jYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: This is ip-172-31-18-109 (Linux x86_64 5.15.181-flatcar) 00:45:33 SSH host key: SHA256:i67QuoRe7nhzrznaPNEkNj2HlqF9L7tLpXS0ZsiAz5E (RSA) SSH host key: SHA256:tsWMq9+aJ99eXqr+1maJFPa0zjuPq02HK+Nf0wznVZ8 (ED25519) SSH host key: SHA256:wDuYPVjYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: [ 102.838709] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 102.839818] IPv6: ADDRCONF(NETDEV_CHANGE): cali8b65e917725: link becomes ready This is ip-172-31-18-109 (Linux x86_64 5.15.181-flatcar) 00:45:34 SSH host key: SHA256:i67QuoRe7nhzrznaPNEkNj2HlqF9L7tLpXS0ZsiAz5E (RSA) SSH host key: SHA256:tsWMq9+aJ99eXqr+1maJFPa0zjuPq02HK+Nf0wznVZ8 (ED25519) SSH host key: SHA256:wDuYPVjYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: [ 103.888978] kauditd_printk_skb: 863 callbacks suppressed [ 103.888981] audit: type=1400 audit(1746837934.365:1255): avc: denied { bpf } for pid=4880 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.893908] audit: type=1400 audit(1746837934.365:1255): avc: denied { bpf } for pid=4880 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.900528] audit: type=1400 audit(1746837934.365:1255): avc: denied { perfmon } for pid=4880 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.903785] audit: type=1400 audit(1746837934.365:1255): avc: denied { perfmon } for pid=4880 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.913519] audit: type=1400 audit(1746837934.365:1255): avc: denied { perfmon } for pid=4880 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.916962] audit: type=1400 audit(1746837934.365:1255): avc: denied { perfmon } for pid=4880 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.925518] audit: type=1400 audit(1746837934.365:1255): avc: denied { perfmon } for pid=4880 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.928759] audit: type=1400 audit(1746837934.365:1255): avc: denied { bpf } for pid=4880 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.935286] audit: type=1400 audit(1746837934.365:1255): avc: denied { bpf } for pid=4880 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 103.940051] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.013394] IPv6: ADDRCONF(NETDEV_CHANGE): cali23729e803ee: link becomes ready This is ip-172-31-18-109 (Linux x86_64 5.15.181-flatcar) 00:45:35 SSH host key: SHA256:i67QuoRe7nhzrznaPNEkNj2HlqF9L7tLpXS0ZsiAz5E (RSA) SSH host key: SHA256:tsWMq9+aJ99eXqr+1maJFPa0zjuPq02HK+Nf0wznVZ8 (ED25519) SSH host key: SHA256:wDuYPVjYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: This is ip-172-31-18-109 (Linux x86_64 5.15.181-flatcar) 00:45:36 SSH host key: SHA256:i67QuoRe7nhzrznaPNEkNj2HlqF9L7tLpXS0ZsiAz5E (RSA) SSH host key: SHA256:tsWMq9+aJ99eXqr+1maJFPa0zjuPq02HK+Nf0wznVZ8 (ED25519) SSH host key: SHA256:wDuYPVjYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: This is ip-172-31-18-109 (Linux x86_64 5.15.181-flatcar) 00:45:37 SSH host key: SHA256:i67QuoRe7nhzrznaPNEkNj2HlqF9L7tLpXS0ZsiAz5E (RSA) SSH host key: SHA256:tsWMq9+aJ99eXqr+1maJFPa0zjuPq02HK+Nf0wznVZ8 (ED25519) SSH host key: SHA256:wDuYPVjYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: [ 109.169325] kauditd_printk_skb: 464 callbacks suppressed [ 109.169327] audit: type=1400 audit(1746837939.645:1402): avc: denied { watch } for pid=2367 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c597 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 109.174879] audit: type=1400 audit(1746837939.646:1403): avc: denied { watch } for pid=2367 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c597 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 109.179147] audit: type=1300 audit(1746837939.646:1403): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00a502180 a2=fc6 a3=0 items=0 ppid=2212 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c597 key=(null) [ 109.184504] audit: type=1327 audit(1746837939.646:1403): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 109.188865] audit: type=1300 audit(1746837939.645:1402): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00a62cd00 a2=fc6 a3=0 items=0 ppid=2212 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c597 key=(null) [ 109.193972] audit: type=1327 audit(1746837939.645:1402): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 109.198370] audit: type=1400 audit(1746837939.647:1404): avc: denied { watch } for pid=2367 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c597 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 109.202536] audit: type=1300 audit(1746837939.647:1404): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00a5e3d40 a2=fc6 a3=0 items=0 ppid=2212 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c375,c597 key=(null) [ 109.210991] audit: type=1327 audit(1746837939.647:1404): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 109.222635] audit: type=1400 audit(1746837939.655:1405): avc: denied { watch } for pid=2367 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c597 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 118.081974] kauditd_printk_skb: 85 callbacks suppressed [ 118.081977] audit: type=1130 audit(1746837948.558:1438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.109:22-139.178.89.65:38760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 118.319690] audit: type=1101 audit(1746837948.796:1439): pid=5700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.328033] audit: type=1103 audit(1746837948.804:1440): pid=5700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.335702] audit: type=1006 audit(1746837948.804:1441): pid=5700 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 118.340170] audit: type=1300 audit(1746837948.804:1441): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2d564c20 a2=3 a3=0 items=0 ppid=1 pid=5700 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.347935] audit: type=1327 audit(1746837948.804:1441): proctitle=737368643A20636F7265205B707269765D [ 118.361512] audit: type=1105 audit(1746837948.838:1442): pid=5700 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.371356] audit: type=1103 audit(1746837948.847:1443): pid=5702 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.023131] audit: type=1106 audit(1746837949.499:1444): pid=5700 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.031203] audit: type=1104 audit(1746837949.499:1445): pid=5700 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.049290] kauditd_printk_skb: 1 callbacks suppressed [ 124.049293] audit: type=1130 audit(1746837954.525:1447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.109:22-139.178.89.65:38776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 124.210968] audit: type=1325 audit(1746837954.687:1448): table=filter:114 family=2 entries=8 op=nft_register_rule pid=5716 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 124.215249] audit: type=1300 audit(1746837954.687:1448): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffeaec480a0 a2=0 a3=7ffeaec4808c items=0 ppid=2758 pid=5716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.223636] audit: type=1327 audit(1746837954.687:1448): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 124.233696] audit: type=1101 audit(1746837954.710:1449): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.246740] audit: type=1103 audit(1746837954.717:1450): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.259430] audit: type=1006 audit(1746837954.717:1451): pid=5713 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 124.265511] audit: type=1300 audit(1746837954.717:1451): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd7d54ba0 a2=3 a3=0 items=0 ppid=1 pid=5713 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.275128] audit: type=1327 audit(1746837954.717:1451): proctitle=737368643A20636F7265205B707269765D [ 124.278426] audit: type=1105 audit(1746837954.733:1452): pid=5713 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-18-109 (Linux x86_64 5.15.181-flatcar) 00:45:57 SSH host key: SHA256:i67QuoRe7nhzrznaPNEkNj2HlqF9L7tLpXS0ZsiAz5E (RSA) SSH host key: SHA256:tsWMq9+aJ99eXqr+1maJFPa0zjuPq02HK+Nf0wznVZ8 (ED25519) SSH host key: SHA256:wDuYPVjYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: [ 129.592036] kauditd_printk_skb: 41 callbacks suppressed [ 129.592039] audit: type=1130 audit(1746837960.068:1472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.18.109:22-139.178.89.65:38192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 129.793624] audit: type=1101 audit(1746837960.270:1473): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.798429] audit: type=1103 audit(1746837960.275:1474): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.802463] audit: type=1006 audit(1746837960.275:1475): pid=5838 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 129.805648] audit: type=1300 audit(1746837960.275:1475): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2973b830 a2=3 a3=0 items=0 ppid=1 pid=5838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.810099] audit: type=1327 audit(1746837960.275:1475): proctitle=737368643A20636F7265205B707269765D [ 129.824457] audit: type=1105 audit(1746837960.301:1476): pid=5838 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.832032] audit: type=1103 audit(1746837960.306:1477): pid=5840 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.146206] audit: type=1106 audit(1746837960.621:1478): pid=5838 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.155965] audit: type=1104 audit(1746837960.621:1479): pid=5838 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-18-109 (Linux x86_64 5.15.181-flatcar) 00:46:02 SSH host key: SHA256:i67QuoRe7nhzrznaPNEkNj2HlqF9L7tLpXS0ZsiAz5E (RSA) SSH host key: SHA256:tsWMq9+aJ99eXqr+1maJFPa0zjuPq02HK+Nf0wznVZ8 (ED25519) SSH host key: SHA256:wDuYPVjYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: [ 134.982377] kauditd_printk_skb: 194 callbacks suppressed [ 134.982380] audit: type=1325 audit(1746837965.459:1541): table=filter:130 family=2 entries=8 op=nft_register_rule pid=6229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 134.985763] audit: type=1300 audit(1746837965.459:1541): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffe43a4d3c0 a2=0 a3=7ffe43a4d3ac items=0 ppid=2758 pid=6229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.994616] audit: type=1327 audit(1746837965.459:1541): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 135.001621] audit: type=1325 audit(1746837965.472:1542): table=nat:131 family=2 entries=32 op=nft_register_chain pid=6229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 135.005602] audit: type=1300 audit(1746837965.472:1542): arch=c000003e syscall=46 success=yes exit=9476 a0=3 a1=7ffe43a4d3c0 a2=0 a3=7ffe43a4d3ac items=0 ppid=2758 pid=6229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.012840] audit: type=1327 audit(1746837965.472:1542): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 135.232311] audit: type=1325 audit(1746837965.709:1543): table=filter:132 family=2 entries=8 op=nft_register_rule pid=6231 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 135.239967] audit: type=1300 audit(1746837965.709:1543): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffeb2045000 a2=0 a3=7ffeb2044fec items=0 ppid=2758 pid=6231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.252550] audit: type=1327 audit(1746837965.709:1543): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 135.256463] audit: type=1325 audit(1746837965.733:1544): table=nat:133 family=2 entries=22 op=nft_register_rule pid=6231 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 141.710189] kauditd_printk_skb: 87 callbacks suppressed [ 141.710191] audit: type=1400 audit(1746837972.188:1581): avc: denied { write } for pid=6464 comm="tee" name="fd" dev="proc" ino=34291 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 141.727663] audit: type=1400 audit(1746837972.205:1582): avc: denied { write } for pid=6468 comm="tee" name="fd" dev="proc" ino=34294 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 141.741913] audit: type=1300 audit(1746837972.188:1581): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffedfafea0d a2=241 a3=1b6 items=1 ppid=6423 pid=6464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.756211] audit: type=1307 audit(1746837972.188:1581): cwd="/etc/service/enabled/node-status-reporter/log" [ 141.761751] audit: type=1302 audit(1746837972.188:1581): item=0 name="/dev/fd/63" inode=34285 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 141.771426] audit: type=1327 audit(1746837972.188:1581): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 141.781176] audit: type=1400 audit(1746837972.240:1583): avc: denied { write } for pid=6462 comm="tee" name="fd" dev="proc" ino=35286 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 141.790936] audit: type=1300 audit(1746837972.240:1583): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd95a63a1c a2=241 a3=1b6 items=1 ppid=6416 pid=6462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.802511] audit: type=1307 audit(1746837972.240:1583): cwd="/etc/service/enabled/bird6/log" [ 141.805704] audit: type=1302 audit(1746837972.240:1583): item=0 name="/dev/fd/63" inode=35273 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 148.980943] kauditd_printk_skb: 510 callbacks suppressed [ 148.980945] audit: type=1130 audit(1746837979.459:1690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.18.109:22-139.178.89.65:58496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.166154] audit: type=1101 audit(1746837979.644:1691): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.174860] audit: type=1103 audit(1746837979.653:1692): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.181789] audit: type=1006 audit(1746837979.653:1693): pid=6620 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 149.186241] audit: type=1300 audit(1746837979.653:1693): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff19dc2c20 a2=3 a3=0 items=0 ppid=1 pid=6620 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.194415] audit: type=1327 audit(1746837979.653:1693): proctitle=737368643A20636F7265205B707269765D [ 149.197789] audit: type=1105 audit(1746837979.671:1694): pid=6620 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.206214] audit: type=1103 audit(1746837979.673:1695): pid=6622 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.458931] audit: type=1106 audit(1746837979.937:1696): pid=6620 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.467576] audit: type=1104 audit(1746837979.937:1697): pid=6620 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-18-109 (Linux x86_64 5.15.181-flatcar) 00:46:23 SSH host key: SHA256:i67QuoRe7nhzrznaPNEkNj2HlqF9L7tLpXS0ZsiAz5E (RSA) SSH host key: SHA256:tsWMq9+aJ99eXqr+1maJFPa0zjuPq02HK+Nf0wznVZ8 (ED25519) SSH host key: SHA256:wDuYPVjYS3J+7DFPAMTnus0TzPDldZhhDvZy5Boq6wM (ECDSA) eth0: 172.31.18.109 fe80::4e6:5fff:fee6:3629 ip-172-31-18-109 login: [ 154.484123] kauditd_printk_skb: 29 callbacks suppressed [ 154.484126] audit: type=1130 audit(1746837984.962:1711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.18.109:22-139.178.89.65:58500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 154.744536] audit: type=1101 audit(1746837985.223:1712): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.752087] audit: type=1103 audit(1746837985.230:1713): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.759072] audit: type=1006 audit(1746837985.230:1714): pid=6740 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 154.762224] audit: type=1300 audit(1746837985.230:1714): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe88ad190 a2=3 a3=0 items=0 ppid=1 pid=6740 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.767701] audit: type=1327 audit(1746837985.230:1714): proctitle=737368643A20636F7265205B707269765D [ 154.791934] audit: type=1105 audit(1746837985.267:1715): pid=6740 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.801659] audit: type=1103 audit(1746837985.279:1716): pid=6742 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.189401] audit: type=1106 audit(1746837985.668:1717): pid=6740 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 155.207634] audit: type=1104 audit(1746837985.668:1718): pid=6740 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.214884] kauditd_printk_skb: 1 callbacks suppressed [ 160.214887] audit: type=1130 audit(1746837990.693:1720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.18.109:22-139.178.89.65:59490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 160.379647] audit: type=1101 audit(1746837990.858:1721): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.389832] audit: type=1103 audit(1746837990.869:1722): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.399309] audit: type=1006 audit(1746837990.869:1723): pid=6755 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 160.405701] audit: type=1300 audit(1746837990.869:1723): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfb8148f0 a2=3 a3=0 items=0 ppid=1 pid=6755 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 160.416360] audit: type=1327 audit(1746837990.869:1723): proctitle=737368643A20636F7265205B707269765D [ 160.419748] audit: type=1105 audit(1746837990.884:1724): pid=6755 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.428186] audit: type=1103 audit(1746837990.889:1725): pid=6757 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.756381] audit: type=1106 audit(1746837991.235:1726): pid=6755 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.767603] audit: type=1104 audit(1746837991.241:1727): pid=6755 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.783944] kauditd_printk_skb: 1 callbacks suppressed [ 165.783947] audit: type=1130 audit(1746837996.262:1729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.18.109:22-139.178.89.65:59504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.980858] audit: type=1101 audit(1746837996.459:1730): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.991484] audit: type=1103 audit(1746837996.470:1731): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.999763] audit: type=1006 audit(1746837996.470:1732): pid=6817 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 166.004783] audit: type=1300 audit(1746837996.470:1732): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0ba7a820 a2=3 a3=0 items=0 ppid=1 pid=6817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.016056] audit: type=1327 audit(1746837996.470:1732): proctitle=737368643A20636F7265205B707269765D [ 166.034344] audit: type=1105 audit(1746837996.513:1733): pid=6817 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.049512] audit: type=1103 audit(1746837996.527:1734): pid=6820 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.453270] audit: type=1106 audit(1746837996.932:1735): pid=6817 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.463898] audit: type=1104 audit(1746837996.933:1736): pid=6817 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.478746] kauditd_printk_skb: 28 callbacks suppressed [ 171.478748] audit: type=1130 audit(1746838001.958:1747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.18.109:22-139.178.89.65:52080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.684888] audit: type=1101 audit(1746838002.164:1748): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.693332] audit: type=1103 audit(1746838002.172:1749): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.700971] audit: type=1006 audit(1746838002.172:1750): pid=6830 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 171.707585] audit: type=1300 audit(1746838002.172:1750): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb21b3b90 a2=3 a3=0 items=0 ppid=1 pid=6830 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.722803] audit: type=1327 audit(1746838002.172:1750): proctitle=737368643A20636F7265205B707269765D [ 171.728779] audit: type=1105 audit(1746838002.198:1751): pid=6830 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.741960] audit: type=1103 audit(1746838002.204:1752): pid=6834 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.012118] audit: type=1106 audit(1746838002.491:1753): pid=6830 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.020313] audit: type=1104 audit(1746838002.492:1754): pid=6830 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.004534] kauditd_printk_skb: 1 callbacks suppressed [ 177.004537] audit: type=1325 audit(1746838007.483:1756): table=filter:148 family=2 entries=20 op=nft_register_rule pid=6976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.014546] audit: type=1300 audit(1746838007.483:1756): arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffde8a594a0 a2=0 a3=7ffde8a5948c items=0 ppid=2758 pid=6976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.023642] audit: type=1327 audit(1746838007.483:1756): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 177.029462] audit: type=1325 audit(1746838007.503:1757): table=nat:149 family=2 entries=106 op=nft_unregister_chain pid=6976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.035834] audit: type=1300 audit(1746838007.503:1757): arch=c000003e syscall=46 success=yes exit=9612 a0=3 a1=7ffde8a594a0 a2=0 a3=7ffde8a5948c items=0 ppid=2758 pid=6976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.048944] audit: type=1327 audit(1746838007.503:1757): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 177.056770] audit: type=1130 audit(1746838007.536:1758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.18.109:22-139.178.89.65:42290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.302659] audit: type=1101 audit(1746838007.782:1759): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.311879] audit: type=1103 audit(1746838007.791:1760): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.318226] audit: type=1006 audit(1746838007.791:1761): pid=6998 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 [ 182.878649] kauditd_printk_skb: 13 callbacks suppressed [ 182.878651] audit: type=1130 audit(1746838013.358:1769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.18.109:22-139.178.89.65:42302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.040512] audit: type=1101 audit(1746838013.520:1770): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.052025] audit: type=1103 audit(1746838013.531:1771): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.061295] audit: type=1006 audit(1746838013.531:1772): pid=7028 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 [ 183.067613] audit: type=1300 audit(1746838013.531:1772): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc500ca0c0 a2=3 a3=0 items=0 ppid=1 pid=7028 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.077752] audit: type=1327 audit(1746838013.531:1772): proctitle=737368643A20636F7265205B707269765D [ 183.081603] audit: type=1105 audit(1746838013.548:1773): pid=7028 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.089660] audit: type=1103 audit(1746838013.551:1774): pid=7031 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.313865] audit: type=1106 audit(1746838013.793:1775): pid=7028 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.321908] audit: type=1104 audit(1746838013.793:1776): pid=7028 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.340300] kauditd_printk_skb: 13 callbacks suppressed [ 188.340303] audit: type=1130 audit(1746838018.820:1782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.31.18.109:22-139.178.89.65:38622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.529891] audit: type=1101 audit(1746838019.010:1783): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.540618] audit: type=1103 audit(1746838019.021:1784): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.551953] audit: type=1006 audit(1746838019.021:1785): pid=7048 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 [ 188.558493] audit: type=1300 audit(1746838019.021:1785): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed1922040 a2=3 a3=0 items=0 ppid=1 pid=7048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.567984] audit: type=1327 audit(1746838019.021:1785): proctitle=737368643A20636F7265205B707269765D [ 188.571675] audit: type=1105 audit(1746838019.038:1786): pid=7048 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.580377] audit: type=1103 audit(1746838019.039:1787): pid=7050 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.840028] audit: type=1106 audit(1746838019.320:1788): pid=7048 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.848544] audit: type=1104 audit(1746838019.320:1789): pid=7048 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 193.863248] kauditd_printk_skb: 1 callbacks suppressed [ 193.863251] audit: type=1130 audit(1746838024.342:1791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-172.31.18.109:22-139.178.89.65:38634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.065262] audit: type=1101 audit(1746838024.545:1792): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.075472] audit: type=1103 audit(1746838024.555:1793): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.082113] audit: type=1006 audit(1746838024.555:1794): pid=7083 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 [ 194.087606] audit: type=1300 audit(1746838024.555:1794): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc106cdb80 a2=3 a3=0 items=0 ppid=1 pid=7083 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.095709] audit: type=1327 audit(1746838024.555:1794): proctitle=737368643A20636F7265205B707269765D [ 194.107709] audit: type=1105 audit(1746838024.587:1795): pid=7083 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.116151] audit: type=1103 audit(1746838024.594:1796): pid=7085 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.430117] audit: type=1106 audit(1746838024.909:1797): pid=7083 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.439446] audit: type=1104 audit(1746838024.918:1798): pid=7083 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.455439] kauditd_printk_skb: 1 callbacks suppressed [ 199.455441] audit: type=1130 audit(1746838029.935:1800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-172.31.18.109:22-139.178.89.65:33198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 199.615869] audit: type=1101 audit(1746838030.095:1801): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.624777] audit: type=1103 audit(1746838030.104:1802): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.631258] audit: type=1006 audit(1746838030.104:1803): pid=7095 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=33 res=1 [ 199.635579] audit: type=1300 audit(1746838030.104:1803): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc419070 a2=3 a3=0 items=0 ppid=1 pid=7095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.643098] audit: type=1327 audit(1746838030.104:1803): proctitle=737368643A20636F7265205B707269765D [ 199.652009] audit: type=1105 audit(1746838030.130:1804): pid=7095 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.660325] audit: type=1103 audit(1746838030.138:1805): pid=7097 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.958126] audit: type=1106 audit(1746838030.438:1806): pid=7095 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.966327] audit: type=1104 audit(1746838030.438:1807): pid=7095 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 204.981169] kauditd_printk_skb: 1 callbacks suppressed [ 204.981171] audit: type=1130 audit(1746838035.461:1809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-172.31.18.109:22-139.178.89.65:33200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.177960] audit: type=1101 audit(1746838035.658:1810): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.188551] audit: type=1103 audit(1746838035.668:1811): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.196869] audit: type=1006 audit(1746838035.668:1812): pid=7107 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=34 res=1 [ 205.203076] audit: type=1300 audit(1746838035.668:1812): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffecba7a270 a2=3 a3=0 items=0 ppid=1 pid=7107 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.214219] audit: type=1327 audit(1746838035.668:1812): proctitle=737368643A20636F7265205B707269765D [ 205.218587] audit: type=1105 audit(1746838035.690:1813): pid=7107 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.226706] audit: type=1103 audit(1746838035.692:1814): pid=7109 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.492097] audit: type=1106 audit(1746838035.972:1815): pid=7107 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.501068] audit: type=1104 audit(1746838035.972:1816): pid=7107 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 210.516458] kauditd_printk_skb: 1 callbacks suppressed [ 210.516460] audit: type=1130 audit(1746838040.996:1818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-172.31.18.109:22-139.178.89.65:37012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.708454] audit: type=1101 audit(1746838041.188:1819): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 210.716902] audit: type=1103 audit(1746838041.197:1820): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 210.723872] audit: type=1006 audit(1746838041.197:1821): pid=7119 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=35 res=1 [ 210.729089] audit: type=1300 audit(1746838041.197:1821): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc31a36000 a2=3 a3=0 items=0 ppid=1 pid=7119 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=35 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.740719] audit: type=1327 audit(1746838041.197:1821): proctitle=737368643A20636F7265205B707269765D [ 210.745727] audit: type=1105 audit(1746838041.220:1822): pid=7119 uid=0 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 210.753972] audit: type=1103 audit(1746838041.225:1823): pid=7121 uid=0 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 210.960324] audit: type=1106 audit(1746838041.440:1824): pid=7119 uid=0 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 210.968428] audit: type=1104 audit(1746838041.440:1825): pid=7119 uid=0 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 218.924671] kauditd_printk_skb: 1 callbacks suppressed [ 218.924674] audit: type=1400 audit(1746838049.404:1827): avc: denied { bpf } for pid=7186 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.935090] audit: type=1400 audit(1746838049.404:1827): avc: denied { bpf } for pid=7186 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.943756] audit: type=1400 audit(1746838049.404:1827): avc: denied { perfmon } for pid=7186 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.952159] audit: type=1400 audit(1746838049.404:1827): avc: denied { perfmon } for pid=7186 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.960822] audit: type=1400 audit(1746838049.404:1827): avc: denied { perfmon } for pid=7186 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.968961] audit: type=1400 audit(1746838049.404:1827): avc: denied { perfmon } for pid=7186 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.976903] audit: type=1400 audit(1746838049.404:1827): avc: denied { perfmon } for pid=7186 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.985214] audit: type=1400 audit(1746838049.404:1827): avc: denied { bpf } for pid=7186 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.993577] audit: type=1400 audit(1746838049.404:1827): avc: denied { bpf } for pid=7186 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 219.001360] audit: type=1334 audit(1746838049.404:1827): prog-id=248 op=LOAD [ 228.086688] kauditd_printk_skb: 489 callbacks suppressed [ 228.086691] audit: type=1400 audit(1746838058.567:1943): avc: denied { watch } for pid=2379 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 228.100571] audit: type=1300 audit(1746838058.567:1943): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010dfa80 a2=fc6 a3=0 items=0 ppid=2231 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 key=(null) [ 228.111886] audit: type=1327 audit(1746838058.567:1943): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 228.124593] audit: type=1400 audit(1746838058.567:1944): avc: denied { watch } for pid=2379 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 228.134918] audit: type=1300 audit(1746838058.567:1944): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a5aab0 a2=fc6 a3=0 items=0 ppid=2231 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 key=(null) [ 228.152177] audit: type=1327 audit(1746838058.567:1944): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 228.168592] audit: type=1400 audit(1746838058.630:1945): avc: denied { watch } for pid=5087 comm="apiserver" path="/calico-apiserver-certs/..2025_05_10_00_45_16.3311537486/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c415,c621 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c415,c621 tclass=file permissive=0 [ 228.179173] audit: type=1300 audit(1746838058.630:1945): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001e26da0 a2=fc6 a3=0 items=0 ppid=4473 pid=5087 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c415,c621 key=(null) [ 228.195569] audit: type=1327 audit(1746838058.630:1945): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 229.184794] audit: type=1400 audit(1746838059.665:1946): avc: denied { watch } for pid=2367 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c375,c597 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 245.009546] kauditd_printk_skb: 17 callbacks suppressed [ 245.009548] audit: type=1400 audit(1746838075.490:1953): avc: denied { watch } for pid=2379 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 245.018407] audit: type=1400 audit(1746838075.490:1952): avc: denied { watch } for pid=2379 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 245.025400] audit: type=1300 audit(1746838075.490:1952): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d45560 a2=fc6 a3=0 items=0 ppid=2231 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 key=(null) [ 245.034582] audit: type=1327 audit(1746838075.490:1952): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 245.042792] audit: type=1400 audit(1746838075.490:1954): avc: denied { watch } for pid=2379 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 245.049765] audit: type=1300 audit(1746838075.490:1954): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d458c0 a2=fc6 a3=0 items=0 ppid=2231 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 key=(null) [ 245.059052] audit: type=1327 audit(1746838075.490:1954): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 245.067199] audit: type=1400 audit(1746838075.490:1955): avc: denied { watch } for pid=2379 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 245.074401] audit: type=1300 audit(1746838075.490:1955): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d458e0 a2=fc6 a3=0 items=0 ppid=2231 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c251,c725 key=(null) [ 245.083814] audit: type=1327 audit(1746838075.490:1955): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 258.313663] kauditd_printk_skb: 2 callbacks suppressed [ 258.313665] audit: type=1334 audit(1746838088.794:1956): prog-id=114 op=UNLOAD [ 258.320988] audit: type=1334 audit(1746838088.799:1957): prog-id=117 op=UNLOAD [ 258.611501] audit: type=1334 audit(1746838089.092:1958): prog-id=77 op=UNLOAD [ 258.613387] audit: type=1334 audit(1746838089.092:1959): prog-id=101 op=UNLOAD [ 259.482233] audit: type=1400 audit(1746838089.962:1960): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 259.492915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.494754] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 259.496494] audit: backlog limit exceeded [ 259.498567] audit: type=1400 audit(1746838089.962:1961): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 259.506375] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.424466] kauditd_printk_skb: 182 callbacks suppressed [ 263.424469] audit: type=1400 audit(1746838093.904:1992): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.431165] audit: type=1400 audit(1746838093.904:1993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.436423] audit: type=1400 audit(1746838093.905:1994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.441499] audit: type=1400 audit(1746838093.905:1995): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.446568] audit: type=1400 audit(1746838093.905:1996): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.451980] audit: type=1400 audit(1746838093.905:1997): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.457293] audit: type=1400 audit(1746838093.905:1998): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.462822] audit: type=1400 audit(1746838093.905:1999): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.468172] audit: type=1400 audit(1746838093.905:2000): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 263.473585] audit: type=1400 audit(1746838093.906:2001): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 278.598122] kauditd_printk_skb: 47 callbacks suppressed [ 278.598125] audit: type=1106 audit(1746838109.078:2010): pid=1728 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.611304] audit: type=1104 audit(1746838109.081:2011): pid=1728 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 278.631385] audit: type=1131 audit(1746838109.111:2012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.18.109:22-139.178.89.65:47248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.734218] audit: type=1131 audit(1746838109.214:2013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.752934] audit: type=1131 audit(1746838109.233:2014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.770014] audit: type=1131 audit(1746838109.250:2015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.783426] audit: type=1131 audit(1746838109.263:2016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.801255] audit: type=1131 audit(1746838109.277:2017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.825279] audit: type=1131 audit(1746838109.305:2018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=update-ssh-keys-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 278.848584] audit: type=1131 audit(1746838109.328:2019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 283.661076] kauditd_printk_skb: 36 callbacks suppressed [ 283.661079] audit: type=1334 audit(1746838114.140:2056): prog-id=261 op=UNLOAD [ 283.665954] audit: type=1334 audit(1746838114.146:2057): prog-id=265 op=UNLOAD [ 283.680880] audit: type=1334 audit(1746838114.161:2058): prog-id=159 op=UNLOAD [ 283.684922] audit: type=1334 audit(1746838114.165:2059): prog-id=162 op=UNLOAD [ 283.690531] audit: type=1334 audit(1746838114.170:2060): prog-id=163 op=UNLOAD [ 283.695900] audit: type=1334 audit(1746838114.176:2061): prog-id=166 op=UNLOAD [ 283.798912] audit: type=1131 audit(1746838114.279:2062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=amazon-ssm-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 283.827271] audit: type=1131 audit(1746838114.304:2063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 283.832400] audit: type=1131 audit(1746838114.312:2064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 283.837695] audit: type=1131 audit(1746838114.317:2065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 284.213953] systemd-shutdown[1]: Syncing filesystems and block devices. [ 284.226560] systemd-shutdown[1]: Sending SIGTERM to remaining processes... [ 284.234574] systemd-journald[1229]: Received SIGTERM from PID 1 (systemd-shutdow). [ 285.272481] systemd-shutdown[1]: Sending SIGKILL to remaining processes... [ 285.276714] systemd-shutdown[1]: Unmounting file systems. [ 285.278562] (sd-umount)[8078]: Unmounting '/run/torcx/unpack'. [ 285.302439] (sd-remount)[8079]: Remounting '/' read-only with options 'seclabel'. [ 285.314790] EXT4-fs (nvme0n1p9): re-mounted. Opts: . Quota mode: none. [ 285.317991] systemd-shutdown[1]: All filesystems unmounted. [ 285.319195] systemd-shutdown[1]: Deactivating swaps. [ 285.320318] systemd-shutdown[1]: All swaps deactivated. [ 285.321540] systemd-shutdown[1]: Detaching loop devices. [ 285.323129] systemd-shutdown[1]: All loop devices detached. [ 285.324305] systemd-shutdown[1]: Stopping MD devices. [ 285.325512] systemd-shutdown[1]: All MD devices stopped. [ 285.326640] systemd-shutdown[1]: Detaching DM devices. [ 285.327955] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 285.329248] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 285.330799] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 285.332429] systemd-shutdown[1]: Detaching DM devices. [ 285.333774] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 285.335058] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 285.336613] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 285.338196] systemd-shutdown[1]: Detaching DM devices. [ 285.339529] systemd-shutdown[1]: Detaching DM /dev/dm-0 (254:0). [ 285.340835] systemd-shutdown[1]: Could not detach DM /dev/dm-0: Device or resource busy [ 285.342404] systemd-shutdown[1]: Not all DM devices detached, 1 left. [ 285.343739] systemd-shutdown[1]: Cannot finalize remaining DM devices, continuing. [ 285.382247] systemd-shutdown[1]: Failed to finalize DM devices, ignoring. [ 285.383927] systemd-shutdown[1]: Syncing filesystems and block devices. [ 285.385565] systemd-shutdown[1]: Powering off. [ 285.511736] ACPI: PM: Preparing to enter system sleep state S5 [ 285.513195] reboot: Power down