-networkd.socket. [ 10.735500] systemd[1]: Listening on systemd-udevd-control.socket. [ 10.738657] systemd[1]: Listening on systemd-udevd-kernel.socket. [ 10.740994] systemd[1]: Listening on systemd-userdbd.socket. [ 10.744354] systemd[1]: Mounting dev-hugepages.mount... [ 10.747742] systemd[1]: Mounting dev-mqueue.mount... [ 10.751629] systemd[1]: Mounting media.mount... [ 10.753894] systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 10.758103] systemd[1]: Mounting sys-kernel-debug.mount... [ 10.761773] systemd[1]: Mounting sys-kernel-tracing.mount... [ 10.771675] systemd[1]: Mounting tmp.mount... [ 10.777012] systemd[1]: Starting flatcar-tmpfiles.service... [ 10.780356] systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. [ 10.785364] systemd[1]: Starting kmod-static-nodes.service... [ 10.789185] systemd[1]: Starting modprobe@configfs.service... [ 10.793213] systemd[1]: Starting modprobe@dm_mod.service... [ 10.797346] systemd[1]: Starting modprobe@drm.service... [ 10.802434] systemd[1]: Starting modprobe@efi_pstore.service... [ 10.807139] systemd[1]: Starting modprobe@fuse.service... [ 10.813749] systemd[1]: Starting modprobe@loop.service... [ 10.816676] systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 10.823038] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 10.825258] systemd[1]: Stopped systemd-fsck-root.service. [ 10.828375] kauditd_printk_skb: 70 callbacks suppressed [ 10.828377] audit: type=1131 audit(1757724503.835:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.837585] systemd[1]: systemd-fsck-usr.service: Deactivated successfully. [ 10.840085] systemd[1]: Stopped systemd-fsck-usr.service. [ 10.843310] audit: type=1131 audit(1757724503.850:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.850707] systemd[1]: Stopped systemd-journald.service. [ 10.855560] audit: type=1130 audit(1757724503.860:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.863940] systemd[1]: Starting systemd-journald.service... [ 10.871393] audit: type=1131 audit(1757724503.860:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.878048] audit: type=1334 audit(1757724503.862:114): prog-id=21 op=LOAD [ 10.882480] systemd[1]: Starting systemd-modules-load.service... [ 10.888871] audit: type=1334 audit(1757724503.862:115): prog-id=22 op=LOAD [ 10.892493] systemd[1]: Starting systemd-network-generator.service... [ 10.899327] systemd[1]: Starting systemd-remount-fs.service... [ 10.901559] audit: type=1334 audit(1757724503.870:116): prog-id=23 op=LOAD [ 10.906830] audit: type=1334 audit(1757724503.870:117): prog-id=19 op=UNLOAD [ 10.909570] systemd[1]: Starting systemd-udev-trigger.service... [ 10.910300] loop: module loaded [ 10.911657] audit: type=1334 audit(1757724503.870:118): prog-id=20 op=UNLOAD [ 10.917045] systemd[1]: verity-setup.service: Deactivated successfully. [ 10.919429] systemd[1]: Stopped verity-setup.service. [ 10.922499] audit: type=1131 audit(1757724503.929:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.923905] fuse: init (API version 7.34) [ 10.929163] systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 10.937724] systemd[1]: Mounted dev-hugepages.mount. [ 10.943393] systemd[1]: Mounted dev-mqueue.mount. [ 10.946559] systemd[1]: Mounted media.mount. [ 10.949656] systemd[1]: Mounted sys-kernel-debug.mount. [ 10.952966] systemd[1]: Mounted sys-kernel-tracing.mount. [ 10.956483] systemd[1]: Mounted tmp.mount. [ 10.959473] systemd[1]: Started systemd-journald.service. [ 11.049625] systemd-journald[1341]: Received client request to flush runtime journal. [ 11.870995] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 [ 11.890001] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 11.893391] ACPI: button: Power Button [PWRF] [ 11.895575] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 [ 11.917169] ACPI: button: Sleep Button [SLPF] [ 11.952923] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 11.970927] input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 [ 11.987471] mousedev: PS/2 mouse device common for all mice [ 12.246522] loop0: detected capacity change from 0 to 221472 [ 12.353265] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 12.378565] loop1: detected capacity change from 0 to 221472 [ 13.740734] EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks [ 13.830139] EXT4-fs (nvme0n1p9): resized filesystem to 1489915 2025/09/13 00:48:28Z: Amazon SSM Agent v2.3.1319.0 is running 2025/09/13 00:48:28Z: OsProductName: Flatcar Container Linux by Kinvolk 2025/09/13 00:48:28Z: OsVersion: 3510.3.8 This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:48:31 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 18.104823] kauditd_printk_skb: 214 callbacks suppressed [ 18.104827] audit: type=1305 audit(1757724512.048:217): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 18.110710] audit: type=1300 audit(1757724512.048:217): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe428540d0 a2=420 a3=0 items=0 ppid=1 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 18.117122] audit: type=1327 audit(1757724512.048:217): proctitle=2F7362696E2F617564697463746C002D44 [ 18.119441] audit: type=1131 audit(1757724512.050:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 18.136127] audit: type=1130 audit(1757724512.079:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 18.140382] audit: type=1106 audit(1757724512.081:220): pid=1894 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 18.144154] audit: type=1104 audit(1757724512.081:221): pid=1894 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 18.161327] audit: type=1106 audit(1757724512.105:222): pid=1891 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 18.166120] audit: type=1104 audit(1757724512.105:223): pid=1891 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 18.169886] audit: type=1131 audit(1757724512.107:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.26.110:22-147.75.109.163:42274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 18.915940] Initializing XFRM netlink socket This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:48:33 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 27.747884] kauditd_printk_skb: 84 callbacks suppressed [ 27.747886] audit: type=1130 audit(1757724521.690:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 27.752247] audit: type=1131 audit(1757724521.690:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 27.988838] audit: type=1130 audit(1757724521.932:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 28.070789] audit: type=1131 audit(1757724522.014:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 35.147730] audit: type=1130 audit(1757724529.091:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 35.151546] audit: type=1131 audit(1757724529.094:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 35.574696] audit: type=1400 audit(1757724529.518:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.578825] audit: type=1400 audit(1757724529.518:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.583035] audit: type=1400 audit(1757724529.522:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.586903] audit: type=1400 audit(1757724529.522:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.593891] audit: type=1400 audit(1757724529.522:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.600931] audit: type=1400 audit(1757724529.522:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.607995] audit: type=1400 audit(1757724529.522:271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 35.615104] audit: type=1400 audit(1757724529.522:272): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 40.525417] kauditd_printk_skb: 602 callbacks suppressed [ 40.525421] audit: type=1400 audit(1757724534.467:595): avc: denied { watch } for pid=2400 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c340,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 40.541760] audit: type=1300 audit(1757724534.467:595): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c008611860 a2=fc6 a3=0 items=0 ppid=2238 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c340,c883 key=(null) [ 40.557055] audit: type=1327 audit(1757724534.467:595): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 40.567822] audit: type=1400 audit(1757724534.469:596): avc: denied { watch } for pid=2400 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c340,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 40.581715] audit: type=1300 audit(1757724534.469:596): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0038dd140 a2=fc6 a3=0 items=0 ppid=2238 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c340,c883 key=(null) [ 40.597022] audit: type=1327 audit(1757724534.469:596): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 40.608490] audit: type=1400 audit(1757724534.469:597): avc: denied { watch } for pid=2400 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c340,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 40.620839] audit: type=1300 audit(1757724534.469:597): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0038dd260 a2=fc6 a3=0 items=0 ppid=2238 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c340,c883 key=(null) [ 40.632826] audit: type=1327 audit(1757724534.469:597): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 40.643938] audit: type=1400 audit(1757724534.469:598): avc: denied { watch } for pid=2400 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c340,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 45.985468] kauditd_printk_skb: 307 callbacks suppressed [ 45.985472] audit: type=1400 audit(1757724539.929:889): avc: denied { watch } for pid=2355 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c44,c493 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 45.994555] audit: type=1400 audit(1757724539.929:890): avc: denied { watch } for pid=2355 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c44,c493 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 46.001679] audit: type=1300 audit(1757724539.929:890): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d418e0 a2=fc6 a3=0 items=0 ppid=2213 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c44,c493 key=(null) [ 46.009950] audit: type=1327 audit(1757724539.929:890): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 46.017392] audit: type=1400 audit(1757724539.929:891): avc: denied { watch } for pid=2355 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c44,c493 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 46.023463] audit: type=1300 audit(1757724539.929:891): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d41940 a2=fc6 a3=0 items=0 ppid=2213 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c44,c493 key=(null) [ 46.031613] audit: type=1327 audit(1757724539.929:891): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 46.039651] audit: type=1400 audit(1757724539.932:892): avc: denied { watch } for pid=2355 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c44,c493 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 46.048120] audit: type=1300 audit(1757724539.932:892): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d41fa0 a2=fc6 a3=0 items=0 ppid=2213 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c44,c493 key=(null) [ 46.059252] audit: type=1327 audit(1757724539.932:892): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 50.987038] kauditd_printk_skb: 189 callbacks suppressed [ 50.987041] audit: type=1325 audit(1757724544.930:945): table=filter:48 family=2 entries=1 op=nft_register_rule pid=2741 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 50.993864] audit: type=1300 audit(1757724544.930:945): arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe3e5d8740 a2=0 a3=7ffe3e5d872c items=0 ppid=2636 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 51.005634] audit: type=1327 audit(1757724544.930:945): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 [ 51.016799] audit: type=1325 audit(1757724544.933:946): table=filter:49 family=2 entries=1 op=nft_register_chain pid=2742 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.023242] audit: type=1300 audit(1757724544.933:946): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf50d2730 a2=0 a3=7ffcf50d271c items=0 ppid=2636 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 51.035323] audit: type=1327 audit(1757724544.933:946): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 [ 51.040771] audit: type=1325 audit(1757724544.938:947): table=filter:50 family=2 entries=1 op=nft_register_rule pid=2744 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.046984] audit: type=1300 audit(1757724544.938:947): arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc9022eae0 a2=0 a3=7ffc9022eacc items=0 ppid=2636 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 51.058731] audit: type=1327 audit(1757724544.938:947): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D [ 51.069546] audit: type=1325 audit(1757724544.949:948): table=filter:51 family=2 entries=1 op=nft_register_rule pid=2747 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 59.808389] kauditd_printk_skb: 170 callbacks suppressed [ 59.808392] audit: type=1106 audit(1757724553.751:1004): pid=1924 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 59.825029] audit: type=1104 audit(1757724553.751:1005): pid=1924 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 59.859277] audit: type=1106 audit(1757724553.802:1006): pid=1921 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 59.873083] audit: type=1104 audit(1757724553.802:1007): pid=1921 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 59.888119] audit: type=1131 audit(1757724553.829:1008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.26.110:22-147.75.109.163:42288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.682623] audit: type=1325 audit(1757724554.626:1009): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3004 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 60.688396] audit: type=1300 audit(1757724554.626:1009): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff68e6e440 a2=0 a3=7fff68e6e42c items=0 ppid=2636 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 60.708027] audit: type=1327 audit(1757724554.626:1009): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 60.717017] audit: type=1325 audit(1757724554.647:1010): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3004 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 60.722543] audit: type=1300 audit(1757724554.647:1010): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff68e6e440 a2=0 a3=0 items=0 ppid=2636 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 65.220487] kauditd_printk_skb: 7 callbacks suppressed [ 65.220490] audit: type=1325 audit(1757724559.164:1013): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3008 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 65.230602] audit: type=1300 audit(1757724559.164:1013): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc7ffe73f0 a2=0 a3=7ffc7ffe73dc items=0 ppid=2636 pid=3008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 65.240578] audit: type=1327 audit(1757724559.164:1013): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 65.245630] audit: type=1325 audit(1757724559.175:1014): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3008 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 65.255294] audit: type=1300 audit(1757724559.175:1014): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc7ffe73f0 a2=0 a3=0 items=0 ppid=2636 pid=3008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 65.266699] audit: type=1327 audit(1757724559.175:1014): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 65.279219] audit: type=1325 audit(1757724559.222:1015): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3010 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 65.285168] audit: type=1300 audit(1757724559.222:1015): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffecd670ee0 a2=0 a3=7ffecd670ecc items=0 ppid=2636 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 65.296361] audit: type=1327 audit(1757724559.222:1015): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 65.304616] audit: type=1325 audit(1757724559.248:1016): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3010 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 73.513219] kauditd_printk_skb: 223 callbacks suppressed [ 73.513221] audit: type=1400 audit(1757724567.457:1080): avc: denied { perfmon } for pid=3338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.522535] audit: type=1300 audit(1757724567.457:1080): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f22346afb08 items=0 ppid=3149 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.530988] audit: type=1327 audit(1757724567.457:1080): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343233383362616230336533663231313465356130303863396263 [ 73.548023] audit: type=1400 audit(1757724567.458:1081): avc: denied { bpf } for pid=3338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.556560] audit: type=1400 audit(1757724567.458:1081): avc: denied { bpf } for pid=3338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.564864] audit: type=1400 audit(1757724567.458:1081): avc: denied { bpf } for pid=3338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.572881] audit: type=1400 audit(1757724567.458:1081): avc: denied { perfmon } for pid=3338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.587482] audit: type=1400 audit(1757724567.458:1081): avc: denied { perfmon } for pid=3338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.594641] audit: type=1400 audit(1757724567.458:1081): avc: denied { perfmon } for pid=3338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.602573] audit: type=1400 audit(1757724567.458:1081): avc: denied { perfmon } for pid=3338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.533537] kauditd_printk_skb: 34 callbacks suppressed [ 80.533540] audit: type=1325 audit(1757724574.477:1087): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3746 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 80.540625] audit: type=1300 audit(1757724574.477:1087): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffca49e5e50 a2=0 a3=7ffca49e5e3c items=0 ppid=2636 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.552287] audit: type=1327 audit(1757724574.477:1087): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 80.557990] audit: type=1325 audit(1757724574.496:1088): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3746 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 80.563809] audit: type=1300 audit(1757724574.496:1088): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffca49e5e50 a2=0 a3=7ffca49e5e3c items=0 ppid=2636 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.575702] audit: type=1327 audit(1757724574.496:1088): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 82.083491] audit: type=1400 audit(1757724576.026:1089): avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.092734] audit: type=1300 audit(1757724576.026:1089): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f7dbe57b7b8 items=0 ppid=3149 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.103714] audit: type=1327 audit(1757724576.026:1089): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564353931626462343063653238643162313038633166333661646264 [ 82.116032] audit: type=1400 audit(1757724576.026:1090): avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.577918] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 82.579773] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 84.982705] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 84.986320] IPv6: ADDRCONF(NETDEV_CHANGE): cali9d2ac546d36: link becomes ready [ 85.534541] kauditd_printk_skb: 361 callbacks suppressed [ 85.534544] audit: type=1400 audit(1757724579.478:1161): avc: denied { bpf } for pid=4121 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.541968] audit: type=1400 audit(1757724579.478:1161): avc: denied { bpf } for pid=4121 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.546176] audit: type=1400 audit(1757724579.478:1161): avc: denied { perfmon } for pid=4121 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.552866] audit: type=1400 audit(1757724579.478:1161): avc: denied { perfmon } for pid=4121 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.558138] audit: type=1400 audit(1757724579.478:1161): avc: denied { perfmon } for pid=4121 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.561698] audit: type=1400 audit(1757724579.478:1161): avc: denied { perfmon } for pid=4121 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.566027] audit: type=1400 audit(1757724579.478:1161): avc: denied { perfmon } for pid=4121 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.570415] audit: type=1400 audit(1757724579.478:1161): avc: denied { bpf } for pid=4121 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.574305] audit: type=1400 audit(1757724579.478:1161): avc: denied { bpf } for pid=4121 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.577791] audit: type=1334 audit(1757724579.478:1161): prog-id=166 op=LOAD This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:40 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 87.176670] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 87.177989] IPv6: ADDRCONF(NETDEV_CHANGE): calia769de5ac0f: link becomes ready This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:41 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 88.441977] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 88.443357] IPv6: ADDRCONF(NETDEV_CHANGE): calid3034c1569c: link becomes ready This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:42 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 88.582672] IPv6: ADDRCONF(NETDEV_CHANGE): cali3ebea64bba3: link becomes ready [ 89.321006] IPv6: ADDRCONF(NETDEV_CHANGE): cali30c3e07a0d4: link becomes ready This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:43 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 90.342790] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 90.343878] IPv6: ADDRCONF(NETDEV_CHANGE): cali2acb5949b4b: link becomes ready [ 91.316347] IPv6: ADDRCONF(NETDEV_CHANGE): cali6fbac09d378: link becomes ready This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:45 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 91.423587] kauditd_printk_skb: 771 callbacks suppressed [ 91.423590] audit: type=1325 audit(1757724585.367:1377): table=filter:114 family=2 entries=53 op=nft_register_chain pid=4800 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 91.428797] audit: type=1300 audit(1757724585.367:1377): arch=c000003e syscall=46 success=yes exit=26624 a0=3 a1=7ffce9078080 a2=0 a3=7ffce907806c items=0 ppid=3915 pid=4800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 91.440112] audit: type=1327 audit(1757724585.367:1377): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 91.451311] audit: type=1325 audit(1757724585.392:1378): table=filter:115 family=2 entries=15 op=nft_register_rule pid=4801 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 91.458739] audit: type=1300 audit(1757724585.392:1378): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcc88f1120 a2=0 a3=7ffcc88f110c items=0 ppid=2636 pid=4801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 91.467535] audit: type=1327 audit(1757724585.392:1378): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 91.471220] audit: type=1325 audit(1757724585.400:1379): table=nat:116 family=2 entries=37 op=nft_register_chain pid=4801 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 91.475593] audit: type=1300 audit(1757724585.400:1379): arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffcc88f1120 a2=0 a3=7ffcc88f110c items=0 ppid=2636 pid=4801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 91.485620] audit: type=1327 audit(1757724585.400:1379): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 91.624588] audit: type=1400 audit(1757724585.568:1380): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:46 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 92.456751] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 92.458128] IPv6: ADDRCONF(NETDEV_CHANGE): cali6dd8d11926c: link becomes ready This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:47 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:48 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: This is ip-172-31-26-110 (Linux x86_64 5.15.192-flatcar) 00:49:49 SSH host key: SHA256:ids11EfEPco7iz0Cz3UL0aGVCfCOJm6VZGah3hLXfaw (RSA) SSH host key: SHA256:DBEVuWMsMnLaigB0sySYIVU5hvozYY9c5Zhk9axN780 (ECDSA) SSH host key: SHA256:WQcmiQ3ItGa/0mXdU3edusd1EASOW7f7vDfLWoiJJHg (ED25519) eth0: 172.31.26.110 fe80::4bd:57ff:fe2e:3ab3 ip-172-31-26-110 login: [ 97.000279] kauditd_printk_skb: 253 callbacks suppressed [ 97.000282] audit: type=1325 audit(1757724590.943:1464): table=filter:122 family=2 entries=12 op=nft_register_rule pid=5055 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.005414] audit: type=1300 audit(1757724590.943:1464): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffff0668e50 a2=0 a3=7ffff0668e3c items=0 ppid=2636 pid=5055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.017323] audit: type=1327 audit(1757724590.943:1464): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 97.024268] audit: type=1325 audit(1757724590.966:1465): table=nat:123 family=2 entries=22 op=nft_register_rule pid=5055 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.030772] audit: type=1300 audit(1757724590.966:1465): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffff0668e50 a2=0 a3=7ffff0668e3c items=0 ppid=2636 pid=5055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.043274] audit: type=1327 audit(1757724590.966:1465): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 97.564222] audit: type=1106 audit(1757724591.507:1466): pid=5016 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 97.573966] audit: type=1104 audit(1757724591.507:1467): pid=5016 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 97.582709] audit: type=1131 audit(1757724591.516:1468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.110:22-147.75.109.163:44548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 98.407775] audit: type=1400 audit(1757724592.351:1469): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 102.593231] kauditd_printk_skb: 138 callbacks suppressed [ 102.593234] audit: type=1130 audit(1757724596.537:1506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.26.110:22-147.75.109.163:39856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 102.869527] audit: type=1101 audit(1757724596.813:1507): pid=5186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 102.877675] audit: type=1103 audit(1757724596.821:1508): pid=5186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 102.884793] audit: type=1006 audit(1757724596.821:1509): pid=5186 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 102.889525] audit: type=1300 audit(1757724596.821:1509): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe838e2bb0 a2=3 a3=0 items=0 ppid=1 pid=5186 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.896907] audit: type=1327 audit(1757724596.821:1509): proctitle=737368643A20636F7265205B707269765D [ 102.911095] audit: type=1105 audit(1757724596.854:1510): pid=5186 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 102.919617] audit: type=1103 audit(1757724596.863:1511): pid=5189 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 103.542479] audit: type=1106 audit(1757724597.486:1512): pid=5186 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 103.550417] audit: type=1104 audit(1757724597.486:1513): pid=5186 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 108.666820] kauditd_printk_skb: 133 callbacks suppressed [ 108.666823] audit: type=1130 audit(1757724602.610:1557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.110:22-147.75.109.163:53934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 109.915755] audit: type=1101 audit(1757724603.859:1558): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 109.935445] audit: type=1103 audit(1757724603.878:1559): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 109.983207] audit: type=1006 audit(1757724603.879:1560): pid=5492 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 109.999430] audit: type=1300 audit(1757724603.879:1560): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9b3cfae0 a2=3 a3=0 items=0 ppid=1 pid=5492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.074450] audit: type=1327 audit(1757724603.879:1560): proctitle=737368643A20636F7265205B707269765D [ 110.081952] audit: type=1105 audit(1757724604.002:1561): pid=5492 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 110.113442] audit: type=1103 audit(1757724604.005:1562): pid=5507 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 111.587613] audit: type=1106 audit(1757724605.532:1563): pid=5492 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 111.598569] audit: type=1104 audit(1757724605.533:1564): pid=5492 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 114.262556] kauditd_printk_skb: 66 callbacks suppressed [ 114.262559] audit: type=1400 audit(1757724608.208:1590): avc: denied { watch } for pid=5351 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_49_28.3184158192/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c822 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c621,c822 tclass=file permissive=0 [ 114.271588] audit: type=1300 audit(1757724608.208:1590): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a436c0 a2=fc6 a3=0 items=0 ppid=4808 pid=5351 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c822 key=(null) [ 114.279669] audit: type=1327 audit(1757724608.208:1590): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 114.706179] audit: type=1325 audit(1757724608.651:1591): table=filter:130 family=2 entries=10 op=nft_register_rule pid=5845 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.710488] audit: type=1300 audit(1757724608.651:1591): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffa5571610 a2=0 a3=7fffa55715fc items=0 ppid=2636 pid=5845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.723485] audit: type=1327 audit(1757724608.651:1591): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 114.727477] audit: type=1325 audit(1757724608.668:1592): table=nat:131 family=2 entries=36 op=nft_register_chain pid=5845 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.731931] audit: type=1300 audit(1757724608.668:1592): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fffa5571610 a2=0 a3=7fffa55715fc items=0 ppid=2636 pid=5845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.740707] audit: type=1327 audit(1757724608.668:1592): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 118.667233] audit: type=1130 audit(1757724612.612:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.110:22-147.75.109.163:35624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 119.929046] kauditd_printk_skb: 7 callbacks suppressed [ 119.929050] audit: type=1106 audit(1757724613.874:1599): pid=5848 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 119.941941] audit: type=1104 audit(1757724613.874:1600): pid=5848 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 119.949154] audit: type=1131 audit(1757724613.878:1601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.110:22-147.75.109.163:35624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 124.953299] audit: type=1130 audit(1757724618.899:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.110:22-147.75.109.163:35634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 125.178618] audit: type=1101 audit(1757724619.125:1603): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 125.186506] audit: type=1103 audit(1757724619.132:1604): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 125.194059] audit: type=1006 audit(1757724619.132:1605): pid=5865 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 125.198367] audit: type=1300 audit(1757724619.132:1605): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbd54fb80 a2=3 a3=0 items=0 ppid=1 pid=5865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.205595] audit: type=1327 audit(1757724619.132:1605): proctitle=737368643A20636F7265205B707269765D [ 125.220291] audit: type=1105 audit(1757724619.166:1606): pid=5865 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 125.227884] audit: type=1103 audit(1757724619.171:1607): pid=5867 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 125.715460] audit: type=1106 audit(1757724619.662:1608): pid=5865 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 125.723257] audit: type=1104 audit(1757724619.664:1609): pid=5865 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 130.195518] kauditd_printk_skb: 36 callbacks suppressed [ 130.195521] audit: type=1101 audit(1757724624.140:1634): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 130.204486] audit: type=1103 audit(1757724624.143:1635): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 130.211191] audit: type=1006 audit(1757724624.143:1636): pid=5913 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 130.215085] audit: type=1300 audit(1757724624.143:1636): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd54522400 a2=3 a3=0 items=0 ppid=1 pid=5913 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.221901] audit: type=1327 audit(1757724624.143:1636): proctitle=737368643A20636F7265205B707269765D [ 130.242893] audit: type=1105 audit(1757724624.188:1637): pid=5913 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 130.250689] audit: type=1103 audit(1757724624.191:1638): pid=5916 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 132.158523] audit: type=1106 audit(1757724626.104:1639): pid=5913 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 132.167113] audit: type=1104 audit(1757724626.104:1640): pid=5913 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 132.173107] audit: type=1131 audit(1757724626.110:1641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.26.110:22-147.75.109.163:38848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.052356] kauditd_printk_skb: 11 callbacks suppressed [ 136.052359] audit: type=1325 audit(1757724629.999:1651): table=filter:136 family=2 entries=33 op=nft_register_rule pid=5981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 136.058320] audit: type=1300 audit(1757724629.999:1651): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffee6e22b10 a2=0 a3=7ffee6e22afc items=0 ppid=2636 pid=5981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.069700] audit: type=1327 audit(1757724629.999:1651): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 136.084137] audit: type=1325 audit(1757724630.030:1652): table=nat:137 family=2 entries=31 op=nft_register_chain pid=5981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 136.089409] audit: type=1300 audit(1757724630.030:1652): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffee6e22b10 a2=0 a3=7ffee6e22afc items=0 ppid=2636 pid=5981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.099576] audit: type=1327 audit(1757724630.030:1652): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 136.455173] audit: type=1325 audit(1757724630.402:1653): table=filter:138 family=2 entries=20 op=nft_register_rule pid=5983 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 136.461378] audit: type=1300 audit(1757724630.402:1653): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd56daf730 a2=0 a3=7ffd56daf71c items=0 ppid=2636 pid=5983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.473407] audit: type=1327 audit(1757724630.402:1653): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 136.484553] audit: type=1325 audit(1757724630.430:1654): table=nat:139 family=2 entries=110 op=nft_register_chain pid=5983 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 144.853878] kauditd_printk_skb: 13 callbacks suppressed [ 144.853881] audit: type=1130 audit(1757724638.800:1664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.26.110:22-147.75.109.163:59164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.171548] audit: type=1101 audit(1757724639.118:1665): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 145.180653] audit: type=1103 audit(1757724639.127:1666): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 145.187636] audit: type=1006 audit(1757724639.127:1667): pid=6021 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 145.191559] audit: type=1300 audit(1757724639.127:1667): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0aec3d50 a2=3 a3=0 items=0 ppid=1 pid=6021 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.200395] audit: type=1327 audit(1757724639.127:1667): proctitle=737368643A20636F7265205B707269765D [ 145.237200] audit: type=1105 audit(1757724639.184:1668): pid=6021 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 145.245529] audit: type=1103 audit(1757724639.192:1669): pid=6023 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 146.247457] audit: type=1106 audit(1757724640.194:1670): pid=6021 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 146.255180] audit: type=1104 audit(1757724640.194:1671): pid=6021 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success'