046.278:1709): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 234.964037] audit: type=1400 audit(1707505046.278:1710): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 234.969831] audit: type=1400 audit(1707505046.278:1711): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 234.974991] audit: type=1400 audit(1707505046.278:1712): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 234.979478] audit: type=1400 audit(1707505046.278:1713): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 234.985175] audit: type=1400 audit(1707505046.278:1714): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 234.990883] audit: type=1400 audit(1707505046.278:1715): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 240.587059] kauditd_printk_skb: 114 callbacks suppressed [ 240.587062] audit: type=1334 audit(1707505051.916:1748): prog-id=96 op=UNLOAD [ 240.590252] audit: type=1334 audit(1707505051.916:1749): prog-id=109 op=UNLOAD [ 240.996037] audit: type=1400 audit(1707505052.325:1750): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 241.005843] audit: type=1400 audit(1707505052.325:1751): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 241.014547] audit: type=1400 audit(1707505052.325:1752): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 241.021407] audit: type=1400 audit(1707505052.325:1753): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 241.027565] audit: type=1400 audit(1707505052.325:1754): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 241.031875] audit: type=1400 audit(1707505052.325:1755): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 241.036204] audit: type=1400 audit(1707505052.325:1756): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 241.040487] audit: type=1400 audit(1707505052.325:1757): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 247.184559] kauditd_printk_skb: 49 callbacks suppressed [ 247.184563] audit: type=1400 audit(1707505058.513:1768): avc: denied { watch } for pid=5694 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_18_56_30.3887166161/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c977 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c779,c977 tclass=file permissive=0 [ 247.193222] audit: type=1300 audit(1707505058.513:1768): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009634c0 a2=fc6 a3=0 items=0 ppid=5619 pid=5694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c977 key=(null) [ 247.199441] audit: type=1327 audit(1707505058.513:1768): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C [ 256.009482] audit: type=1106 audit(1707505067.338:1769): pid=1839 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 256.016969] audit: type=1104 audit(1707505067.338:1770): pid=1839 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 256.031549] audit: type=1131 audit(1707505067.360:1771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.21.122:22-139.178.68.195:34544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 256.309457] audit: type=1400 audit(1707505067.638:1772): avc: denied { watch } for pid=2496 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c340,c420 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 256.314753] audit: type=1400 audit(1707505067.638:1773): avc: denied { watch } for pid=2496 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c340,c420 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 256.320278] audit: type=1300 audit(1707505067.638:1773): arch=c000003e syscall=254 success=no exit=-13 a0=1c a1=c00916c0f0 a2=fc6 a3=0 items=0 ppid=2374 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c340,c420 key=(null) [ 256.327747] audit: type=1327 audit(1707505067.638:1773): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 256.339690] audit: type=1400 audit(1707505067.638:1774): avc: denied { watch } for pid=2496 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c340,c420 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 256.346902] audit: type=1300 audit(1707505067.638:1774): arch=c000003e syscall=254 success=no exit=-13 a0=1c a1=c00916c780 a2=fc6 a3=0 items=0 ppid=2374 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c340,c420 key=(null) [ 256.354979] audit: type=1327 audit(1707505067.638:1774): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Stopping cri-containerd-8e…a7649a1edb5e2391aade5.scope... Stopping cri-containerd-f5…595584784578e367cdcf1.scope... Stopping cri-containerd-16…4fa1577f892485b230ff5.scope... Stopping cri-containerd-23…22e89f1dc978905066c8c.scope... Stopping cri-containerd-3b…264cae3ad0ef56c0502bd.scope... Stopping cri-containerd-50…171c0446f8d9581bb6ac7.scope... Stopping cri-containerd-62…eb4b0660d8b783620548c.scope... Stopping cri-containerd-64…3e7d060a0a708696d92bd.scope... Stopping cri-containerd-6c…1e165396f8a526e673db8.scope... Stopping cri-containerd-6e…17e7eecaf3cce57e6a396.scope... Stopping cri-containerd-6f…5c55b8a75903e023b8e79.scope... Stopping cri-containerd-97…5fa901ddae29f98b06bdf.scope... Stopping cri-containerd-a8…a6adebea4edb5696ca20e.scope... Stopping cri-containerd-af…70e4b323507ec96ecf8f6.scope... Stopping cri-containerd-cd…b0a68bc10ae8ef47a330d.scope... Stopping cri-containerd-d6…87ba984e330a7ce02f2bd.scope... Stopping cri-containerd-e1…fcbf5d9ba1ea13b759610.scope... Stopping cri-containerd-ed…252aaa9565dc5fe69c2e9.scope... Stopping cri-containerd-f1…f6586189ea83a24b7cb26.scope... [ OK ] Removed slice system-addon\x2dconfig.slice. [ OK ] Removed slice system-addon\x2drun.slice. [ OK ] Removed slice system-modprobe.slice. [ OK ] Removed slice system-sshd.slice. [ OK ] Removed slice system-system\x2dcloudinit.slice. [ OK ] Stopped target multi-user.target. [ OK ] Stopped target getty.target. [ OK ] Stopped target machines.target. [ OK ] Stopped target nss-lookup.target. [ OK ] Stopped target remote-cryptsetup.target. [ OK ] Stopped target timers.target. [ OK ] Stopped logrotate.timer. [ OK ] Stopped mdadm.timer. [ OK ] Stopped systemd-tmpfiles-clean.timer. [ OK ] Stopped target time-set.target. [ OK ] Stopped target user-config.target. [ OK ] Stopped target system-config.target. Unmounting boot.mount... Stopping amazon-ssm-agent.service... [ OK ] Stopped coreos-metadata-sshkeys@core.service. [ OK ] Removed slice system-coreos\x2dmetadata\x2dsshkeys.slice. Stopping docker.service... Stopping getty@tty1.service... Stopping kubelet.service... Stopping locksmithd.service... Stopping polkit.service... [ OK ] Stopped prepare-cni-plugins.service. [ OK ] Stopped prepare-critools.service. [ OK ] Stopped prepare-helm.service. Stopping serial-getty@ttyS0.service... [ OK ] Stopped sshd-keygen.service. Stopping systemd-logind.service... [ OK ] Stopped systemd-machine-id-commit.service. [ OK ] Stopped target first-boot-complete.target. Stopping systemd-random-seed.service... [ OK ] Stopped update-ssh-keys-after-ignition.service. Stopping user@500.service... [ OK ] Stopped systemd-logind.service. [ OK ] Stopped polkit.service. [ OK ] Stopped getty@tty1.service. [ OK ] Stopped serial-getty@ttyS0.service. [ OK ] Stopped user@500.service. [ OK ] Stopped docker.service. [ OK ] Stopped kubelet.service. [ OK ] Unmounted boot.mount. [ OK ] Stopped systemd-random-seed.service. [ OK ] Stopped cri-containerd-976…af5fa901ddae29f98b06bdf.scope. [ OK ] Stopped cri-containerd-6c3…9f1e165396f8a526e673db8.scope. [ OK ] Stopped cri-containerd-3b4…9c264cae3ad0ef56c0502bd.scope. [ OK ] Stopped cri-containerd-23c…a922e89f1dc978905066c8c.scope. [ OK ] Stopped cri-containerd-cda…f5b0a68bc10ae8ef47a330d.scope. [ OK ] Stopped cri-containerd-622…feeb4b0660d8b783620548c.scope. [ OK ] Stopped cri-containerd-d6b…d887ba984e330a7ce02f2bd.scope. [ OK ] Stopped cri-containerd-6f5…9f5c55b8a75903e023b8e79.scope. [ OK ] Stopped cri-containerd-ed8…c1252aaa9565dc5fe69c2e9.scope. [ OK ] Stopped cri-containerd-a8b…14a6adebea4edb5696ca20e.scope. [ OK ] Stopped cri-containerd-e12…18fcbf5d9ba1ea13b759610.scope. [ OK ] Stopped cri-containerd-643…f03e7d060a0a708696d92bd.scope. [ OK ] Stopped cri-containerd-afb…4a70e4b323507ec96ecf8f6.scope. [ OK ] Stopped cri-containerd-6ef…c017e7eecaf3cce57e6a396.scope. [ OK ] Stopped cri-containerd-166…484fa1577f892485b230ff5.scope. [ OK ] Removed slice system-getty.slice. [ OK ] Removed slice system-serial\x2dgetty.slice. [ OK ] Removed slice kubepods-bes…_4628_ac2d_0c22281c4a3b.slice. [ OK ] Removed slice kubepods-bes…_49bb_83fe_c0d3de60f8e2.slice. [ OK ] Removed slice kubepods-bes…_406e_a558_5f7eabcf5000.slice. [ OK ] Removed slice kubepods-bes…_4c19_aa2d_21bc829cf483.slice. [ OK ] Removed slice kubepods-bes…_413e_bc32_44614edc0669.slice. Stopping containerd.service... [ OK ] Stopped systemd-fsck@dev-d…2dlabel-EFI\x2dSYSTEM.service. Stopping systemd-user-sessions.service... Stopping user-runtime-dir@500.service... [ OK ] Unmounted run-containerd-i…77f892485b230ff5-rootfs.mount. [ OK ] Unmounted run-containerd-i…8a75903e023b8e79-rootfs.mount. [ OK ] Unmounted run-containerd-i…ecaf3cce57e6a396-rootfs.mount. [ OK ] Unmounted run-user-500.mount. [ OK ] Stopped locksmithd.service. [ OK ] Stopped user-runtime-dir@500.service. [ OK ] Removed slice user-500.slice. Stopping dbus.service... Stopping update-engine.service... [ OK ] Unmounted run-containerd-i…60a0a708696d92bd-rootfs.mount. [ OK ] Stopped systemd-user-sessions.service. [ OK ] Stopped target remote-fs.target. [ OK ] Stopped containerd.service. [ OK ] Unmounted run-containerd-i…bc10ae8ef47a330d-rootfs.mount. [ OK ] Stopped dbus.service. [ OK ] Stopped update-engine.service. [ OK ] Unmounted run-containerd-i…bea4edb5696ca20e-rootfs.mount. [ OK ] Unmounted run-containerd-i…1ddae29f98b06bdf-rootfs.mount. [ OK ] Unmounted run-containerd-i…660d8b783620548c-rootfs.mount. [ OK ] Unmounted run-containerd-i…f1dc978905066c8c-rootfs.mount. [ OK ] Unmounted run-containerd-i…d9ba1ea13b759610-rootfs.mount. [ OK ] Unmounted run-containerd-i…323507ec96ecf8f6-rootfs.mount. [ OK ] Unmounted run-containerd-i…84e330a7ce02f2bd-rootfs.mount. [ OK ] Unmounted run-containerd-i…e3ad0ef56c0502bd-rootfs.mount. [ OK ] Unmounted run-containerd-i…a9565dc5fe69c2e9-rootfs.mount. [ OK ] Unmounted run-containerd-i…396f8a526e673db8-rootfs.mount. [* ] (1 of 5) Job cri-containerd-f185451…scope/stop running (3s / 1min 30s) M [** ] (1 of 5) Job cri-containerd-f185451…scope/stop running (4s / 1min 30s) M [*** ] (1 of 5) Job cri-containerd-f185451…scope/stop running (4s / 1min 30s) M [ OK ] Stopped cri-containerd-f18…5cf6586189ea83a24b7cb26.scope[0[ 261.439846] kauditd_printk_skb: 60 callbacks suppressed m. [ 261.439849] audit: type=1334 audit(1707505072.767:1827): prog-id=159 op=UNLOAD [ OK ] Removed slic[ 261.445130] audit: type=1334 audit(1707505072.774:1828): prog-id=162 op=UNLOAD e kubepods-bes…_4670_b303_e1bf6ae1112c.slice. [ 261.790627] audit: type=1334 audit(1707505073.120:1829): prog-id=215 op=UNLOAD [ OK ] Stopped cri-containerd-50d…83171c0446f8d9581bb6ac7.scope. [ 261.794850] audit: type=1334 audit(1707505073.124:1830): prog-id=218 op=UNLOAD [ OK ] Removed slice kubepods-bes…_4657_8072_69249bb10cba.slice. [ OK ] Stopped cri-contain[ 261.812410] audit: type=1334 audit(1707505073.141:1831): prog-id=177 op=UNLOAD erd-f54…f2595584784578e367cdcf1.scope. [ OK ] Removed slice kubepods-bur…_41f3_9f60_f8ee2d4c8c15.slice. [ 261.818040] audit: type=1334 audit(1707505073.147:1832): prog-id=180 op=UNLOAD [ 261.820804] audit: type=1334 audit(1707505073.150:1833): prog-id=185 op=UNLOAD [ OK ] Stopped cri-containerd-8e0…8ba7649a1edb5e2391aade5.scope. [ OK ] Removed slice kubepods-bur…_4c71_87d5_934dcf889278.slice. [ 261.826845] audit: type=1334 audit(1707505073.156:1834): prog-id=188 op=UNLOAD [ OK ] Stopped amazon-ssm-agent.service. [ 261.951365] audit: type=1131 audit(1707505073.280:1835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=amazon-ssm-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped target basic.target. [ OK ] Stopped target network-online.target. [ OK ] Stopped target network.target. [ OK ] Stopped target paths.target. [ OK ] Stopped motdgen.path. [ OK ] Stopped user-cloudinit@var…car\x2dinstall-user_data.path. [ OK ] Stopped target slices.target. [ OK ] Removed slice user.slice. [ OK ] Stopped target sockets.target. [ OK ] Closed dbus.socket. [ OK ] Closed docker.socket. [ OK ] Closed sshd.socket. [ OK ] Stopped target sysinit.target. [ OK ] Unset automount proc-sys-fs-binfmt_misc.automount. [ OK ] Stopped target integritysetup.target. [ OK ] Stopped target veritysetup.target. Stopping audit-rules.service... [ OK ] Stopped systemd-networkd-wait-online.service. [ 261.988044] audit: type=1131 audit(1707505073.317:1836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping systemd-networkd.service... Stopping systemd-resolved.service... Stopping systemd-timesyncd.service... [ OK ] Stopped systemd-update-done.service. [ OK ] Stopped ldconfig.service. [ OK ] Stopped systemd-boot-update.service. [ OK ] Stopped systemd-hwdb-update.service. [ OK ] Stopped systemd-journal-catalog-update.service. Stopping systemd-update-utmp.service... [ OK ] Stopped systemd-timesyncd.service. [ OK ] Stopped systemd-networkd.service. [ OK ] Stopped audit-rules.service. [ OK ] Stopped target network-pre.target. [ OK ] Closed systemd-networkd.socket. [ OK ] Stopped systemd-network-generator.service. [ OK ] Stopped systemd-sysctl.service. [ OK ] Closed systemd-coredump.socket. [ OK ] Stopped systemd-modules-load.service. [ OK ] Unmounted run-credentials-…stemd\x2dsysctl.service.mount. [ OK ] Stopped systemd-resolved.service. [ OK ] Stopped systemd-update-utmp.service. [ OK ] Stopped systemd-tmpfiles-setup.service. [ OK ] Stopped target local-fs.target. Unmounting media.mount... Unmounting run-containerd-…6639f7c25d058bb46-shm.mount... Unmounting run-containerd-…060a0a708696d92bd-shm.mount... Unmounting run-containerd-…eecaf3cce57e6a396-shm.mount... Unmounting run-containerd-…b8a75903e023b8e79-shm.mount... Unmounting run-containerd-…37617c3fa2127a5bd-shm.mount... Unmounting run-containerd-…ebea4edb5696ca20e-shm.mount... Unmounting run-containerd-…b323507ec96ecf8f6-shm.mount... Unmounting run-containerd-…8bc10ae8ef47a330d-shm.mount... Unmounting run-containerd-…116d5a19f7199c14f-shm.mount... Unmounting run-containerd-…984e330a7ce02f2bd-shm.mount... Unmounting run-containerd-…5d9ba1ea13b759610-shm.mount... Unmounting run-containerd-…aa9565dc5fe69c2e9-shm.mount... Unmounting run-containerd-…ada3c1026210e2-rootfs.mount... Unmounting run-containerd-…9f7c25d058bb46-rootfs.mount... Unmounting run-containerd-…6f8d9581bb6ac7-rootfs.mount... Unmounting run-containerd-…52587c9decde92-rootfs.mount... Unmounting run-containerd-…88f68b078b52cc-rootfs.mount... Unmounting run-containerd-…edb5e2391aade5-rootfs.mount... Unmounting run-containerd-…17c3fa2127a5bd-rootfs.mount... Unmounting run-containerd-…d5a19f7199c14f-rootfs.mount... Unmounting run-containerd-…9ea83a24b7cb26-rootfs.mount... Unmounting run-containerd-…84578e367cdcf1-rootfs.mount... Unmounting run-credentials…d\x2dsysusers.service.mount... Unmounting run-credentials…iles\x2dsetup.service.mount... Unmounting run-credentials…dsetup\x2ddev.service.mount... Unmounting run-netns-cni\x…d2e86\x2df370b860f1da.mount... Unmounting run-netns-cni\x…dce93\x2d026e47b91ce0.mount... Unmounting run-netns-cni\x…dff65\x2dfefa6321014b.mount... Unmounting run-netns-cni\x…d50a2\x2dff1758f231da.mount... Unmounting run-netns-cni\x…ddda0\x2d7a256f9a7cd5.mount... Unmounting run-torcx-unpack.mount... Unmounting tmp.mount... Unmounting usr-share-oem.mount... Unmounting var-lib-kubelet…ndle-calico\x2dnode-1.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2ddqxck.mount... Unmounting var-lib-kubelet…esecret-node\x2dcerts.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2df42xx.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2d5kr24.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dfgnbq.mount... Unmounting var-lib-kubelet…x2dapiserver\x2dcerts.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dsk57n.mount... Unmounting var-lib-kubelet…kube\x2dcontrollers-1.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dgngq5.mount... Unmounting var-lib-kubelet…dle-calico\x2dtypha-1.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2d2ngrk.mount... Unmounting var-lib-kubelet…secret-typha\x2dcerts.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dggmxw.mount... Unmounting var-lib-kubelet…pi\x2daccess\x2dk62jh.mount... [ OK ] Unmounted media.mount. [ OK ] Unmounted run-containerd-i…236639f7c25d058bb46-shm.mount. [ OK ] Unmounted run-containerd-i…7d060a0a708696d92bd-shm.mount. [ OK ] Unmounted run-containerd-i…e7eecaf3cce57e6a396-shm.mount. [ OK ] Unmounted run-containerd-i…55b8a75903e023b8e79-shm.mount. [ OK ] Unmounted run-containerd-i…1737617c3fa2127a5bd-shm.mount. [ OK ] Unmounted run-containerd-i…adebea4edb5696ca20e-shm.mount. [ OK ] Unmounted run-containerd-i…e4b323507ec96ecf8f6-shm.mount. [ OK ] Unmounted run-containerd-i…a68bc10ae8ef47a330d-shm.mount. [ OK ] Unmounted run-containerd-i…d7116d5a19f7199c14f-shm.mount. [ OK ] Unmounted run-containerd-i…ba984e330a7ce02f2bd-shm.mount. [ OK ] Unmounted run-containerd-i…bf5d9ba1ea13b759610-shm.mount. [ OK ] Unmounted run-containerd-i…2aaa9565dc5fe69c2e9-shm.mount. [ OK ] Unmounted run-containerd-i…b5ada3c1026210e2-rootfs.mount. [ OK ] Unmounted run-containerd-i…639f7c25d058bb46-rootfs.mount. [ OK ] Unmounted run-containerd-i…446f8d9581bb6ac7-rootfs.mount. [ OK ] Unmounted run-containerd-i…5252587c9decde92-rootfs.mount. [ OK ] Unmounted run-containerd-i…5b88f68b078b52cc-rootfs.mount. [ OK ] Unmounted run-containerd-i…a1edb5e2391aade5-rootfs.mount. [ OK ] Unmounted run-containerd-i…7617c3fa2127a5bd-rootfs.mount. [ OK ] Unmounted run-containerd-i…16d5a19f7199c14f-rootfs.mount. [ OK ] Unmounted run-containerd-i…189ea83a24b7cb26-rootfs.mount. [ OK ] Unmounted run-containerd-i…4784578e367cdcf1-rootfs.mount. [ OK ] Unmounted run-credentials-…emd\x2dsysusers.service.mount. [ OK ] Unmounted run-credentials-…pfiles\x2dsetup.service.mount. [ OK ] Unmounted run-credentials-…x2dsetup\x2ddev.service.mount. [ OK ] Unmounted run-netns-cni\x2…x2d2e86\x2df370b860f1da.mount. [ OK ] Unmounted run-netns-cni\x2…x2dce93\x2d026e47b91ce0.mount. [ OK ] Unmounted run-netns-cni\x2…x2dff65\x2dfefa6321014b.mount. [ OK ] Unmounted run-netns-cni\x2…x2d50a2\x2dff1758f231da.mount. [ OK ] Unmounted run-netns-cni\x2…x2ddda0\x2d7a256f9a7cd5.mount. [FAILED] Failed unmounting run-torcx-unpack.mount. [ OK ] Unmounted tmp.mount. [ OK ] Unmounted usr-share-oem.mount. [ OK ] Unmounted var-lib-kubelet-…bundle-calico\x2dnode-1.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2ddqxck.mount. [ OK ] Unmounted var-lib-kubelet-…x7esecret-node\x2dcerts.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2df42xx.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2d5kr24.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dfgnbq.mount. [ OK ] Unmounted var-lib-kubelet-…o\x2dapiserver\x2dcerts.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dsk57n.mount. [ OK ] Unmounted var-lib-kubelet-…2dkube\x2dcontrollers-1.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dgngq5.mount. [ OK ] Unmounted var-lib-kubelet-…undle-calico\x2dtypha-1.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2d2ngrk.mount. [ OK ] Unmounted var-lib-kubelet-…7esecret-typha\x2dcerts.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dggmxw.mount. [ OK ] Unmounted var-lib-kubelet-…dapi\x2daccess\x2dk62jh.mount. [ OK ] Stopped target swap.target. [ OK ] Reached target umount.target. [ OK ] Stopped systemd-fsck@dev-disk-by\x2dlabel-OEM.service. [ OK ] Removed slice system-systemd\x2dfsck.slice. [ OK ] Stopped target local-fs-pre.target. [ OK ] Stopped lvm2-activation.service. [ OK ] Stopped target cryptsetup.target. [ OK ] Stopped systemd-ask-password-console.path. [ OK ] Stopped systemd-ask-password-wall.path. [ OK ] Stopped lvm2-activation-early.service. [ OK ] Stopped systemd-tmpfiles-setup-dev.service. [ OK ] Stopped systemd-sysusers.service. [ OK ] Stopped systemd-remount-fs.service. [ OK ] Reached target shutdown.target. [ OK ] Reached target final.target. [ OK ] Finished systemd-poweroff.service. [ OK ] Reached target poweroff.target. [ 262.709467] systemd-shutdown[1]: Syncing filesystems and block devices. [ 262.737782] systemd-shutdown[1]: Sending SIGTERM to remaining processes... [ 262.758383] systemd-journald[1413]: Received SIGTERM from PID 1 (systemd-shutdow). [ 264.421239] systemd-shutdown[1]: Sending SIGKILL to remaining processes... [ 264.427322] systemd-shutdown[1]: Unmounting file systems. [ 264.429490] (sd-umount)[6442]: Unmounting '/run/torcx/unpack'. [ 264.457983] (sd-remount)[6443]: Remounting '/' read-only with options 'seclabel'. [ 264.469821] EXT4-fs (nvme0n1p9): re-mounted. Opts: . Quota mode: none. [ 264.475240] systemd-shutdown[1]: All filesystems unmounted. [ 264.477241] systemd-shutdown[1]: Deactivating swaps. [ 264.478657] systemd-shutdown[1]: All swaps deactivated. [ 264.479977] systemd-shutdown[1]: Detaching loop devices. [ 264.481731] systemd-shutdown[1]: All loop devices detached. [ 264.482916] systemd-shutdown[1]: Stopping MD devices. [ 264.484096] systemd-shutdown[1]: All MD devices stopped. [ 264.485762] systemd-shutdown[1]: Detaching DM devices. [ 264.487341] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 264.488889] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 264.491741] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 264.493458] systemd-shutdown[1]: Detaching DM devices. [ 264.494917] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 264.496557] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 264.498132] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 264.499974] systemd-shutdown[1]: Detaching DM devices. [ 264.501597] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 264.503130] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 264.505164] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 264.506598] systemd-shutdown[1]: Cannot finalize remaining DM devices, continuing. [ 264.547359] systemd-shutdown[1]: Failed to finalize DM devices, ignoring. [ 264.549066] systemd-shutdown[1]: Syncing filesystems and block devices. [ 264.550681] systemd-shutdown[1]: Powering off. [ 264.681476] ACPI: PM: Preparing to enter system sleep state S5 [ 264.682861] reboot: Power down