811:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.750593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 35.753200] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 35.754128] audit: type=1400 audit(1746838304.811:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.755672] audit: backlog limit exceeded [ 35.755699] audit: audit_backlog=65 > audit_backlog_limit=64 [ 41.157344] kauditd_printk_skb: 778 callbacks suppressed [ 41.157346] audit: type=1400 audit(1746838310.230:500): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 41.166780] audit: type=1300 audit(1746838310.230:500): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00836cf30 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 41.175258] audit: type=1327 audit(1746838310.230:500): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 41.188332] audit: type=1400 audit(1746838310.233:501): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7330 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 41.195712] audit: type=1300 audit(1746838310.233:501): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004009b40 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 41.207642] audit: type=1327 audit(1746838310.233:501): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 41.216516] audit: type=1400 audit(1746838310.241:502): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7332 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 41.228022] audit: type=1300 audit(1746838310.241:502): arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c005a88b40 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 41.239124] audit: type=1327 audit(1746838310.241:502): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 41.249140] audit: type=1400 audit(1746838310.248:503): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7338 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 47.147606] kauditd_printk_skb: 282 callbacks suppressed [ 47.147608] audit: type=1400 audit(1746838316.220:763): avc: denied { watch } for pid=2457 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=7363 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c521 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 [ 47.160062] audit: type=1300 audit(1746838316.220:763): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00181c300 a2=fc6 a3=0 items=0 ppid=2309 pid=2457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c521 key=(null) [ 47.178851] audit: type=1327 audit(1746838316.220:763): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 48.845253] audit: type=1400 audit(1746838317.918:764): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 48.850872] audit: type=1400 audit(1746838317.918:765): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 48.856881] audit: type=1400 audit(1746838317.918:766): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 48.862535] audit: type=1400 audit(1746838317.918:767): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 48.868344] audit: type=1400 audit(1746838317.918:768): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 48.873776] audit: type=1400 audit(1746838317.918:769): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 48.879295] audit: type=1400 audit(1746838317.918:770): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 55.352509] kauditd_printk_skb: 365 callbacks suppressed [ 55.352512] audit: type=1325 audit(1746838324.425:880): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2942 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 55.358125] audit: type=1300 audit(1746838324.425:880): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeaf1f2ef0 a2=0 a3=7ffeaf1f2edc items=0 ppid=2734 pid=2942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.367393] audit: type=1327 audit(1746838324.425:880): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 55.374365] audit: type=1325 audit(1746838324.446:881): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2942 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 55.379982] audit: type=1300 audit(1746838324.446:881): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeaf1f2ef0 a2=0 a3=0 items=0 ppid=2734 pid=2942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.389526] audit: type=1327 audit(1746838324.446:881): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 55.400045] audit: type=1325 audit(1746838324.473:882): table=filter:91 family=2 entries=17 op=nft_register_rule pid=2944 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 55.404335] audit: type=1300 audit(1746838324.473:882): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff2cc2d740 a2=0 a3=7fff2cc2d72c items=0 ppid=2734 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.413984] audit: type=1327 audit(1746838324.473:882): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 55.422603] audit: type=1325 audit(1746838324.495:883): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2944 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 60.694432] kauditd_printk_skb: 179 callbacks suppressed [ 60.694434] audit: type=1400 audit(1746838329.767:940): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.703235] audit: type=1300 audit(1746838329.767:940): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fa7157f6b18 items=0 ppid=3088 pid=3409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 60.712245] audit: type=1327 audit(1746838329.767:940): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353462376563633432343166353361396638393239633563643566 [ 60.723693] audit: type=1400 audit(1746838329.767:941): avc: denied { bpf } for pid=3409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.733337] audit: type=1400 audit(1746838329.767:941): avc: denied { bpf } for pid=3409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.742445] audit: type=1400 audit(1746838329.767:941): avc: denied { bpf } for pid=3409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.750680] audit: type=1400 audit(1746838329.767:941): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.762899] audit: type=1400 audit(1746838329.767:941): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.771480] audit: type=1400 audit(1746838329.767:941): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.780299] audit: type=1400 audit(1746838329.767:941): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.922046] kauditd_printk_skb: 34 callbacks suppressed [ 65.922049] audit: type=1400 audit(1746838334.995:947): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.929873] audit: type=1300 audit(1746838334.995:947): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f1b9c788ea8 items=0 ppid=3088 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 65.937938] audit: type=1327 audit(1746838334.995:947): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323865373231396139626235626332613539313938343563356366 [ 65.948401] audit: type=1400 audit(1746838334.995:948): avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.954453] audit: type=1400 audit(1746838334.995:948): avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.965342] audit: type=1400 audit(1746838334.995:948): avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.973804] audit: type=1400 audit(1746838334.995:948): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.983619] audit: type=1400 audit(1746838334.995:948): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.991594] audit: type=1400 audit(1746838334.995:948): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.999560] audit: type=1400 audit(1746838334.995:948): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.090229] kauditd_printk_skb: 34 callbacks suppressed [ 74.090231] audit: type=1400 audit(1746838343.163:954): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.098277] audit: type=1300 audit(1746838343.163:954): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f22b2dd85a8 items=0 ppid=3088 pid=3881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.106959] audit: type=1327 audit(1746838343.163:954): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332626333656266616135383065613430346535396234343338346131 [ 74.114344] audit: type=1400 audit(1746838343.163:955): avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.120036] audit: type=1400 audit(1746838343.163:955): avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.126191] audit: type=1400 audit(1746838343.163:955): avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.132659] audit: type=1400 audit(1746838343.163:955): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.138128] audit: type=1400 audit(1746838343.163:955): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.144046] audit: type=1400 audit(1746838343.163:955): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.152407] audit: type=1400 audit(1746838343.163:955): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.628253] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 74.631311] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 79.982611] kauditd_printk_skb: 68 callbacks suppressed [ 79.982613] audit: type=1325 audit(1746838349.056:967): table=filter:95 family=2 entries=17 op=nft_register_rule pid=4184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 79.988356] audit: type=1300 audit(1746838349.056:967): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe39437ae0 a2=0 a3=7ffe39437acc items=0 ppid=2734 pid=4184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.996283] audit: type=1327 audit(1746838349.056:967): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 80.001018] audit: type=1325 audit(1746838349.074:968): table=nat:96 family=2 entries=19 op=nft_register_chain pid=4184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 80.005240] audit: type=1300 audit(1746838349.074:968): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe39437ae0 a2=0 a3=7ffe39437acc items=0 ppid=2734 pid=4184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.013643] audit: type=1327 audit(1746838349.074:968): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 80.187663] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 80.192147] IPv6: ADDRCONF(NETDEV_CHANGE): calic5497cdec24: link becomes ready [ 80.274274] audit: type=1400 audit(1746838349.347:969): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.279773] audit: type=1400 audit(1746838349.347:970): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.285377] audit: type=1400 audit(1746838349.347:971): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.290945] audit: type=1400 audit(1746838349.347:972): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.851299] IPv6: ADDRCONF(NETDEV_CHANGE): cali29c6dc34579: link becomes ready [ 80.968402] IPv6: ADDRCONF(NETDEV_CHANGE): cali584d19d26ab: link becomes ready [ 81.924841] IPv6: ADDRCONF(NETDEV_CHANGE): cali7ceb27e3204: link becomes ready This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:31 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: [ 82.811014] IPv6: ADDRCONF(NETDEV_CHANGE): cali9be45d42d5a: link becomes ready This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:32 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:33 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: [ 84.982199] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 84.983330] IPv6: ADDRCONF(NETDEV_CHANGE): califd742d8f0ba: link becomes ready [ 85.176923] kauditd_printk_skb: 974 callbacks suppressed [ 85.176926] audit: type=1400 audit(1746838354.250:1220): avc: denied { watch } for pid=4903 comm="apiserver" path="/calico-apiserver-certs/..2025_05_10_00_52_16.3538177358/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c781 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c160,c781 tclass=file permissive=0 [ 85.184321] audit: type=1300 audit(1746838354.250:1220): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003e1480 a2=fc6 a3=0 items=0 ppid=4437 pid=4903 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c781 key=(null) [ 85.190965] audit: type=1327 audit(1746838354.250:1220): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 85.244972] audit: type=1400 audit(1746838354.318:1221): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.248147] audit: type=1400 audit(1746838354.318:1222): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.253078] audit: type=1400 audit(1746838354.318:1223): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.256505] audit: type=1400 audit(1746838354.318:1224): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.260022] audit: type=1400 audit(1746838354.318:1225): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.266605] audit: type=1400 audit(1746838354.318:1226): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.275345] audit: type=1400 audit(1746838354.318:1227): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:34 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:36 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: [ 94.546732] kauditd_printk_skb: 268 callbacks suppressed [ 94.546735] audit: type=1130 audit(1746838363.620:1293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.31.121:22-139.178.89.65:58546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 94.811594] audit: type=1101 audit(1746838363.885:1294): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 94.818564] audit: type=1103 audit(1746838363.892:1295): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 94.824386] audit: type=1006 audit(1746838363.892:1296): pid=5242 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 94.837510] audit: type=1300 audit(1746838363.892:1296): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdd25c380 a2=3 a3=0 items=0 ppid=1 pid=5242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.845045] audit: type=1327 audit(1746838363.892:1296): proctitle=737368643A20636F7265205B707269765D [ 94.865668] audit: type=1105 audit(1746838363.939:1297): pid=5242 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 94.872970] audit: type=1103 audit(1746838363.946:1298): pid=5244 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.092793] audit: type=1106 audit(1746838365.166:1299): pid=5242 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.100635] audit: type=1104 audit(1746838365.166:1300): pid=5242 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 101.117405] kauditd_printk_skb: 7 callbacks suppressed [ 101.117408] audit: type=1130 audit(1746838370.191:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.31.121:22-139.178.89.65:36962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 101.164039] audit: type=1400 audit(1746838370.237:1305): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7330 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 101.170535] audit: type=1300 audit(1746838370.237:1305): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00db3b5c0 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 101.179853] audit: type=1327 audit(1746838370.237:1305): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 101.187667] audit: type=1400 audit(1746838370.237:1306): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 101.195647] audit: type=1300 audit(1746838370.237:1306): arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00eab5560 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 101.207540] audit: type=1327 audit(1746838370.237:1306): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 101.215386] audit: type=1400 audit(1746838370.246:1307): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7332 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 101.222767] audit: type=1300 audit(1746838370.246:1307): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00ecab050 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 101.231457] audit: type=1327 audit(1746838370.246:1307): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 106.593580] kauditd_printk_skb: 31 callbacks suppressed [ 106.593582] audit: type=1130 audit(1746838375.667:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.31.121:22-139.178.89.65:36964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 106.845187] audit: type=1101 audit(1746838375.918:1324): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 106.856168] audit: type=1103 audit(1746838375.928:1325): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 106.864181] audit: type=1006 audit(1746838375.928:1326): pid=5354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 106.870731] audit: type=1300 audit(1746838375.928:1326): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceb375f50 a2=3 a3=0 items=0 ppid=1 pid=5354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.878713] audit: type=1327 audit(1746838375.928:1326): proctitle=737368643A20636F7265205B707269765D [ 106.891924] audit: type=1105 audit(1746838375.965:1327): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 106.899896] audit: type=1103 audit(1746838375.971:1328): pid=5413 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.253036] audit: type=1106 audit(1746838376.325:1329): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.262396] audit: type=1104 audit(1746838376.325:1330): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.265174] kauditd_printk_skb: 23 callbacks suppressed [ 113.265177] audit: type=1130 audit(1746838382.338:1350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.31.121:22-139.178.89.65:56950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 113.467246] audit: type=1101 audit(1746838382.540:1351): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.475764] audit: type=1103 audit(1746838382.549:1352): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.482326] audit: type=1006 audit(1746838382.549:1353): pid=5667 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 113.486505] audit: type=1300 audit(1746838382.549:1353): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb5e66b90 a2=3 a3=0 items=0 ppid=1 pid=5667 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.495072] audit: type=1327 audit(1746838382.549:1353): proctitle=737368643A20636F7265205B707269765D [ 113.498369] audit: type=1105 audit(1746838382.569:1354): pid=5667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.506390] audit: type=1103 audit(1746838382.571:1355): pid=5669 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.779521] audit: type=1106 audit(1746838382.853:1356): pid=5667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.789419] audit: type=1104 audit(1746838382.859:1357): pid=5667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.801049] kauditd_printk_skb: 1 callbacks suppressed [ 118.801051] audit: type=1130 audit(1746838387.874:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.31.121:22-139.178.89.65:55212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 119.030163] audit: type=1101 audit(1746838388.103:1360): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.039871] audit: type=1103 audit(1746838388.111:1361): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.047461] audit: type=1006 audit(1746838388.111:1362): pid=5678 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 119.051792] audit: type=1300 audit(1746838388.111:1362): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd62fab920 a2=3 a3=0 items=0 ppid=1 pid=5678 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.059867] audit: type=1327 audit(1746838388.111:1362): proctitle=737368643A20636F7265205B707269765D [ 119.080023] audit: type=1105 audit(1746838388.153:1363): pid=5678 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.090294] audit: type=1103 audit(1746838388.162:1364): pid=5680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.423315] audit: type=1106 audit(1746838388.496:1365): pid=5678 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.432070] audit: type=1104 audit(1746838388.496:1366): pid=5678 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.896061] kauditd_printk_skb: 1 callbacks suppressed [ 123.896064] audit: type=1325 audit(1746838392.969:1368): table=filter:118 family=2 entries=8 op=nft_register_rule pid=5714 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 123.902441] audit: type=1300 audit(1746838392.969:1368): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd20ff6e90 a2=0 a3=7ffd20ff6e7c items=0 ppid=2734 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.911052] audit: type=1327 audit(1746838392.969:1368): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 123.917995] audit: type=1325 audit(1746838392.991:1369): table=nat:119 family=2 entries=34 op=nft_register_chain pid=5714 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 123.922458] audit: type=1300 audit(1746838392.991:1369): arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffd20ff6e90 a2=0 a3=7ffd20ff6e7c items=0 ppid=2734 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.367393] audit: type=1327 audit(1746838324.425:880): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 55.374365] audit: type=1325 audit(1746838324.446:881): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2942 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 55.379982] audit: type=1300 audit(1746838324.446:881): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeaf1f2ef0 a2=0 a3=0 items=0 ppid=2734 pid=2942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.389526] audit: type=1327 audit(1746838324.446:881): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 55.400045] audit: type=1325 audit(1746838324.473:882): table=filter:91 family=2 entries=17 op=nft_register_rule pid=2944 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 55.404335] audit: type=1300 audit(1746838324.473:882): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff2cc2d740 a2=0 a3=7fff2cc2d72c items=0 ppid=2734 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 55.413984] audit: type=1327 audit(1746838324.473:882): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 55.422603] audit: type=1325 audit(1746838324.495:883): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2944 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 60.694432] kauditd_printk_skb: 179 callbacks suppressed [ 60.694434] audit: type=1400 audit(1746838329.767:940): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.703235] audit: type=1300 audit(1746838329.767:940): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fa7157f6b18 items=0 ppid=3088 pid=3409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 60.712245] audit: type=1327 audit(1746838329.767:940): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353462376563633432343166353361396638393239633563643566 [ 60.723693] audit: type=1400 audit(1746838329.767:941): avc: denied { bpf } for pid=3409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.733337] audit: type=1400 audit(1746838329.767:941): avc: denied { bpf } for pid=3409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.742445] audit: type=1400 audit(1746838329.767:941): avc: denied { bpf } for pid=3409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.750680] audit: type=1400 audit(1746838329.767:941): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.762899] audit: type=1400 audit(1746838329.767:941): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.771480] audit: type=1400 audit(1746838329.767:941): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 60.780299] audit: type=1400 audit(1746838329.767:941): avc: denied { perfmon } for pid=3409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.922046] kauditd_printk_skb: 34 callbacks suppressed [ 65.922049] audit: type=1400 audit(1746838334.995:947): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.929873] audit: type=1300 audit(1746838334.995:947): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f1b9c788ea8 items=0 ppid=3088 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 65.937938] audit: type=1327 audit(1746838334.995:947): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323865373231396139626235626332613539313938343563356366 [ 65.948401] audit: type=1400 audit(1746838334.995:948): avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.954453] audit: type=1400 audit(1746838334.995:948): avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.965342] audit: type=1400 audit(1746838334.995:948): avc: denied { bpf } for pid=3496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.973804] audit: type=1400 audit(1746838334.995:948): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.983619] audit: type=1400 audit(1746838334.995:948): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.991594] audit: type=1400 audit(1746838334.995:948): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 65.999560] audit: type=1400 audit(1746838334.995:948): avc: denied { perfmon } for pid=3496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.090229] kauditd_printk_skb: 34 callbacks suppressed [ 74.090231] audit: type=1400 audit(1746838343.163:954): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.098277] audit: type=1300 audit(1746838343.163:954): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f22b2dd85a8 items=0 ppid=3088 pid=3881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.106959] audit: type=1327 audit(1746838343.163:954): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332626333656266616135383065613430346535396234343338346131 [ 74.114344] audit: type=1400 audit(1746838343.163:955): avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.120036] audit: type=1400 audit(1746838343.163:955): avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.126191] audit: type=1400 audit(1746838343.163:955): avc: denied { bpf } for pid=3881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.132659] audit: type=1400 audit(1746838343.163:955): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.138128] audit: type=1400 audit(1746838343.163:955): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.144046] audit: type=1400 audit(1746838343.163:955): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.152407] audit: type=1400 audit(1746838343.163:955): avc: denied { perfmon } for pid=3881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.628253] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 74.631311] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 79.982611] kauditd_printk_skb: 68 callbacks suppressed [ 79.982613] audit: type=1325 audit(1746838349.056:967): table=filter:95 family=2 entries=17 op=nft_register_rule pid=4184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 79.988356] audit: type=1300 audit(1746838349.056:967): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe39437ae0 a2=0 a3=7ffe39437acc items=0 ppid=2734 pid=4184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.996283] audit: type=1327 audit(1746838349.056:967): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 80.001018] audit: type=1325 audit(1746838349.074:968): table=nat:96 family=2 entries=19 op=nft_register_chain pid=4184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 80.005240] audit: type=1300 audit(1746838349.074:968): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe39437ae0 a2=0 a3=7ffe39437acc items=0 ppid=2734 pid=4184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.013643] audit: type=1327 audit(1746838349.074:968): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 80.187663] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 80.192147] IPv6: ADDRCONF(NETDEV_CHANGE): calic5497cdec24: link becomes ready [ 80.274274] audit: type=1400 audit(1746838349.347:969): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.279773] audit: type=1400 audit(1746838349.347:970): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.285377] audit: type=1400 audit(1746838349.347:971): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.290945] audit: type=1400 audit(1746838349.347:972): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.851299] IPv6: ADDRCONF(NETDEV_CHANGE): cali29c6dc34579: link becomes ready [ 80.968402] IPv6: ADDRCONF(NETDEV_CHANGE): cali584d19d26ab: link becomes ready [ 81.924841] IPv6: ADDRCONF(NETDEV_CHANGE): cali7ceb27e3204: link becomes ready This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:31 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: [ 82.811014] IPv6: ADDRCONF(NETDEV_CHANGE): cali9be45d42d5a: link becomes ready This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:32 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:33 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: [ 84.982199] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 84.983330] IPv6: ADDRCONF(NETDEV_CHANGE): califd742d8f0ba: link becomes ready [ 85.176923] kauditd_printk_skb: 974 callbacks suppressed [ 85.176926] audit: type=1400 audit(1746838354.250:1220): avc: denied { watch } for pid=4903 comm="apiserver" path="/calico-apiserver-certs/..2025_05_10_00_52_16.3538177358/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c781 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c160,c781 tclass=file permissive=0 [ 85.184321] audit: type=1300 audit(1746838354.250:1220): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003e1480 a2=fc6 a3=0 items=0 ppid=4437 pid=4903 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c781 key=(null) [ 85.190965] audit: type=1327 audit(1746838354.250:1220): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 85.244972] audit: type=1400 audit(1746838354.318:1221): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.248147] audit: type=1400 audit(1746838354.318:1222): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.253078] audit: type=1400 audit(1746838354.318:1223): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.256505] audit: type=1400 audit(1746838354.318:1224): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.260022] audit: type=1400 audit(1746838354.318:1225): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.266605] audit: type=1400 audit(1746838354.318:1226): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.275345] audit: type=1400 audit(1746838354.318:1227): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:34 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: This is ip-172-31-31-121 (Linux x86_64 5.15.181-flatcar) 00:52:36 SSH host key: SHA256:smVT+SD26XDCX/dH/r2fzurircEFa3A4z37sjptXi5I (RSA) SSH host key: SHA256:pnlt/cP7k9dQA7D0h5LTddahxq+//W3rP46BErMgbTE (ED25519) SSH host key: SHA256:endkxVbSJt9wMrmCr3tWNl8VvkOvHFjhcTdVxlYp8IU (ECDSA) eth0: 172.31.31.121 fe80::4b0:82ff:fed8:5975 ip-172-31-31-121 login: [ 94.546732] kauditd_printk_skb: 268 callbacks suppressed [ 94.546735] audit: type=1130 audit(1746838363.620:1293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.31.121:22-139.178.89.65:58546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 94.811594] audit: type=1101 audit(1746838363.885:1294): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 94.818564] audit: type=1103 audit(1746838363.892:1295): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 94.824386] audit: type=1006 audit(1746838363.892:1296): pid=5242 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 94.837510] audit: type=1300 audit(1746838363.892:1296): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdd25c380 a2=3 a3=0 items=0 ppid=1 pid=5242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.845045] audit: type=1327 audit(1746838363.892:1296): proctitle=737368643A20636F7265205B707269765D [ 94.865668] audit: type=1105 audit(1746838363.939:1297): pid=5242 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 94.872970] audit: type=1103 audit(1746838363.946:1298): pid=5244 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.092793] audit: type=1106 audit(1746838365.166:1299): pid=5242 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.100635] audit: type=1104 audit(1746838365.166:1300): pid=5242 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 101.117405] kauditd_printk_skb: 7 callbacks suppressed [ 101.117408] audit: type=1130 audit(1746838370.191:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.31.121:22-139.178.89.65:36962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 101.164039] audit: type=1400 audit(1746838370.237:1305): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7330 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 101.170535] audit: type=1300 audit(1746838370.237:1305): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00db3b5c0 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 101.179853] audit: type=1327 audit(1746838370.237:1305): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 101.187667] audit: type=1400 audit(1746838370.237:1306): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 101.195647] audit: type=1300 audit(1746838370.237:1306): arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00eab5560 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 101.207540] audit: type=1327 audit(1746838370.237:1306): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 101.215386] audit: type=1400 audit(1746838370.246:1307): avc: denied { watch } for pid=2417 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7332 scontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 101.222767] audit: type=1300 audit(1746838370.246:1307): arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00ecab050 a2=fc6 a3=0 items=0 ppid=2290 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c54,c633 key=(null) [ 101.231457] audit: type=1327 audit(1746838370.246:1307): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33312E313231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 106.593580] kauditd_printk_skb: 31 callbacks suppressed [ 106.593582] audit: type=1130 audit(1746838375.667:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.31.121:22-139.178.89.65:36964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 106.845187] audit: type=1101 audit(1746838375.918:1324): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 106.856168] audit: type=1103 audit(1746838375.928:1325): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 106.864181] audit: type=1006 audit(1746838375.928:1326): pid=5354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 106.870731] audit: type=1300 audit(1746838375.928:1326): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceb375f50 a2=3 a3=0 items=0 ppid=1 pid=5354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.878713] audit: type=1327 audit(1746838375.928:1326): proctitle=737368643A20636F7265205B707269765D [ 106.891924] audit: type=1105 audit(1746838375.965:1327): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 106.899896] audit: type=1103 audit(1746838375.971:1328): pid=5413 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.253036] audit: type=1106 audit(1746838376.325:1329): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.262396] audit: type=1104 audit(1746838376.325:1330): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.265174] kauditd_printk_skb: 23 callbacks suppressed [ 113.265177] audit: type=1130 audit(1746838382.338:1350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.31.121:22-139.178.89.65:56950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 113.467246] audit: type=1101 audit(1746838382.540:1351): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.475764] audit: type=1103 audit(1746838382.549:1352): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.482326] audit: type=1006 audit(1746838382.549:1353): pid=5667 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 113.486505] audit: type=1300 audit(1746838382.549:1353): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb5e66b90 a2=3 a3=0 items=0 ppid=1 pid=5667 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.495072] audit: type=1327 audit(1746838382.549:1353): proctitle=737368643A20636F7265205B707269765D [ 113.498369] audit: type=1105 audit(1746838382.569:1354): pid=5667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.506390] audit: type=1103 audit(1746838382.571:1355): pid=5669 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.779521] audit: type=1106 audit(1746838382.853:1356): pid=5667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.789419] audit: type=1104 audit(1746838382.859:1357): pid=5667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.801049] kauditd_printk_skb: 1 callbacks suppressed [ 118.801051] audit: type=1130 audit(1746838387.874:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.31.121:22-139.178.89.65:55212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 119.030163] audit: type=1101 audit(1746838388.103:1360): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.039871] audit: type=1103 audit(1746838388.111:1361): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.047461] audit: type=1006 audit(1746838388.111:1362): pid=5678 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 119.051792] audit: type=1300 audit(1746838388.111:1362): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd62fab920 a2=3 a3=0 items=0 ppid=1 pid=5678 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.059867] audit: type=1327 audit(1746838388.111:1362): proctitle=737368643A20636F7265205B707269765D [ 119.080023] audit: type=1105 audit(1746838388.153:1363): pid=5678 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.090294] audit: type=1103 audit(1746838388.162:1364): pid=5680 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.423315] audit: type=1106 audit(1746838388.496:1365): pid=5678 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.432070] audit: type=1104 audit(1746838388.496:1366): pid=5678 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.896061] kauditd_printk_skb: 1 callbacks suppressed [ 123.896064] audit: type=1325 audit(1746838392.969:1368): table=filter:118 family=2 entries=8 op=nft_register_rule pid=5714 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 123.902441] audit: type=1300 audit(1746838392.969:1368): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd20ff6e90 a2=0 a3=7ffd20ff6e7c items=0 ppid=2734 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.911052] audit: type=1327 audit(1746838392.969:1368): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 123.917995] audit: type=1325 audit(1746838392.991:1369): table=nat:119 family=2 entries=34 op=nft_register_chain pid=5714 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 123.922458] audit: type=1300 audit(1746838392.991:1369): arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffd20ff6e90 a2=0 a3=7ffd20ff6e7c items=0 ppid=2734 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.931005] audit: type=1327 audit(1746838392.991:1369): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 124.446035] audit: type=1130 audit(1746838393.519:1370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.31.121:22-139.178.89.65:55226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 124.622754] audit: type=1101 audit(1746838393.694:1371): pid=5716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.630281] audit: type=1103 audit(1746838393.695:1372): pid=5716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.637057] audit: type=1006 audit(1746838393.695:1373): pid=5716 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 130.029755] kauditd_printk_skb: 7 callbacks suppressed [ 130.029757] audit: type=1130 audit(1746838399.103:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.31.121:22-139.178.89.65:32884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 130.249710] audit: type=1101 audit(1746838399.323:1380): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.257694] audit: type=1103 audit(1746838399.330:1381): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.264201] audit: type=1006 audit(1746838399.330:1382): pid=5774 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 130.269637] audit: type=1300 audit(1746838399.330:1382): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca174efb0 a2=3 a3=0 items=0 ppid=1 pid=5774 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.277327] audit: type=1327 audit(1746838399.330:1382): proctitle=737368643A20636F7265205B707269765D [ 130.293580] audit: type=1105 audit(1746838399.366:1383): pid=5774 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.303195] audit: type=1103 audit(1746838399.371:1384): pid=5776 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.686714] audit: type=1106 audit(1746838399.760:1385): pid=5774 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.694836] audit: type=1104 audit(1746838399.760:1386): pid=5774 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.778312] kauditd_printk_skb: 43 callbacks suppressed [ 135.778315] audit: type=1106 audit(1746838404.851:1416): pid=5813 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.791556] audit: type=1104 audit(1746838404.852:1417): pid=5813 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 135.802428] audit: type=1131 audit(1746838404.862:1418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.31.121:22-139.178.89.65:32914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 135.812455] audit: type=1130 audit(1746838404.881:1419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.31.121:22-139.178.89.65:32930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 135.996214] audit: type=1101 audit(1746838405.069:1420): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.004766] audit: type=1103 audit(1746838405.078:1421): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.011409] audit: type=1006 audit(1746838405.078:1422): pid=5823 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 136.016007] audit: type=1300 audit(1746838405.078:1422): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2b9ec0e0 a2=3 a3=0 items=0 ppid=1 pid=5823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.023761] audit: type=1327 audit(1746838405.078:1422): proctitle=737368643A20636F7265205B707269765D [ 136.027214] audit: type=1105 audit(1746838405.091:1423): pid=5823 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.247399] kauditd_printk_skb: 10 callbacks suppressed [ 141.247401] audit: type=1130 audit(1746838410.321:1430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.31.121:22-139.178.89.65:41048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.464501] audit: type=1101 audit(1746838410.538:1431): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.473959] audit: type=1103 audit(1746838410.547:1432): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.481247] audit: type=1006 audit(1746838410.547:1433): pid=5839 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 141.486314] audit: type=1300 audit(1746838410.547:1433): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe47f87780 a2=3 a3=0 items=0 ppid=1 pid=5839 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.497042] audit: type=1327 audit(1746838410.547:1433): proctitle=737368643A20636F7265205B707269765D [ 141.508430] audit: type=1105 audit(1746838410.581:1434): pid=5839 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.517297] audit: type=1103 audit(1746838410.583:1435): pid=5841 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.914638] audit: type=1106 audit(1746838410.988:1436): pid=5839 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.927308] audit: type=1104 audit(1746838410.989:1437): pid=5839 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.914971] kauditd_printk_skb: 4 callbacks suppressed [ 146.914974] audit: type=1400 audit(1746838415.989:1440): avc: denied { watch } for pid=5049 comm="apiserver" path="/calico-apiserver-certs/..2025_05_10_00_52_16.121384450/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c755 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c363,c755 tclass=file permissive=0 [ 146.925240] audit: type=1300 audit(1746838415.989:1440): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b562c0 a2=fc6 a3=0 items=0 ppid=4990 pid=5049 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c755 key=(null) [ 146.935979] audit: type=1327 audit(1746838415.989:1440): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 146.946785] audit: type=1130 audit(1746838416.020:1441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.31.121:22-139.178.89.65:41054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.201344] audit: type=1101 audit(1746838416.274:1442): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.210247] audit: type=1103 audit(1746838416.284:1443): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.216840] audit: type=1006 audit(1746838416.284:1444): pid=5851 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 147.221795] audit: type=1300 audit(1746838416.284:1444): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe051d0e10 a2=3 a3=0 items=0 ppid=1 pid=5851 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.230575] audit: type=1327 audit(1746838416.284:1444): proctitle=737368643A20636F7265205B707269765D [ 147.234768] audit: type=1105 audit(1746838416.308:1445): pid=5851 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.759149] kauditd_printk_skb: 4 callbacks suppressed [ 152.759151] audit: type=1130 audit(1746838421.833:1450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.31.121:22-139.178.89.65:49498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.949748] audit: type=1101 audit(1746838422.023:1451): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.957442] audit: type=1103 audit(1746838422.031:1452): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.964226] audit: type=1006 audit(1746838422.031:1453): pid=5883 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 152.969455] audit: type=1300 audit(1746838422.031:1453): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2dbb3a80 a2=3 a3=0 items=0 ppid=1 pid=5883 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.980960] audit: type=1327 audit(1746838422.031:1453): proctitle=737368643A20636F7265205B707269765D [ 152.987224] audit: type=1105 audit(1746838422.061:1454): pid=5883 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.003489] audit: type=1103 audit(1746838422.075:1455): pid=5885 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.339652] audit: type=1106 audit(1746838422.413:1456): pid=5883 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.353834] audit: type=1104 audit(1746838422.414:1457): pid=5883 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.365122] kauditd_printk_skb: 1 callbacks suppressed [ 158.365125] audit: type=1130 audit(1746838427.438:1459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.31.121:22-139.178.89.65:38744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.544399] audit: type=1101 audit(1746838427.618:1460): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.553087] audit: type=1103 audit(1746838427.627:1461): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.560149] audit: type=1006 audit(1746838427.627:1462): pid=5894 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 158.564631] audit: type=1300 audit(1746838427.627:1462): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6904cdc0 a2=3 a3=0 items=0 ppid=1 pid=5894 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.575942] audit: type=1327 audit(1746838427.627:1462): proctitle=737368643A20636F7265205B707269765D [ 158.581768] audit: type=1105 audit(1746838427.655:1463): pid=5894 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.591557] audit: type=1103 audit(1746838427.655:1464): pid=5896 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.766780] audit: type=1106 audit(1746838427.840:1465): pid=5894 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.774886] audit: type=1104 audit(1746838427.841:1466): pid=5894 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.793068] kauditd_printk_skb: 25 callbacks suppressed [ 163.793071] audit: type=1130 audit(1746838432.866:1476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.31.121:22-139.178.89.65:38760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.993128] audit: type=1101 audit(1746838433.066:1477): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.001563] audit: type=1103 audit(1746838433.074:1478): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.008264] audit: type=1006 audit(1746838433.074:1479): pid=5932 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 164.012924] audit: type=1300 audit(1746838433.074:1479): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc91a0b0 a2=3 a3=0 items=0 ppid=1 pid=5932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.024594] audit: type=1327 audit(1746838433.074:1479): proctitle=737368643A20636F7265205B707269765D [ 164.029389] audit: type=1105 audit(1746838433.098:1480): pid=5932 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.038289] audit: type=1103 audit(1746838433.104:1481): pid=5934 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.222548] audit: type=1106 audit(1746838433.295:1482): pid=5932 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.230650] audit: type=1104 audit(1746838433.296:1483): pid=5932 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.249871] kauditd_printk_skb: 13 callbacks suppressed [ 169.249873] audit: type=1130 audit(1746838438.322:1489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.31.121:22-139.178.89.65:39388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.425875] audit: type=1101 audit(1746838438.498:1490): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.434610] audit: type=1103 audit(1746838438.506:1491): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.440974] audit: type=1006 audit(1746838438.506:1492): pid=5948 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 169.445074] audit: type=1300 audit(1746838438.506:1492): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfcf03850 a2=3 a3=0 items=0 ppid=1 pid=5948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.452650] audit: type=1327 audit(1746838438.506:1492): proctitle=737368643A20636F7265205B707269765D [ 169.455687] audit: type=1105 audit(1746838438.522:1493): pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.463579] audit: type=1103 audit(1746838438.524:1494): pid=5950 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.754691] audit: type=1106 audit(1746838438.827:1495): pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.762847] audit: type=1104 audit(1746838438.830:1496): pid=5948 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.299407] kauditd_printk_skb: 1 callbacks suppressed [ 183.299410] audit: type=1334 audit(1746838452.372:1498): prog-id=87 op=UNLOAD [ 183.304566] audit: type=1334 audit(1746838452.372:1499): prog-id=99 op=UNLOAD [ 184.522452] audit: type=1400 audit(1746838453.595:1500): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 184.528051] audit: type=1400 audit(1746838453.595:1501): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 184.535010] audit: type=1400 audit(1746838453.595:1502): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 184.540666] audit: type=1400 audit(1746838453.595:1503): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 184.547044] audit: type=1400 audit(1746838453.595:1504): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 184.552906] audit: type=1400 audit(1746838453.595:1505): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 184.558861] audit: type=1400 audit(1746838453.595:1506): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 184.567521] audit: type=1400 audit(1746838453.595:1507): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 190.021382] kauditd_printk_skb: 114 callbacks suppressed [ 190.021385] audit: type=1334 audit(1746838459.094:1540): prog-id=83 op=UNLOAD [ 190.026897] audit: type=1334 audit(1746838459.094:1541): prog-id=105 op=UNLOAD [ 190.465029] audit: type=1400 audit(1746838459.537:1542): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 190.470404] audit: type=1400 audit(1746838459.537:1543): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 190.477492] audit: type=1400 audit(1746838459.537:1544): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 190.484612] audit: type=1400 audit(1746838459.537:1545): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 190.492263] audit: type=1400 audit(1746838459.537:1546): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 190.498127] audit: type=1400 audit(1746838459.537:1547): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 190.504469] audit: type=1400 audit(1746838459.537:1548): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 190.512620] audit: type=1400 audit(1746838459.537:1549): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 205.089813] kauditd_printk_skb: 49 callbacks suppressed [ 205.089818] audit: type=1106 audit(1746838474.162:1560): pid=1905 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.101486] audit: type=1104 audit(1746838474.162:1561): pid=1905 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.113529] audit: type=1131 audit(1746838474.186:1562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.31.121:22-139.178.89.65:50918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.208342] audit: type=1400 audit(1746838474.281:1563): avc: denied { watch } for pid=4903 comm="apiserver" path="/calico-apiserver-certs/..2025_05_10_00_52_16.3538177358/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c781 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c160,c781 tclass=file permissive=0 [ 205.217283] audit: type=1300 audit(1746838474.281:1563): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f37500 a2=fc6 a3=0 items=0 ppid=4437 pid=4903 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c781 key=(null) [ 205.226305] audit: type=1327 audit(1746838474.281:1563): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 205.570539] audit: type=1131 audit(1746838474.643:1564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.654639] audit: type=1131 audit(1746838474.727:1565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.667981] audit: type=1131 audit(1746838474.736:1566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.676763] audit: type=1131 audit(1746838474.737:1567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'