. [ OK ] Finished systemd-machine-id-commit… Save Transient machine-id to Disk. [ OK ] Started systemd-userdbd.service - User Database Manager. [ OK ] Started systemd-nsresourced.service - Namespace Resource Manager. [ 16.165875] loop4: detected capacity change from 0 to 61504 [ OK ] Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer. [ OK ] Started systemd-resolved.service - Network Name Resolution. [ OK ] Reached target nss-lookup.target - Host and Network Name Lookups. [ 16.493250] loop5: detected capacity change from 0 to 100192 [ 16.511582] loop6: detected capacity change from 0 to 109872 [ 16.531826] loop7: detected capacity change from 0 to 207008 [ 16.560216] loop1: detected capacity change from 0 to 61504 [ 16.776700] zram_generator::config[1617]: No configuration found. [ OK ] Finished systemd-hwdb-update.service - Rebuild Hardware Database. [ OK ] Finished systemd-sysext.service - …ension Images into /usr/ and /opt/. Starting ensure-sysext.service... Starting systemd-tmpfiles-setup.se…ate System Files and Directories... Starting systemd-udevd.service - R…ager for Device Events and Files... [ 17.529864] zram_generator::config[1715]: No configuration found. [ OK ] Started systemd-udevd.service - Ru…anager for Device Events and Files. [ 18.166772] kauditd_printk_skb: 133 callbacks suppressed [ 18.166777] audit: type=1130 audit(1768434506.718:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 18.176959] audit: type=1334 audit(1768434506.728:180): prog-id=43 op=LOAD [ 18.179949] audit: type=1334 audit(1768434506.728:181): prog-id=39 op=UNLOAD [ 18.182945] audit: type=1334 audit(1768434506.728:182): prog-id=44 op=LOAD [ 18.185947] audit: type=1334 audit(1768434506.728:183): prog-id=45 op=LOAD [ 18.188945] audit: type=1334 audit(1768434506.728:184): prog-id=40 op=UNLOAD [ 18.191944] audit: type=1334 audit(1768434506.728:185): prog-id=41 op=UNLOAD [ 18.194940] audit: type=1334 audit(1768434506.734:186): prog-id=46 op=LOAD [ 18.194949] audit: type=1334 audit(1768434506.734:187): prog-id=30 op=UNLOAD [ 18.194953] audit: type=1334 audit(1768434506.734:188): prog-id=47 op=LOAD [ OK ] Finished systemd-tmpfiles-setup.se…reate System Files and Directories. [ OK ] Finished ensure-sysext.service. Starting audit-rules.service - Load Audit Rules... Starting clean-ca-certificates.ser…p broken links in /etc/ssl/certs... Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... Starting modprobe@drm.service - Load Kernel Module drm... Starting modprobe@efi_pstore.servi… - Load Kernel Module efi_pstore... Starting modprobe@loop.service - Load Kernel Module loop... Starting ldconfig.service - Rebuild Dynamic Linker Cache... Starting systemd-journal-catalog-u…ervice - Rebuild Journal Catalog... Starting systemd-networkd.service - Network Configuration... [ OK ] Reached target time-set.target - System Time Set. Starting systemd-update-utmp.servi…ord System Boot/Shutdown in UTMP... Starting systemd-vconsole-setup.service - Virtual Console Setup... [ OK ] Finished modprobe@dm_mod.service - Load Kernel Module dm_mod. [ OK ] Finished clean-ca-certificates.ser… up broken links in /etc/ssl/certs. [ OK ] Finished systemd-journal-catalog-u….service - Rebuild Journal Catalog. [ OK ] Found device dev-disk-by\x2dlabel-…e - Amazon Elastic Block Store OEM. Starting systemd-fsck@dev-disk-by\… Check on /dev/disk/by-label/OEM... [ OK ] Finished systemd-update-utmp.servi…ecord System Boot/Shutdown in UTMP. [ OK ] Finished modprobe@drm.service - Load Kernel Module drm. [ OK ] Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. [ OK ] Finished modprobe@loop.service - Load Kernel Module loop. [ OK ] Finished systemd-fsck@dev-disk-by\…em Check on /dev/disk/by-label/OEM. [ OK ] Finished audit-rules.service - Load Audit Rules. [ OK ] Started systemd-networkd.service - Network Configuration. [ OK ] Reached target network.target - Network. Starting systemd-networkd-persiste…tent Storage in systemd-networkd... Starting systemd-networkd-wait-onl…ait for Network to be Configured... [ OK ] Finished systemd-vconsole-setup.service - Virtual Console Setup. [ OK ] Finished systemd-networkd-persiste…istent Storage in systemd-networkd. [ OK ] Finished ldconfig.service - Rebuild Dynamic Linker Cache. Starting systemd-update-done.service - Update is Completed... [ OK ] Finished systemd-update-done.service - Update is Completed. [ OK ] Reached target sysinit.target - System Initialization. [ OK ] Started motdgen.path - Watch for update engine configuration changes. [ OK ] Started user-cloudinit@var-lib-fla…/var/lib/flatcar-install/user_data. [ OK ] Started logrotate.timer - Daily rotation of log files. [ OK ] Started mdadm.timer - Weekly check…MD array's redundancy information.. [ OK ] Started systemd-sysupdate-reboot.t… Automatically After System Update. [ OK ] Started systemd-sysupdate.timer - Automatic System Update. [ OK ] Started systemd-tmpfiles-clean.tim…y Cleanup of Temporary Directories. [ OK ] Reached target paths.target - Path Units. [ OK ] Reached target timers.target - Timer Units. [ OK ] Listening on dbus.socket - D-Bus System Message Bus Socket. Starting docker.socket - Docker Socket for the API... [ OK ] Listening on sshd-unix-local.socke…temd-ssh-generator, AF_UNIX Local). [ OK ] Listening on sshd-vsock.socket - O… (systemd-ssh-generator, AF_VSOCK). [ OK ] Reached target ssh-access.target - SSH Access Available. [ OK ] Listening on sshd.socket - OpenSSH Server Socket. [ OK ] Listening on systemd-hostnamed.socket - Hostname Service Socket. [ OK ] Listening on docker.socket - Docker Socket for the API. [ OK ] Reached target sockets.target - Socket Units. [ OK ] Reached target basic.target - Basic System. Starting containerd.service - containerd container runtime... Starting coreos-metadata.service - Flatcar Metadata Agent... Starting dbus.service - D-Bus System Message Bus... Starting dracut-shutdown.service -…store /run/initramfs on shutdown... Starting enable-oem-cloudinit.service - Enable cloudinit... Starting extend-filesystems.service - Extend Filesystems... Starting motdgen.service - Generate /run/flatcar/motd... [ OK ] Started ntpd.service - Network Time Service. Starting prepare-helm.service - Unpack helm to /opt/bin... Starting setup-oem.service - Setup OEM... Starting ssh-key-proc-cmdline.serv…ll an ssh key from /proc/cmdline... Starting sshd-keygen.service - Generate sshd host keys... Starting systemd-logind.service - User Login Management... Starting update-engine.service - Update Engine... Starting update-ssh-keys-after-ign…ate-ssh-keys once after Ignition... [ OK ] Finished dracut-shutdown.service - Restore /run/initramfs on shutdown. [ OK ] Finished ssh-key-proc-cmdline.serv…tall an ssh key from /proc/cmdline. [ 19.505597] extend-filesystems[1948]: Found /dev/nvme0n1p6 [ 19.563212] extend-filesystems[1948]: Found /dev/nvme0n1p9 [ OK ] Created slice system-systemd\x2dco…e - Slice /system/systemd-coredump. [ OK ] Started systemd-coredump@0-1996-0.…Process Core Dump (PID 1996/UID 0). [ OK ] Finished motdgen.service - Generate /run/flatcar/motd. [ 19.622144] extend-filesystems[1948]: Checking size of /dev/nvme0n1p9 [ 19.652509] extend-filesystems[1948]: Resized partition /dev/nvme0n1p9 [ OK ] Started dbus.service - D-Bus System Message Bus. [ OK ] Reached target system-config.targe…Load system-provided cloud configs. [ OK ] Reached target user-config.target - Load user-provided cloud configs. [ 19.839106] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 19.670302] extend-filesystems[2007]: resize2fs 1.47.3 (8-Jul-2025) [ OK ] Finished setup-oem.service - Setup OEM. [ 19.887496] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 Starting systemd-hostnamed.service - Hostname Service... [ OK ] Started update-engine.service - Update Engine. [ OK ] Started locksmithd.service - Cluster reboot manager. [ 19.771523] extend-filesystems[2007]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required [ 19.779873] extend-filesystems[2007]: old_desc_blocks = 1, new_desc_blocks = 2 [ 19.783235] extend-filesystems[2007]: The filesystem on /dev/nvme0n1p9 is now 2604027 (4k) blocks long. [ 19.786288] extend-filesystems[1948]: Resized filesystem in /dev/nvme0n1p9 [ OK ] Finished extend-filesystems.service - Extend Filesystems. [ OK ] Started systemd-logind.service - User Login Management. [ OK ] Finished coreos-metadata.service - Flatcar Metadata Agent. [ OK ] Finished update-ssh-keys-after-ign…pdate-ssh-keys once after Ignition. Starting sshkeys.service... [ OK ] Created slice system-coreos\x2dmet…ce /system/coreos-metadata-sshkeys. Starting coreos-metadata-sshkeys@c…latcar Metadata Agent (SSH Keys)... [ OK ] Finished systemd-networkd-wait-onl… Wait for Network to be Configured. [ OK ] Reached target network-online.target - Network is Online. [ OK ] Started amazon-ssm-agent.service - amazon-ssm-agent. Starting kubelet.service - kubelet: The Kubernetes Node Agent... Starting nvidia.service - NVIDIA Configure Service... [ OK ] Started ntpd.service - Network Time Service. [ OK ] Started systemd-hostnamed.service - Hostname Service. Starting polkit.service - Authorization Manager... [ OK ] Finished nvidia.service - NVIDIA Configure Service. [ OK ] Finished coreos-metadata-sshkeys@c… Flatcar Metadata Agent (SSH Keys). [ OK ] Finished sshkeys.service. [ OK ] Started containerd.service - containerd container runtime. [ OK ] Started polkit.service - Authorization Manager. [ OK ] Finished sshd-keygen.service - Generate sshd host keys. Starting issuegen.service - Generate /run/issue... [ OK ] Finished issuegen.service - Generate /run/issue. Starting systemd-user-sessions.service - Permit User Sessions... [ OK ] Finished systemd-user-sessions.service - Permit User Sessions. [ OK ] Started getty@tty1.service - Getty on tty1. [ OK ] Started serial-getty@ttyS0.service - Serial Getty on ttyS0. [ OK ] Reached target getty.target - Login Prompts. [ OK ] Finished prepare-helm.service - Unpack helm to /opt/bin. 2026/01/14 23:48:32Z: Amazon SSM Agent v3.3.0.0 is running 2026/01/14 23:48:32Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/01/14 23:48:32Z: OsVersion: 4515.1.0 [ OK ] Started kubelet.service - kubelet: The Kubernetes Node Agent. [ OK ] Reached target multi-user.target - Multi-User System. [!p]104[?7h This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:48:35 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:48:35 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: [ 27.973022] systemd-journald[1490]: Time jumped backwards, rotating. [ 34.678794] kauditd_printk_skb: 40 callbacks suppressed [ 34.678799] audit: type=1305 audit(1768434522.751:227): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 34.683434] audit: type=1300 audit(1768434522.751:227): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffd28aea0 a2=420 a3=0 items=0 ppid=2317 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 34.691305] audit: type=1327 audit(1768434522.751:227): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 34.694093] audit: type=1130 audit(1768434522.766:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 34.699681] audit: type=1131 audit(1768434522.766:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 34.704601] audit: type=1106 audit(1768434522.772:230): pid=2313 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 34.709697] audit: type=1104 audit(1768434522.772:231): pid=2313 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 34.783064] audit: type=1106 audit(1768434522.854:232): pid=2309 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 34.789792] audit: type=1104 audit(1768434522.854:233): pid=2309 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 34.795532] audit: type=1131 audit(1768434522.863:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.28.228:22-20.161.92.111:50154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 36.514133] Initializing XFRM netlink socket This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:48:45 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:48:45 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: [ 48.998579] kauditd_printk_skb: 134 callbacks suppressed [ 48.998599] audit: type=1130 audit(1768434537.071:287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 49.150747] audit: type=1131 audit(1768434537.223:288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 51.920232] audit: type=1131 audit(1768434539.993:289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 51.935013] audit: type=1334 audit(1768434540.008:290): prog-id=65 op=UNLOAD [ 58.825974] audit: type=1130 audit(1768434546.899:291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.831805] audit: type=1131 audit(1768434546.899:292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.120626] zram_generator::config[2869]: No configuration found. [ 59.659162] audit: type=1334 audit(1768434547.733:293): prog-id=69 op=LOAD [ 59.661558] audit: type=1334 audit(1768434547.733:294): prog-id=43 op=UNLOAD [ 59.664249] audit: type=1334 audit(1768434547.738:295): prog-id=70 op=LOAD [ 59.666835] audit: type=1334 audit(1768434547.738:296): prog-id=71 op=LOAD [ 59.668721] audit: type=1334 audit(1768434547.738:297): prog-id=44 op=UNLOAD [ 59.670488] audit: type=1334 audit(1768434547.738:298): prog-id=45 op=UNLOAD [ 59.672219] audit: type=1334 audit(1768434547.746:299): prog-id=72 op=LOAD [ 59.673859] audit: type=1334 audit(1768434547.746:300): prog-id=50 op=UNLOAD [ 70.284659] zram_generator::config[3526]: No configuration found. [ 70.875671] kauditd_printk_skb: 202 callbacks suppressed [ 70.875677] audit: type=1131 audit(1768434558.949:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.886615] audit: type=1334 audit(1768434558.960:396): prog-id=119 op=LOAD [ 70.889994] audit: type=1334 audit(1768434558.960:397): prog-id=86 op=UNLOAD [ 70.893960] audit: type=1334 audit(1768434558.962:398): prog-id=120 op=LOAD [ 70.895704] audit: type=1334 audit(1768434558.962:399): prog-id=69 op=UNLOAD [ 70.898948] audit: type=1334 audit(1768434558.962:400): prog-id=121 op=LOAD [ 70.902085] audit: type=1334 audit(1768434558.962:401): prog-id=122 op=LOAD [ 70.904267] audit: type=1334 audit(1768434558.962:402): prog-id=70 op=UNLOAD [ 70.906012] audit: type=1334 audit(1768434558.962:403): prog-id=71 op=UNLOAD [ 70.907602] audit: type=1334 audit(1768434558.965:404): prog-id=123 op=LOAD [ 77.077092] kauditd_printk_skb: 42 callbacks suppressed [ 77.077097] audit: type=1334 audit(1768434565.151:447): prog-id=139 op=LOAD [ 77.081155] audit: type=1334 audit(1768434565.155:448): prog-id=140 op=LOAD [ 77.083569] audit: type=1300 audit(1768434565.155:448): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000176180 a2=98 a3=0 items=0 ppid=3667 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.092564] audit: type=1327 audit(1768434565.155:448): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262656137643536323939393239613065323531643730343062353638 [ 77.100745] audit: type=1334 audit(1768434565.156:449): prog-id=140 op=UNLOAD [ 77.104530] audit: type=1300 audit(1768434565.156:449): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3667 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.110998] audit: type=1327 audit(1768434565.156:449): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262656137643536323939393239613065323531643730343062353638 [ 77.117489] audit: type=1334 audit(1768434565.157:450): prog-id=141 op=LOAD [ 77.119218] audit: type=1300 audit(1768434565.157:450): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001763e8 a2=98 a3=0 items=0 ppid=3667 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.125582] audit: type=1327 audit(1768434565.157:450): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262656137643536323939393239613065323531643730343062353638 [ 85.484227] kauditd_printk_skb: 224 callbacks suppressed [ 85.484233] audit: type=1334 audit(1768434573.558:527): prog-id=157 op=LOAD [ 85.487661] audit: type=1334 audit(1768434573.561:528): prog-id=158 op=LOAD [ 85.489293] audit: type=1300 audit(1768434573.561:528): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000130180 a2=98 a3=0 items=0 ppid=3701 pid=3982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.495585] audit: type=1327 audit(1768434573.561:528): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761313133616631396633663962356563393539323936343861333238 [ 85.501935] audit: type=1334 audit(1768434573.561:529): prog-id=158 op=UNLOAD [ 85.503479] audit: type=1300 audit(1768434573.561:529): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3701 pid=3982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.509538] audit: type=1327 audit(1768434573.561:529): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761313133616631396633663962356563393539323936343861333238 [ 85.516727] audit: type=1334 audit(1768434573.562:530): prog-id=159 op=LOAD [ 85.518346] audit: type=1300 audit(1768434573.562:530): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001303e8 a2=98 a3=0 items=0 ppid=3701 pid=3982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.525820] audit: type=1327 audit(1768434573.562:530): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761313133616631396633663962356563393539323936343861333238 [ 90.646731] kauditd_printk_skb: 122 callbacks suppressed [ 90.646737] audit: type=1334 audit(1768434578.720:579): prog-id=185 op=LOAD [ 90.649483] audit: type=1300 audit(1768434578.720:579): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd25c0c38 a2=74 a3=0 items=0 ppid=4213 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 90.655949] audit: type=1327 audit(1768434578.720:579): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 90.658266] audit: type=1334 audit(1768434578.720:580): prog-id=185 op=UNLOAD [ 90.660010] audit: type=1300 audit(1768434578.720:580): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffff991c7f10 a2=74 a3=0 items=0 ppid=4213 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 90.666422] audit: type=1327 audit(1768434578.720:580): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 90.668751] audit: type=1334 audit(1768434578.720:581): prog-id=186 op=LOAD [ 90.670357] audit: type=1300 audit(1768434578.720:581): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd25bfc78 a2=90 a3=2 items=0 ppid=4213 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 90.676840] audit: type=1327 audit(1768434578.720:581): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 90.679178] audit: type=1334 audit(1768434578.723:582): prog-id=186 op=UNLOAD [ 94.565192] NET: Registered PF_ALG protocol family This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:42 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:42 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: [ 95.647310] kauditd_printk_skb: 5762 callbacks suppressed [ 95.647315] audit: type=1325 audit(1768434583.721:2489): table=nat:115 family=2 entries=1 op=nft_register_chain pid=4590 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 95.651880] audit: type=1300 audit(1768434583.721:2489): arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc48f18b0 a2=0 a3=ffff9b3ad5c0 items=0 ppid=4213 pid=4590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.662737] audit: type=1327 audit(1768434583.721:2489): proctitle=69707461626C6573002D770035002D74006E6174002D4E0043494C49554D5F4F55545055545F6E6174 [ 95.670431] audit: type=1325 audit(1768434583.725:2490): table=nat:116 family=2 entries=1 op=nft_register_chain pid=4591 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 95.691263] audit: type=1300 audit(1768434583.725:2490): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc0d0d780 a2=0 a3=ffff8fb0b5c0 items=0 ppid=4213 pid=4591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.698946] audit: type=1327 audit(1768434583.725:2490): proctitle=69707461626C6573002D770035002D74006E6174002D4E0043494C49554D5F5052455F6E6174 [ 95.702292] audit: type=1325 audit(1768434583.738:2491): table=mangle:117 family=2 entries=1 op=nft_register_chain pid=4592 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 95.705948] audit: type=1300 audit(1768434583.738:2491): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc48435a0 a2=0 a3=ffffa67145c0 items=0 ppid=4213 pid=4592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 95.712739] audit: type=1327 audit(1768434583.738:2491): proctitle=69707461626C6573002D770035002D74006D616E676C65002D4E0043494C49554D5F504F53545F6D616E676C65 [ 95.715851] audit: type=1325 audit(1768434583.746:2492): table=mangle:118 family=2 entries=1 op=nft_register_chain pid=4593 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:43 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:43 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: [ 96.452372] eth0: renamed from tmp87621 [ 96.668691] eth0: renamed from tmp5483e This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:44 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:44 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:46 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:46 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:47 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:49:47 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: [ 104.502991] kauditd_printk_skb: 221 callbacks suppressed [ 104.502997] audit: type=1334 audit(1768434592.576:2566): prog-id=1168 op=LOAD [ 104.507158] audit: type=1300 audit(1768434592.576:2566): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd9f91378 a2=74 a3=11 items=0 ppid=4213 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.515582] audit: type=1327 audit(1768434592.576:2566): proctitle=74630066696C746572007265706C61636500646576006C786333393339643431323438383500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00343031375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 104.521162] audit: type=1334 audit(1768434592.577:2567): prog-id=1168 op=UNLOAD [ 104.523279] audit: type=1300 audit(1768434592.577:2567): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffffad547f50 a2=74 a3=11 items=0 ppid=4213 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.529759] audit: type=1327 audit(1768434592.577:2567): proctitle=74630066696C746572007265706C61636500646576006C786333393339643431323438383500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00343031375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 104.535538] audit: type=1334 audit(1768434592.577:2568): prog-id=1169 op=LOAD [ 104.537369] audit: type=1300 audit(1768434592.577:2568): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd9f91358 a2=80 a3=0 items=0 ppid=4213 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 104.543492] audit: type=1327 audit(1768434592.577:2568): proctitle=74630066696C746572007265706C61636500646576006C786333393339643431323438383500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00343031375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 104.548814] audit: type=1334 audit(1768434592.578:2569): prog-id=1169 op=UNLOAD [ 129.590861] kauditd_printk_skb: 474 callbacks suppressed [ 129.590867] audit: type=1130 audit(1768434617.664:2730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.228:22-20.161.92.111:52868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 130.066542] audit: type=1101 audit(1768434618.140:2731): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 130.073955] audit: type=1103 audit(1768434618.147:2732): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 130.080279] audit: type=1006 audit(1768434618.148:2733): pid=4886 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 130.084629] audit: type=1300 audit(1768434618.148:2733): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff304acb0 a2=3 a3=0 items=0 ppid=1 pid=4886 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.092015] audit: type=1327 audit(1768434618.148:2733): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 130.113977] audit: type=1105 audit(1768434618.187:2734): pid=4886 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 130.121835] audit: type=1103 audit(1768434618.195:2735): pid=4889 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 130.460408] audit: type=1106 audit(1768434618.534:2736): pid=4886 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 130.468780] audit: type=1104 audit(1768434618.536:2737): pid=4886 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 135.556944] kauditd_printk_skb: 1 callbacks suppressed [ 135.556949] audit: type=1130 audit(1768434623.630:2739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.228:22-20.161.92.111:37680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.012394] audit: type=1101 audit(1768434624.086:2740): pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 136.020701] audit: type=1103 audit(1768434624.094:2741): pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 136.027140] audit: type=1006 audit(1768434624.095:2742): pid=4903 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 136.030882] audit: type=1300 audit(1768434624.095:2742): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff6512270 a2=3 a3=0 items=0 ppid=1 pid=4903 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.038052] audit: type=1327 audit(1768434624.095:2742): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 136.060356] audit: type=1105 audit(1768434624.133:2743): pid=4903 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 136.068183] audit: type=1103 audit(1768434624.142:2744): pid=4906 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 136.388638] audit: type=1106 audit(1768434624.462:2745): pid=4903 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 136.397128] audit: type=1104 audit(1768434624.462:2746): pid=4903 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 141.481029] kauditd_printk_skb: 1 callbacks suppressed [ 141.481034] audit: type=1130 audit(1768434629.554:2748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.228:22-20.161.92.111:37682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.959091] audit: type=1101 audit(1768434630.033:2749): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 141.965890] audit: type=1103 audit(1768434630.039:2750): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 141.972083] audit: type=1006 audit(1768434630.040:2751): pid=4920 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 141.976181] audit: type=1300 audit(1768434630.040:2751): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe10c2f10 a2=3 a3=0 items=0 ppid=1 pid=4920 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.982685] audit: type=1327 audit(1768434630.040:2751): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 141.998981] audit: type=1105 audit(1768434630.072:2752): pid=4920 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 142.007372] audit: type=1103 audit(1768434630.081:2753): pid=4923 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 142.328305] audit: type=1106 audit(1768434630.402:2754): pid=4920 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 142.339026] audit: type=1104 audit(1768434630.402:2755): pid=4920 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 147.421572] kauditd_printk_skb: 1 callbacks suppressed [ 147.421578] audit: type=1130 audit(1768434635.495:2757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.228:22-20.161.92.111:38776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.883790] audit: type=1101 audit(1768434635.957:2758): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 147.891337] audit: type=1103 audit(1768434635.964:2759): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 147.898859] audit: type=1006 audit(1768434635.964:2760): pid=4937 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 147.903441] audit: type=1300 audit(1768434635.964:2760): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffef7ccf0 a2=3 a3=0 items=0 ppid=1 pid=4937 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.910853] audit: type=1327 audit(1768434635.964:2760): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 147.922555] audit: type=1105 audit(1768434635.996:2761): pid=4937 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 147.930336] audit: type=1103 audit(1768434636.004:2762): pid=4940 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 148.246765] audit: type=1106 audit(1768434636.320:2763): pid=4937 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 148.255630] audit: type=1104 audit(1768434636.321:2764): pid=4937 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 155.268929] kauditd_printk_skb: 23 callbacks suppressed [ 155.268935] audit: type=1130 audit(1768434643.342:2784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.228:22-20.161.92.111:45196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.726377] audit: type=1101 audit(1768434643.800:2785): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 155.734300] audit: type=1103 audit(1768434643.808:2786): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 155.742235] audit: type=1006 audit(1768434643.814:2787): pid=4979 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 155.745747] audit: type=1300 audit(1768434643.814:2787): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff42e0bc0 a2=3 a3=0 items=0 ppid=1 pid=4979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.753383] audit: type=1327 audit(1768434643.814:2787): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 155.775717] audit: type=1105 audit(1768434643.849:2788): pid=4979 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 155.783781] audit: type=1103 audit(1768434643.857:2789): pid=4982 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 156.097703] audit: type=1106 audit(1768434644.171:2790): pid=4979 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 156.105544] audit: type=1104 audit(1768434644.172:2791): pid=4979 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 161.198304] kauditd_printk_skb: 1 callbacks suppressed [ 161.198309] audit: type=1130 audit(1768434649.272:2793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.228:22-20.161.92.111:45198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.656493] audit: type=1101 audit(1768434649.730:2794): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 161.664954] audit: type=1103 audit(1768434649.738:2795): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 161.671356] audit: type=1006 audit(1768434649.738:2796): pid=4994 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 161.675574] audit: type=1300 audit(1768434649.738:2796): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcea2df40 a2=3 a3=0 items=0 ppid=1 pid=4994 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.682794] audit: type=1327 audit(1768434649.738:2796): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.703062] audit: type=1105 audit(1768434649.777:2797): pid=4994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 161.710855] audit: type=1103 audit(1768434649.784:2798): pid=4997 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 162.023598] audit: type=1106 audit(1768434650.097:2799): pid=4994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 162.030741] audit: type=1104 audit(1768434650.097:2800): pid=4994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 167.113306] kauditd_printk_skb: 1 callbacks suppressed [ 167.113312] audit: type=1130 audit(1768434655.187:2802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.228:22-20.161.92.111:43542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.569555] audit: type=1101 audit(1768434655.643:2803): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 167.578219] audit: type=1103 audit(1768434655.651:2804): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 167.583779] audit: type=1006 audit(1768434655.651:2805): pid=5011 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 167.587861] audit: type=1300 audit(1768434655.651:2805): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcbfd23c0 a2=3 a3=0 items=0 ppid=1 pid=5011 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.594501] audit: type=1327 audit(1768434655.651:2805): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.617723] audit: type=1105 audit(1768434655.691:2806): pid=5011 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 167.624240] audit: type=1103 audit(1768434655.695:2807): pid=5014 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 167.939650] audit: type=1106 audit(1768434656.013:2808): pid=5011 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 167.947166] audit: type=1104 audit(1768434656.014:2809): pid=5011 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 172.395748] kauditd_printk_skb: 47 callbacks suppressed [ 172.395754] audit: type=1101 audit(1768434660.469:2843): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 172.403601] audit: type=1103 audit(1768434660.477:2844): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 172.410729] audit: type=1006 audit(1768434660.477:2845): pid=5074 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 172.416013] audit: type=1300 audit(1768434660.477:2845): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcb09d910 a2=3 a3=0 items=0 ppid=1 pid=5074 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.423420] audit: type=1327 audit(1768434660.477:2845): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 172.449933] audit: type=1105 audit(1768434660.523:2846): pid=5074 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 172.460626] audit: type=1103 audit(1768434660.534:2847): pid=5077 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 172.767976] audit: type=1106 audit(1768434660.841:2848): pid=5074 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 172.778129] audit: type=1104 audit(1768434660.841:2849): pid=5074 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 172.787355] audit: type=1131 audit(1768434660.856:2850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.228:22-20.161.92.111:43586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.562575] audit: type=1325 audit(1768434665.636:2851): table=filter:163 family=2 entries=20 op=nft_register_rule pid=5088 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.566367] audit: type=1300 audit(1768434665.636:2851): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe0b58770 a2=0 a3=1 items=0 ppid=3801 pid=5088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.573394] audit: type=1327 audit(1768434665.636:2851): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 177.582340] audit: type=1325 audit(1768434665.655:2852): table=nat:164 family=2 entries=102 op=nft_register_chain pid=5088 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.585803] audit: type=1300 audit(1768434665.655:2852): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=ffffe0b58770 a2=0 a3=1 items=0 ppid=3801 pid=5088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.593169] audit: type=1327 audit(1768434665.655:2852): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 177.852362] audit: type=1130 audit(1768434665.925:2853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.228:22-20.161.92.111:37344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.304328] audit: type=1101 audit(1768434666.378:2854): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 178.314133] audit: type=1103 audit(1768434666.387:2855): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 178.320192] audit: type=1006 audit(1768434666.387:2856): pid=5090 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 183.760731] kauditd_printk_skb: 7 callbacks suppressed [ 183.760736] audit: type=1130 audit(1768434671.834:2862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.228:22-20.161.92.111:37352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.226886] audit: type=1101 audit(1768434672.300:2863): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.233564] audit: type=1103 audit(1768434672.307:2864): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.239533] audit: type=1006 audit(1768434672.307:2865): pid=5104 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 184.244040] audit: type=1300 audit(1768434672.307:2865): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffea7793b0 a2=3 a3=0 items=0 ppid=1 pid=5104 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.251511] audit: type=1327 audit(1768434672.307:2865): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.275171] audit: type=1105 audit(1768434672.348:2866): pid=5104 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.282809] audit: type=1103 audit(1768434672.356:2867): pid=5107 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.586276] audit: type=1106 audit(1768434672.658:2868): pid=5104 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 184.593645] audit: type=1104 audit(1768434672.659:2869): pid=5104 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 189.675952] kauditd_printk_skb: 1 callbacks suppressed [ 189.675958] audit: type=1130 audit(1768434677.748:2871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.228:22-20.161.92.111:46140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.128426] audit: type=1101 audit(1768434678.202:2872): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 190.135315] audit: type=1103 audit(1768434678.209:2873): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 190.142587] audit: type=1006 audit(1768434678.209:2874): pid=5118 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 190.147403] audit: type=1300 audit(1768434678.209:2874): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff2f66dc0 a2=3 a3=0 items=0 ppid=1 pid=5118 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.154321] audit: type=1327 audit(1768434678.209:2874): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 190.180800] audit: type=1105 audit(1768434678.254:2875): pid=5118 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 190.188784] audit: type=1103 audit(1768434678.262:2876): pid=5121 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 190.543843] audit: type=1106 audit(1768434678.617:2877): pid=5118 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 190.552368] audit: type=1104 audit(1768434678.618:2878): pid=5118 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 195.081353] kauditd_printk_skb: 9 callbacks suppressed [ 195.081359] audit: type=1334 audit(1768434683.155:2886): prog-id=170 op=UNLOAD [ 195.086750] audit: type=1334 audit(1768434683.155:2887): prog-id=174 op=UNLOAD [ 195.143686] audit: type=1334 audit(1768434683.217:2888): prog-id=1229 op=UNLOAD [ 195.146181] audit: type=1334 audit(1768434683.219:2889): prog-id=1255 op=UNLOAD [ 195.249223] audit: type=1334 audit(1768434683.323:2890): prog-id=149 op=UNLOAD [ 195.252128] audit: type=1334 audit(1768434683.323:2891): prog-id=153 op=UNLOAD [ 195.276327] audit: type=1334 audit(1768434683.350:2892): prog-id=144 op=UNLOAD [ 195.278938] audit: type=1334 audit(1768434683.350:2893): prog-id=148 op=UNLOAD This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:51:24 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:51:24 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: [ 196.995731] audit: type=1106 audit(1768434685.068:2894): pid=5133 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 197.004400] audit: type=1104 audit(1768434685.068:2895): pid=5133 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 200.327820] kauditd_printk_skb: 70 callbacks suppressed [ 200.327831] audit: type=1101 audit(1768434688.401:2934): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 200.336252] audit: type=1103 audit(1768434688.410:2935): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 200.342460] audit: type=1006 audit(1768434688.410:2936): pid=5408 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 200.346092] audit: type=1300 audit(1768434688.410:2936): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd5d9aff0 a2=3 a3=0 items=0 ppid=1 pid=5408 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.354537] audit: type=1327 audit(1768434688.410:2936): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 200.375089] audit: type=1105 audit(1768434688.449:2937): pid=5408 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 200.383952] audit: type=1103 audit(1768434688.457:2938): pid=5411 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 200.545541] audit: type=1334 audit(1768434688.619:2939): prog-id=1276 op=LOAD [ 200.548845] audit: type=1334 audit(1768434688.620:2940): prog-id=1277 op=LOAD [ 200.552002] audit: type=1300 audit(1768434688.620:2940): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40000fe180 a2=98 a3=0 items=0 ppid=5318 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.995037] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 205.329023] kauditd_printk_skb: 5435 callbacks suppressed [ 205.329029] audit: type=1334 audit(1768434693.402:4757): prog-id=2185 op=LOAD [ 205.331875] audit: type=1300 audit(1768434693.402:4757): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc19312d8 a2=90 a3=2 items=0 ppid=5550 pid=5667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 205.338359] audit: type=1327 audit(1768434693.402:4757): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 205.340660] audit: type=1334 audit(1768434693.403:4758): prog-id=2185 op=UNLOAD [ 205.342315] audit: type=1300 audit(1768434693.403:4758): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffff8cb37f10 a2=0 a3=2 items=0 ppid=5550 pid=5667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 205.348648] audit: type=1327 audit(1768434693.403:4758): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 205.351442] audit: type=1334 audit(1768434693.403:4759): prog-id=2186 op=LOAD [ 205.353059] audit: type=1300 audit(1768434693.403:4759): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc19312d8 a2=90 a3=2 items=0 ppid=5550 pid=5667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 205.359463] audit: type=1327 audit(1768434693.403:4759): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 205.362273] audit: type=1334 audit(1768434693.406:4760): prog-id=2186 op=UNLOAD This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:51:39 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d This is ip-172-31-28-228 (Linux aarch64 6.12.65-flatcar) 23:51:39 SSH host key: SHA256:RaBU4C58lEZ4a1Mbz+SvTtvrScyvdcGfKRVmP6dPyxA (ECDSA) SSH host key: SHA256:U63dANsW+3tfTtUQVy9LfOQKeZLGFe/4VlrUJLG8i9U (RSA) SSH host key: SHA256:i+vCoaQFP3xywrTVd1I8PRrtComnD0gRlFOR70Aemj0 (ED25519) eth0: 172.31.28.228 fe80::4cb:d5ff:fe72:250d ip-172-31-28-228 login: [ 212.394028] kauditd_printk_skb: 746 callbacks suppressed [ 212.394033] audit: type=1334 audit(1768434700.467:5015): prog-id=2253 op=LOAD [ 212.398572] audit: type=1300 audit(1768434700.467:5015): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe7291768 a2=74 a3=10 items=0 ppid=5550 pid=6164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 212.409197] audit: type=1327 audit(1768434700.467:5015): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003334315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 212.416659] audit: type=1334 audit(1768434700.471:5016): prog-id=2253 op=UNLOAD [ 212.419465] audit: type=1300 audit(1768434700.471:5016): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffffa7cb4f50 a2=74 a3=10 items=0 ppid=5550 pid=6164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 212.426073] audit: type=1327 audit(1768434700.471:5016): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003334315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 212.435992] audit: type=1334 audit(1768434700.471:5017): prog-id=2254 op=LOAD [ 212.437634] audit: type=1300 audit(1768434700.471:5017): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffe7291748 a2=80 a3=0 items=0 ppid=5550 pid=6164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 212.444523] audit: type=1327 audit(1768434700.471:5017): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003334315F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 212.449940] audit: type=1334 audit(1768434700.471:5018): prog-id=2254 op=UNLOAD