4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.28.58:22-139.178.89.65:50048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 19.877245] Initializing XFRM netlink socket This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:49:43 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 27.660180] kauditd_printk_skb: 84 callbacks suppressed [ 27.660183] audit: type=1130 audit(1746838190.259:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 27.664362] audit: type=1131 audit(1746838190.259:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 27.965605] audit: type=1130 audit(1746838190.566:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 28.051515] audit: type=1131 audit(1746838190.652:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 35.845757] audit: type=1130 audit(1746838198.447:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 35.849284] audit: type=1131 audit(1746838198.450:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 36.257103] audit: type=1400 audit(1746838198.858:244): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 36.260292] audit: type=1400 audit(1746838198.858:245): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 36.265200] audit: type=1400 audit(1746838198.858:246): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 36.270782] audit: type=1400 audit(1746838198.858:247): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 36.279121] audit: audit_backlog=65 > audit_backlog_limit=64 [ 36.279778] audit: type=1400 audit(1746838198.858:248): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 36.281445] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 36.281448] audit: backlog limit exceeded [ 41.723205] kauditd_printk_skb: 710 callbacks suppressed [ 41.723208] audit: type=1400 audit(1746838204.324:515): avc: denied { watch } for pid=2442 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 41.737689] audit: type=1300 audit(1746838204.324:515): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0006f4ea0 a2=fc6 a3=0 items=0 ppid=2295 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 key=(null) [ 41.750500] audit: type=1327 audit(1746838204.324:515): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 41.763178] audit: type=1400 audit(1746838204.332:516): avc: denied { watch } for pid=2442 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 41.772703] audit: type=1300 audit(1746838204.332:516): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004d4f40 a2=fc6 a3=0 items=0 ppid=2295 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 key=(null) [ 41.785425] audit: type=1327 audit(1746838204.332:516): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 42.736950] audit: type=1400 audit(1746838205.338:517): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 42.744432] audit: type=1300 audit(1746838205.338:517): arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c00391f170 a2=fc6 a3=0 items=0 ppid=2270 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 key=(null) [ 42.753155] audit: type=1327 audit(1746838205.338:517): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E3538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 42.764352] audit: type=1400 audit(1746838205.338:518): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 46.807734] kauditd_printk_skb: 263 callbacks suppressed [ 46.807737] audit: type=1130 audit(1746838209.408:772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 46.999755] audit: type=1400 audit(1746838209.601:773): avc: denied { mac_admin } for pid=2592 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 47.005515] audit: type=1401 audit(1746838209.601:773): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 47.009654] audit: type=1300 audit(1746838209.601:773): arch=c000003e syscall=188 success=no exit=-22 a0=c000bd72f0 a1=c000bbd290 a2=c000bd72c0 a3=25 items=0 ppid=1 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 47.024639] audit: type=1327 audit(1746838209.601:773): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 47.033249] audit: type=1400 audit(1746838209.601:774): avc: denied { mac_admin } for pid=2592 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 47.039357] audit: type=1401 audit(1746838209.601:774): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 47.043504] audit: type=1300 audit(1746838209.601:774): arch=c000003e syscall=188 success=no exit=-22 a0=c000c74060 a1=c000bbd2a8 a2=c000bd7380 a3=25 items=0 ppid=1 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 47.053300] audit: type=1327 audit(1746838209.601:774): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 47.150610] audit: type=1400 audit(1746838209.751:775): avc: denied { mac_admin } for pid=2592 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.058501] kauditd_printk_skb: 18 callbacks suppressed [ 52.058504] audit: type=1400 audit(1746838214.660:781): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.066743] audit: type=1400 audit(1746838214.660:782): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.072429] audit: type=1400 audit(1746838214.660:783): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.078057] audit: type=1400 audit(1746838214.660:784): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.083648] audit: type=1400 audit(1746838214.660:785): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.100083] audit: type=1400 audit(1746838214.660:786): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.109845] audit: type=1400 audit(1746838214.660:787): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.117748] audit: type=1400 audit(1746838214.660:788): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.125920] audit: type=1400 audit(1746838214.660:789): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.132381] audit: type=1400 audit(1746838214.660:790): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.878426] kauditd_printk_skb: 362 callbacks suppressed [ 57.878429] audit: type=1325 audit(1746838220.480:897): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2963 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 57.884155] audit: type=1300 audit(1746838220.480:897): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe10920b00 a2=0 a3=7ffe10920aec items=0 ppid=2761 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.892518] audit: type=1327 audit(1746838220.480:897): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 57.898318] audit: type=1325 audit(1746838220.500:898): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2963 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 57.902920] audit: type=1300 audit(1746838220.500:898): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe10920b00 a2=0 a3=0 items=0 ppid=2761 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.911646] audit: type=1327 audit(1746838220.500:898): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 57.931156] audit: type=1325 audit(1746838220.530:899): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 57.937791] audit: type=1300 audit(1746838220.530:899): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffee6f410b0 a2=0 a3=7ffee6f4109c items=0 ppid=2761 pid=2965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.948455] audit: type=1327 audit(1746838220.530:899): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 57.956515] audit: type=1325 audit(1746838220.558:900): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 67.688636] kauditd_printk_skb: 229 callbacks suppressed [ 67.688638] audit: type=1400 audit(1746838230.291:966): avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 67.696083] audit: type=1300 audit(1746838230.291:966): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f0c01a56018 items=0 ppid=3084 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 67.704544] audit: type=1327 audit(1746838230.291:966): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313139343465636362653932323762333561336133636435653263 [ 67.712689] audit: type=1400 audit(1746838230.296:967): avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 67.718429] audit: type=1400 audit(1746838230.296:967): avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 67.724257] audit: type=1400 audit(1746838230.296:967): avc: denied { bpf } for pid=3406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 67.736359] audit: type=1400 audit(1746838230.296:967): avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 67.744765] audit: type=1400 audit(1746838230.296:967): avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 67.752319] audit: type=1400 audit(1746838230.296:967): avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 67.758346] audit: type=1400 audit(1746838230.296:967): avc: denied { perfmon } for pid=3406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.465520] kauditd_printk_skb: 34 callbacks suppressed [ 76.465523] audit: type=1400 audit(1746838239.069:973): avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.473163] audit: type=1300 audit(1746838239.069:973): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bf6b0 a2=3c a3=7f3cad726a18 items=0 ppid=3084 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.482041] audit: type=1327 audit(1746838239.069:973): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363664356164386562393234643339353265313065336165646262 [ 76.491779] audit: type=1400 audit(1746838239.069:974): avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.499298] audit: type=1400 audit(1746838239.069:974): avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.507754] audit: type=1400 audit(1746838239.069:974): avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.515240] audit: type=1400 audit(1746838239.069:974): avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.522420] audit: type=1400 audit(1746838239.069:974): avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.529102] audit: type=1400 audit(1746838239.069:974): avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.535789] audit: type=1400 audit(1746838239.069:974): avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.907096] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 76.909138] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:42 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:43 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 81.694205] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 81.695283] IPv6: ADDRCONF(NETDEV_CHANGE): calibfa02c1c7fb: link becomes ready [ 81.741950] kauditd_printk_skb: 562 callbacks suppressed [ 81.741953] audit: type=1325 audit(1746838244.345:1081): table=filter:101 family=2 entries=40 op=nft_register_chain pid=4213 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 81.749812] audit: type=1300 audit(1746838244.345:1081): arch=c000003e syscall=46 success=yes exit=23492 a0=3 a1=7fff872e0f40 a2=0 a3=7fff872e0f2c items=0 ppid=3947 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.757722] audit: type=1327 audit(1746838244.345:1081): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 81.812425] audit: type=1400 audit(1746838244.416:1082): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 81.815816] audit: type=1400 audit(1746838244.416:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 81.819540] audit: type=1400 audit(1746838244.416:1084): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 81.823135] audit: type=1400 audit(1746838244.416:1085): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 81.826838] audit: type=1400 audit(1746838244.416:1086): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 81.830309] audit: type=1400 audit(1746838244.416:1087): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 81.837046] audit: type=1400 audit(1746838244.416:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.435052] IPv6: ADDRCONF(NETDEV_CHANGE): calie5cf9a59240: link becomes ready [ 83.580191] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 83.582671] IPv6: ADDRCONF(NETDEV_CHANGE): cali98c7ea9e96b: link becomes ready [ 84.616306] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 84.617344] IPv6: ADDRCONF(NETDEV_CHANGE): cali5a2d5d5b0b3: link becomes ready This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:47 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 84.812665] IPv6: ADDRCONF(NETDEV_CHANGE): cali0761bcf2692: link becomes ready [ 85.603161] IPv6: ADDRCONF(NETDEV_CHANGE): cali8742a52f1f1: link becomes ready This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:48 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 86.627275] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 86.628379] IPv6: ADDRCONF(NETDEV_CHANGE): calie9be09c746f: link becomes ready This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:49 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 86.807503] kauditd_printk_skb: 671 callbacks suppressed [ 86.807505] audit: type=1325 audit(1746838249.411:1297): table=filter:117 family=2 entries=60 op=nft_register_chain pid=5058 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 86.811068] audit: type=1300 audit(1746838249.411:1297): arch=c000003e syscall=46 success=yes exit=27432 a0=3 a1=7ffc7652b4e0 a2=0 a3=7ffc7652b4cc items=0 ppid=3947 pid=5058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 86.820610] audit: type=1327 audit(1746838249.411:1297): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 86.845091] audit: type=1400 audit(1746838249.449:1298): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.848363] audit: type=1400 audit(1746838249.449:1299): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.852613] audit: type=1400 audit(1746838249.449:1300): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.859615] audit: type=1400 audit(1746838249.449:1301): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.863715] audit: type=1400 audit(1746838249.449:1302): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.869607] audit: type=1400 audit(1746838249.449:1303): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.876001] audit: type=1400 audit(1746838249.449:1304): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:50 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:51 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 89.120043] IPv6: ADDRCONF(NETDEV_CHANGE): cali53225fbc81c: link becomes ready This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:52 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:53 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:50:54 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 93.067872] kauditd_printk_skb: 253 callbacks suppressed [ 93.067875] audit: type=1400 audit(1746838255.672:1376): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.072337] audit: type=1400 audit(1746838255.672:1377): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.075855] audit: type=1400 audit(1746838255.672:1378): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.079623] audit: type=1400 audit(1746838255.672:1379): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.084541] audit: type=1400 audit(1746838255.672:1380): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.088995] audit: type=1400 audit(1746838255.672:1381): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.093141] audit: type=1400 audit(1746838255.672:1382): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.098113] audit: type=1400 audit(1746838255.672:1383): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.102237] audit: type=1400 audit(1746838255.672:1384): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.105719] audit: type=1400 audit(1746838255.673:1385): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.729999] kauditd_printk_skb: 107 callbacks suppressed [ 101.730001] audit: type=1400 audit(1746838264.334:1411): avc: denied { watch } for pid=2442 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 101.739401] audit: type=1400 audit(1746838264.334:1412): avc: denied { watch } for pid=2442 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 101.747537] audit: type=1300 audit(1746838264.334:1412): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014eb830 a2=fc6 a3=0 items=0 ppid=2295 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 key=(null) [ 101.756285] audit: type=1327 audit(1746838264.334:1412): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 101.764865] audit: type=1300 audit(1746838264.334:1411): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002037320 a2=fc6 a3=0 items=0 ppid=2295 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 key=(null) [ 101.775989] audit: type=1327 audit(1746838264.334:1411): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 101.810002] audit: type=1130 audit(1746838264.412:1413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.58:22-139.178.89.65:51730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 101.991216] audit: type=1101 audit(1746838264.595:1414): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 102.000146] audit: type=1103 audit(1746838264.604:1415): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 102.006685] audit: type=1006 audit(1746838264.604:1416): pid=5484 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 107.323364] kauditd_printk_skb: 25 callbacks suppressed [ 107.323367] audit: type=1130 audit(1746838269.927:1428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.58:22-139.178.89.65:35508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 107.546752] audit: type=1101 audit(1746838270.151:1429): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.556176] audit: type=1103 audit(1746838270.160:1430): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.563924] audit: type=1006 audit(1746838270.160:1431): pid=5516 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 107.569459] audit: type=1300 audit(1746838270.160:1431): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd99fe90e0 a2=3 a3=0 items=0 ppid=1 pid=5516 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.579162] audit: type=1327 audit(1746838270.160:1431): proctitle=737368643A20636F7265205B707269765D [ 107.599613] audit: type=1105 audit(1746838270.204:1432): pid=5516 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.610901] audit: type=1103 audit(1746838270.214:1433): pid=5524 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.929320] audit: type=1106 audit(1746838270.532:1434): pid=5516 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.939854] audit: type=1104 audit(1746838270.532:1435): pid=5516 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.218771] kauditd_printk_skb: 35 callbacks suppressed [ 114.218774] audit: type=1130 audit(1746838276.822:1459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.58:22-139.178.89.65:45382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 114.466702] audit: type=1101 audit(1746838277.069:1460): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.476056] audit: type=1103 audit(1746838277.078:1461): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.482950] audit: type=1006 audit(1746838277.078:1462): pid=5984 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 114.487542] audit: type=1300 audit(1746838277.078:1462): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8d417990 a2=3 a3=0 items=0 ppid=1 pid=5984 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.495994] audit: type=1327 audit(1746838277.078:1462): proctitle=737368643A20636F7265205B707269765D [ 114.504690] audit: type=1105 audit(1746838277.107:1463): pid=5984 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.514667] audit: type=1103 audit(1746838277.109:1464): pid=5986 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.895610] audit: type=1106 audit(1746838277.498:1465): pid=5984 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.903965] audit: type=1104 audit(1746838277.498:1466): pid=5984 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.474067] kauditd_printk_skb: 1 callbacks suppressed [ 119.474069] audit: type=1334 audit(1746838282.077:1468): prog-id=201 op=UNLOAD [ 119.480968] audit: type=1334 audit(1746838282.084:1469): prog-id=204 op=UNLOAD [ 119.604506] audit: type=1334 audit(1746838282.205:1470): prog-id=173 op=UNLOAD [ 119.607561] audit: type=1334 audit(1746838282.210:1471): prog-id=176 op=UNLOAD [ 119.639416] audit: type=1334 audit(1746838282.242:1472): prog-id=220 op=UNLOAD [ 119.643132] audit: type=1334 audit(1746838282.246:1473): prog-id=223 op=UNLOAD [ 119.713688] audit: type=1325 audit(1746838282.316:1474): table=filter:131 family=2 entries=8 op=nft_register_rule pid=6093 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 119.719388] audit: type=1300 audit(1746838282.316:1474): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffb7ad7bf0 a2=0 a3=7fffb7ad7bdc items=0 ppid=2761 pid=6093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.732117] audit: type=1327 audit(1746838282.316:1474): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 119.744195] audit: type=1325 audit(1746838282.347:1475): table=nat:132 family=2 entries=30 op=nft_register_rule pid=6093 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:51:23 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 121.334776] IPv6: ADDRCONF(NETDEV_CHANGE): cali8236a506c15: link becomes ready This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:51:24 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: This is ip-172-31-28-58 (Linux x86_64 5.15.181-flatcar) 00:51:26 SSH host key: SHA256:H1ho4OOLkPHig8Yr+Vc9wPriO5k0OfFzBmhN9UlcGbQ (RSA) SSH host key: SHA256:bJCBtrNw5E0PE619p5Qkl6ysJJl/25e2jGfKVOf6YhQ (ED25519) SSH host key: SHA256:c+ZySvwFmPOta+sRcouW3ungSTzfEeX+KuMaxQ+nVyw (ECDSA) eth0: 172.31.28.58 fe80::426:c9ff:fea6:263 ip-172-31-28-58 login: [ 125.158264] kauditd_printk_skb: 172 callbacks suppressed [ 125.158266] audit: type=1400 audit(1746838287.760:1540): avc: denied { bpf } for pid=6533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.162581] audit: type=1400 audit(1746838287.760:1540): avc: denied { bpf } for pid=6533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.166473] audit: type=1400 audit(1746838287.760:1540): avc: denied { perfmon } for pid=6533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.169901] audit: type=1400 audit(1746838287.760:1540): avc: denied { perfmon } for pid=6533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.174100] audit: type=1400 audit(1746838287.760:1540): avc: denied { perfmon } for pid=6533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.177382] audit: type=1400 audit(1746838287.760:1540): avc: denied { perfmon } for pid=6533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.180925] audit: type=1400 audit(1746838287.760:1540): avc: denied { perfmon } for pid=6533 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.184324] audit: type=1400 audit(1746838287.760:1540): avc: denied { bpf } for pid=6533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.187604] audit: type=1400 audit(1746838287.760:1540): avc: denied { bpf } for pid=6533 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.190900] audit: type=1334 audit(1746838287.760:1540): prog-id=235 op=LOAD [ 131.525043] kauditd_printk_skb: 521 callbacks suppressed [ 131.525046] audit: type=1130 audit(1746838294.127:1672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.58:22-139.178.89.65:54416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.714924] audit: type=1101 audit(1746838294.317:1673): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.723039] audit: type=1103 audit(1746838294.325:1674): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.729539] audit: type=1006 audit(1746838294.325:1675): pid=6670 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 131.733782] audit: type=1300 audit(1746838294.325:1675): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3bcdab20 a2=3 a3=0 items=0 ppid=1 pid=6670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.741240] audit: type=1327 audit(1746838294.325:1675): proctitle=737368643A20636F7265205B707269765D [ 131.752468] audit: type=1105 audit(1746838294.354:1676): pid=6670 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.760616] audit: type=1103 audit(1746838294.359:1677): pid=6672 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 132.001920] audit: type=1106 audit(1746838294.604:1678): pid=6670 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 132.010400] audit: type=1104 audit(1746838294.604:1679): pid=6670 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.548723] kauditd_printk_skb: 57 callbacks suppressed [ 140.548726] audit: type=1325 audit(1746838303.150:1721): table=filter:150 family=2 entries=20 op=nft_register_rule pid=6899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 140.555352] audit: type=1300 audit(1746838303.150:1721): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdc1e466d0 a2=0 a3=7ffdc1e466bc items=0 ppid=2761 pid=6899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 140.565821] audit: type=1327 audit(1746838303.150:1721): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 140.570242] audit: type=1325 audit(1746838303.160:1722): table=nat:151 family=2 entries=106 op=nft_register_chain pid=6899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 140.574686] audit: type=1300 audit(1746838303.160:1722): arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffdc1e466d0 a2=0 a3=7ffdc1e466bc items=0 ppid=2761 pid=6899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 140.583519] audit: type=1327 audit(1746838303.160:1722): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 140.660956] audit: type=1130 audit(1746838303.262:1723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.58:22-139.178.89.65:36042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 140.885755] audit: type=1101 audit(1746838303.485:1724): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.896181] audit: type=1103 audit(1746838303.487:1725): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.910498] audit: type=1006 audit(1746838303.487:1726): pid=6909 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 146.269441] kauditd_printk_skb: 7 callbacks suppressed [ 146.269444] audit: type=1130 audit(1746838308.870:1732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.58:22-139.178.89.65:57892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 146.459743] audit: type=1101 audit(1746838309.061:1733): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.467196] audit: type=1103 audit(1746838309.062:1734): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.476220] audit: type=1006 audit(1746838309.062:1735): pid=7006 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 146.481270] audit: type=1300 audit(1746838309.062:1735): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff37fd8a00 a2=3 a3=0 items=0 ppid=1 pid=7006 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.489073] audit: type=1327 audit(1746838309.062:1735): proctitle=737368643A20636F7265205B707269765D [ 146.494351] audit: type=1105 audit(1746838309.091:1736): pid=7006 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.502347] audit: type=1103 audit(1746838309.095:1737): pid=7015 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.781323] audit: type=1106 audit(1746838309.382:1738): pid=7006 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.792135] audit: type=1104 audit(1746838309.382:1739): pid=7006 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.808789] kauditd_printk_skb: 153 callbacks suppressed [ 151.808792] audit: type=1130 audit(1746838314.407:1776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.58:22-139.178.89.65:57904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.025955] audit: type=1101 audit(1746838314.627:1777): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.037735] audit: type=1103 audit(1746838314.638:1778): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.046680] audit: type=1006 audit(1746838314.638:1779): pid=7305 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 152.052844] audit: type=1300 audit(1746838314.638:1779): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff21c0ed0 a2=3 a3=0 items=0 ppid=1 pid=7305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.064431] audit: type=1327 audit(1746838314.638:1779): proctitle=737368643A20636F7265205B707269765D [ 152.073228] audit: type=1105 audit(1746838314.666:1780): pid=7305 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.084422] audit: type=1103 audit(1746838314.673:1781): pid=7307 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.517377] audit: type=1334 audit(1746838316.116:1782): prog-id=257 op=UNLOAD [ 153.624671] audit: type=1106 audit(1746838316.224:1783): pid=7305 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.883450] kauditd_printk_skb: 268 callbacks suppressed [ 156.883453] audit: type=1400 audit(1746838319.483:1833): avc: denied { bpf } for pid=7607 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 156.895144] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.897880] audit: audit_lost=68 audit_rate_limit=0 audit_backlog_limit=64 [ 156.900195] audit: type=1400 audit(1746838319.483:1833): avc: denied { bpf } for pid=7607 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 156.900699] audit: backlog limit exceeded [ 156.912145] audit: type=1400 audit(1746838319.483:1833): avc: denied { perfmon } for pid=7607 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 156.921012] audit: type=1400 audit(1746838319.483:1833): avc: denied { perfmon } for pid=7607 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 156.928635] audit: type=1400 audit(1746838319.483:1833): avc: denied { perfmon } for pid=7607 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 156.935283] audit: type=1400 audit(1746838319.483:1833): avc: denied { perfmon } for pid=7607 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 156.941481] audit: type=1400 audit(1746838319.483:1833): avc: denied { perfmon } for pid=7607 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 162.754057] kauditd_printk_skb: 287 callbacks suppressed [ 162.754060] audit: type=1400 audit(1746838325.354:1901): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 162.764228] audit: type=1400 audit(1746838325.354:1900): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 162.774153] audit: type=1300 audit(1746838325.354:1901): arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00fadd230 a2=fc6 a3=0 items=0 ppid=2270 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 key=(null) [ 162.783565] audit: type=1327 audit(1746838325.354:1901): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E3538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 162.794795] audit: type=1300 audit(1746838325.354:1900): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00e39fa80 a2=fc6 a3=0 items=0 ppid=2270 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 key=(null) [ 162.804203] audit: type=1327 audit(1746838325.354:1900): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E3538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 162.813089] audit: type=1400 audit(1746838325.384:1902): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 162.820285] audit: type=1300 audit(1746838325.384:1902): arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00f392840 a2=fc6 a3=0 items=0 ppid=2270 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 key=(null) [ 162.829777] audit: type=1327 audit(1746838325.384:1902): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E3538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 162.838057] audit: type=1400 audit(1746838325.388:1903): avc: denied { watch } for pid=2427 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c611 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 170.161833] kauditd_printk_skb: 19 callbacks suppressed [ 170.161835] audit: type=1400 audit(1746838332.762:1915): avc: denied { watch } for pid=2442 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 170.170004] audit: type=1400 audit(1746838332.762:1916): avc: denied { watch } for pid=2442 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 170.176594] audit: type=1300 audit(1746838332.762:1916): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002bd28e0 a2=fc6 a3=0 items=0 ppid=2295 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 key=(null) [ 170.185017] audit: type=1327 audit(1746838332.762:1916): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 170.192698] audit: type=1300 audit(1746838332.762:1915): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d4d920 a2=fc6 a3=0 items=0 ppid=2295 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 key=(null) [ 170.201400] audit: type=1327 audit(1746838332.762:1915): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 170.209153] audit: type=1400 audit(1746838332.778:1917): avc: denied { watch } for pid=2442 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 170.215827] audit: type=1300 audit(1746838332.778:1917): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002bd2aa0 a2=fc6 a3=0 items=0 ppid=2295 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 key=(null) [ 170.224320] audit: type=1327 audit(1746838332.778:1917): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 170.232004] audit: type=1400 audit(1746838332.779:1918): avc: denied { watch } for pid=2442 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c394,c682 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0