490490] Guest personality initialized and is inactive [ 12.491732] VMCI host device registered (name=vmci, major=10, minor=258) [ 12.492965] Initialized host personality [ 12.500651] NET: Registered PF_VSOCK protocol family [ 12.897315] systemd[1]: Populated /etc with preset unit settings. [ 13.082968] systemd[1]: initrd-switch-root.service: Deactivated successfully. [ 13.084345] systemd[1]: Stopped initrd-switch-root.service - Switch Root. [ 13.087073] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 13.089097] systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. [ 13.091665] systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. [ 13.093804] systemd[1]: Created slice system-getty.slice - Slice /system/getty. [ 13.095817] systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. [ 13.098297] systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. [ 13.100611] systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. [ 13.103474] systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. [ 13.105814] systemd[1]: Created slice user.slice - User and Session Slice. [ 13.107815] systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. [ 13.110100] systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. [ 13.112632] systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. [ 13.115960] systemd[1]: Set up automount boot.automount - Boot partition Automount Point. [ 13.117977] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. [ 13.120630] systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... [ 13.122824] systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... [ 13.124412] systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). [ 13.126221] systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. [ 13.127859] systemd[1]: Stopped target initrd-switch-root.target - Switch Root. [ 13.129458] systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. [ 13.131048] systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. [ 13.132784] systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. [ 13.134606] systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. [ 13.136327] systemd[1]: Reached target remote-fs.target - Remote File Systems. [ 13.137924] systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. [ 13.140041] systemd[1]: Reached target slices.target - Slice Units. [ 13.141465] systemd[1]: Reached target swap.target - Swaps. [ 13.142785] systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. [ 13.146060] systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. [ 13.148606] systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. [ 13.151408] systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. [ 13.154187] systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. [ 13.156235] systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. [ 13.159052] systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. [ 13.162229] systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. [ 13.167142] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 13.169129] systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. [ 13.171770] systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. [ 13.176428] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 13.182655] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 13.193630] systemd[1]: Mounting media.mount - External Media Directory... [ 13.196021] systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 13.213680] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 13.217632] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 13.222663] systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... [ 13.227620] systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). [ 13.231622] systemd[1]: Reached target machines.target - Containers. [ 13.241807] systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... [ 13.246032] systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. [ 13.259258] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 13.270729] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 13.275734] systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... [ 13.282824] systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... [ 13.288705] systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... [ 13.299737] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 13.310097] systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... [ 13.315021] systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 13.320367] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 13.322882] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 13.325767] systemd[1]: systemd-fsck-usr.service: Deactivated successfully. [ 13.327306] systemd[1]: Stopped systemd-fsck-usr.service. [ 13.331032] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). [ 13.342738] systemd[1]: Starting systemd-journald.service - Journal Service... [ 13.351323] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 13.358782] systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line... [ 13.369817] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 13.381854] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 13.385262] fuse: init (API version 7.41) [ 13.392654] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 13.397156] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 13.406689] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 13.411479] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 13.415487] systemd[1]: Mounted media.mount - External Media Directory. [ 13.418398] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 13.422335] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. [ 13.427792] systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. [ 13.431514] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. [ 13.435958] systemd[1]: modprobe@configfs.service: Deactivated successfully. [ 13.439894] systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. [ 13.444490] systemd[1]: modprobe@dm_mod.service: Deactivated successfully. [ 13.449662] systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod. [ 13.452340] systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. [ 13.455342] ACPI: bus type drm_connector registered [ 13.458823] systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. [ 13.467289] systemd[1]: modprobe@drm.service: Deactivated successfully. [ 13.469589] systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm. [ 13.477895] systemd[1]: modprobe@fuse.service: Deactivated successfully. [ 13.481602] systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. [ 13.484361] systemd[1]: modprobe@loop.service: Deactivated successfully. [ 13.486390] systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop. [ 13.491098] systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. [ 13.496644] systemd[1]: Finished systemd-network-generator.service - Generate network units from Kernel command line. [ 13.505888] systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. [ 13.512876] systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. [ 13.517815] systemd[1]: Reached target network-pre.target - Preparation for Network. [ 13.523831] systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. [ 13.528400] systemd[1]: remount-root.service - Remount Root File System was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). [ 13.532620] systemd[1]: Reached target local-fs.target - Local File Systems. [ 13.535758] systemd-journald[1450]: Collecting audit messages is enabled. [ 13.537012] systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. [ 13.539656] systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. [ 13.545583] systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met. [ 13.551800] systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... [ 13.554268] systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). [ 13.561696] systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... [ 13.566804] systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. [ 13.574447] systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... [ 13.583791] systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/... [ 13.592265] systemd[1]: Started systemd-journald.service - Journal Service. [ 13.647501] loop1: detected capacity change from 0 to 219192 [ 13.682350] systemd-journald[1450]: Received client request to flush runtime journal. [ 14.072433] loop2: detected capacity change from 0 to 111560 [ 14.250874] loop3: detected capacity change from 0 to 50784 [ 14.301921] loop4: detected capacity change from 0 to 73176 [ 14.646161] loop5: detected capacity change from 0 to 219192 [ 14.698566] loop6: detected capacity change from 0 to 111560 [ 14.743328] loop7: detected capacity change from 0 to 50784 [ 14.755479] mousedev: PS/2 mouse device common for all mice [ 14.781932] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 14.788369] loop1: detected capacity change from 0 to 73176 [ 14.797236] ACPI: button: Power Button [PWRF] [ 14.812971] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 14.815895] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 14.848566] ACPI: button: Sleep Button [SLPF] [ 15.032912] zram_generator::config[1632]: No configuration found. [ 15.687531] zram_generator::config[1802]: No configuration found. [ 17.076631] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 17.156120] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/04/16 02:33:26Z: Amazon SSM Agent v3.3.0.0 is running 2026/04/16 02:33:26Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/04/16 02:33:26Z: OsVersion: 4593.1.0 [!p]104[?7h This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:33:31 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:33:31 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 ip-172-31-31-247 login: [ 40.689524] kauditd_printk_skb: 193 callbacks suppressed [ 40.689528] audit: type=1305 audit(1776306827.954:237): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 40.692305] audit: type=1300 audit(1776306827.954:237): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd99690d00 a2=420 a3=0 items=0 ppid=2314 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 40.696938] audit: type=1327 audit(1776306827.954:237): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 40.698839] audit: type=1130 audit(1776306827.957:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 40.701713] audit: type=1131 audit(1776306827.957:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 40.704651] audit: type=1106 audit(1776306827.957:240): pid=2308 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 40.707880] audit: type=1104 audit(1776306827.957:241): pid=2308 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 40.859377] audit: type=1106 audit(1776306828.124:242): pid=2303 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 40.866797] audit: type=1104 audit(1776306828.124:243): pid=2303 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 40.872126] audit: type=1131 audit(1776306828.126:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.31.247:22-50.85.169.122:55640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.142494] Initializing XFRM netlink socket This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:33:51 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:33:51 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 ip-172-31-31-247 login: [ 48.525079] kauditd_printk_skb: 134 callbacks suppressed [ 48.525083] audit: type=1131 audit(1776306835.790:297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.541805] audit: type=1334 audit(1776306835.807:298): prog-id=66 op=UNLOAD [ 56.403869] audit: type=1130 audit(1776306843.669:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.516684] audit: type=1131 audit(1776306843.781:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 60.809602] audit: type=1130 audit(1776306848.075:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.817486] audit: type=1131 audit(1776306848.075:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 61.001464] zram_generator::config[2875]: No configuration found. [ 61.311473] audit: type=1334 audit(1776306848.576:303): prog-id=70 op=LOAD [ 61.317019] audit: type=1334 audit(1776306848.578:304): prog-id=50 op=UNLOAD [ 61.318216] audit: type=1334 audit(1776306848.578:305): prog-id=71 op=LOAD [ 61.319476] audit: type=1334 audit(1776306848.578:306): prog-id=72 op=LOAD [ 61.320627] audit: type=1334 audit(1776306848.578:307): prog-id=51 op=UNLOAD [ 61.323525] audit: type=1334 audit(1776306848.578:308): prog-id=52 op=UNLOAD [ 61.699545] kauditd_printk_skb: 35 callbacks suppressed [ 61.699548] audit: type=1130 audit(1776306848.965:344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 62.560179] audit: type=1325 audit(1776306849.825:345): table=mangle:42 family=10 entries=2 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 62.565121] audit: type=1300 audit(1776306849.825:345): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc9c6a1fb0 a2=0 a3=0 items=0 ppid=2938 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 62.580552] audit: type=1327 audit(1776306849.825:345): proctitle=6970367461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 62.585592] audit: type=1325 audit(1776306849.831:346): table=mangle:43 family=2 entries=2 op=nft_register_chain pid=3057 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 62.590415] audit: type=1300 audit(1776306849.831:346): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffee07fd530 a2=0 a3=0 items=0 ppid=2938 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 62.599377] audit: type=1327 audit(1776306849.831:346): proctitle=69707461626C6573002D770035002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 [ 62.603609] audit: type=1325 audit(1776306849.849:347): table=filter:44 family=2 entries=1 op=nft_register_chain pid=3059 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 62.607991] audit: type=1300 audit(1776306849.849:347): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb91bb910 a2=0 a3=0 items=0 ppid=2938 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 62.617128] audit: type=1327 audit(1776306849.849:347): proctitle=69707461626C6573002D770035002D4E004B5542452D4649524557414C4C002D740066696C746572 [ 72.331373] zram_generator::config[3453]: No configuration found. [ 72.697790] kauditd_printk_skb: 159 callbacks suppressed [ 72.697794] audit: type=1131 audit(1776306859.963:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 72.706534] audit: type=1334 audit(1776306859.971:406): prog-id=120 op=LOAD [ 72.709549] audit: type=1334 audit(1776306859.971:407): prog-id=74 op=UNLOAD [ 72.710876] audit: type=1334 audit(1776306859.974:408): prog-id=121 op=LOAD [ 72.712111] audit: type=1334 audit(1776306859.974:409): prog-id=82 op=UNLOAD [ 72.713360] audit: type=1334 audit(1776306859.974:410): prog-id=122 op=LOAD [ 72.715850] audit: type=1334 audit(1776306859.975:411): prog-id=123 op=LOAD [ 72.718365] audit: type=1334 audit(1776306859.979:412): prog-id=83 op=UNLOAD [ 72.720605] audit: type=1334 audit(1776306859.979:413): prog-id=84 op=UNLOAD [ 72.722110] audit: type=1334 audit(1776306859.983:414): prog-id=124 op=LOAD [ 78.026710] kauditd_printk_skb: 37 callbacks suppressed [ 78.026714] audit: type=1106 audit(1776306865.292:452): pid=2347 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 78.037280] audit: type=1104 audit(1776306865.299:453): pid=2347 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 78.204910] audit: type=1106 audit(1776306865.470:454): pid=2342 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 78.212895] audit: type=1104 audit(1776306865.470:455): pid=2342 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 78.219036] audit: type=1131 audit(1776306865.474:456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.31.247:22-50.85.169.122:55648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 79.247238] audit: type=1334 audit(1776306866.512:457): prog-id=140 op=LOAD [ 79.248609] audit: type=1334 audit(1776306866.513:458): prog-id=141 op=LOAD [ 79.250186] audit: type=1300 audit(1776306866.513:458): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=3598 pid=3609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.256459] audit: type=1327 audit(1776306866.513:458): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336633635636430363465643337306666313239626334346331623464 [ 79.262604] audit: type=1334 audit(1776306866.513:459): prog-id=141 op=UNLOAD [ 98.655365] kauditd_printk_skb: 229 callbacks suppressed [ 98.655370] audit: type=1334 audit(1776306885.920:537): prog-id=158 op=LOAD [ 98.658930] audit: type=1334 audit(1776306885.923:538): prog-id=159 op=LOAD [ 98.661209] audit: type=1300 audit(1776306885.923:538): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000138238 a2=98 a3=0 items=0 ppid=3598 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.667400] audit: type=1327 audit(1776306885.923:538): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130346234666131306634353431663665366233313137613366643532 [ 98.677350] audit: type=1334 audit(1776306885.923:539): prog-id=159 op=UNLOAD [ 98.679107] audit: type=1300 audit(1776306885.923:539): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3598 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.685630] audit: type=1327 audit(1776306885.923:539): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130346234666131306634353431663665366233313137613366643532 [ 98.691470] audit: type=1334 audit(1776306885.923:540): prog-id=160 op=LOAD [ 98.695727] audit: type=1300 audit(1776306885.923:540): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000138488 a2=98 a3=0 items=0 ppid=3598 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.701554] audit: type=1327 audit(1776306885.923:540): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130346234666131306634353431663665366233313137613366643532 [ 103.660558] kauditd_printk_skb: 1784 callbacks suppressed [ 103.660563] audit: type=1334 audit(1776306890.917:1143): prog-id=463 op=LOAD [ 103.663383] audit: type=1300 audit(1776306890.917:1143): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc60f6a6d0 a2=90 a3=2 items=0 ppid=4112 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.671498] audit: type=1327 audit(1776306890.917:1143): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.676499] audit: type=1334 audit(1776306890.925:1144): prog-id=463 op=UNLOAD [ 103.678004] audit: type=1300 audit(1776306890.925:1144): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffc60f6a6d0 a2=90 a3=2 items=0 ppid=4112 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.686465] audit: type=1327 audit(1776306890.925:1144): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.690498] audit: type=1334 audit(1776306890.940:1145): prog-id=464 op=LOAD [ 103.691990] audit: type=1300 audit(1776306890.940:1145): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc60f6a6d0 a2=90 a3=2 items=0 ppid=4112 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.698396] audit: type=1327 audit(1776306890.940:1145): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.710589] audit: type=1334 audit(1776306890.940:1146): prog-id=464 op=UNLOAD This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:34:55 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:34:55 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 ip-172-31-31-247 login: This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:34:56 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:34:56 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 ip-172-31-31-247 login: [ 110.462747] NET: Registered PF_ALG protocol family [ 110.468955] kauditd_printk_skb: 3998 callbacks suppressed [ 110.468958] audit: type=1334 audit(1776306897.734:2479): prog-id=1131 op=LOAD [ 110.471733] audit: type=1300 audit(1776306897.734:2479): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe647f7f40 a2=74 a3=7ffe647f7f40 items=0 ppid=4273 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.477290] audit: type=1327 audit(1776306897.734:2479): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 110.481509] audit: type=1334 audit(1776306897.734:2480): prog-id=1131 op=UNLOAD [ 110.482793] audit: type=1300 audit(1776306897.734:2480): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffe647f7f40 a2=74 a3=7ffe647f7f40 items=0 ppid=4273 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.488779] audit: type=1327 audit(1776306897.734:2480): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 110.493376] audit: type=1334 audit(1776306897.734:2481): prog-id=1132 op=LOAD [ 110.495150] audit: type=1300 audit(1776306897.734:2481): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe647f7ed0 a2=80 a3=0 items=0 ppid=4273 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.502033] audit: type=1327 audit(1776306897.734:2481): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 110.506950] audit: type=1334 audit(1776306897.734:2482): prog-id=1132 op=UNLOAD This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:34:57 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:34:57 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 ip-172-31-31-247 login: [ 112.114095] eth0: renamed from tmp26bfc [ 112.121242] eth0: renamed from tmp92627 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:35:01 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:35:01 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 ip-172-31-31-247 login: This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:35:02 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:35:02 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 ip-172-31-31-247 login: [ 117.556028] kauditd_printk_skb: 323 callbacks suppressed [ 117.556033] audit: type=1334 audit(1776306904.821:2590): prog-id=1169 op=LOAD [ 117.559118] audit: type=1300 audit(1776306904.821:2590): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff877fde60 a2=74 a3=7fff877fde60 items=0 ppid=4112 pid=4642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.567502] audit: type=1327 audit(1776306904.821:2590): proctitle=74630066696C746572007265706C61636500646576006C786364613163353734306538333500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323838345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 117.573629] audit: type=1334 audit(1776306904.821:2591): prog-id=1169 op=UNLOAD [ 117.575166] audit: type=1300 audit(1776306904.821:2591): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fff877fde60 a2=74 a3=7fff877fde60 items=0 ppid=4112 pid=4642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.582421] audit: type=1327 audit(1776306904.821:2591): proctitle=74630066696C746572007265706C61636500646576006C786364613163353734306538333500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323838345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 117.587078] audit: type=1334 audit(1776306904.821:2592): prog-id=1170 op=LOAD [ 117.588277] audit: type=1300 audit(1776306904.821:2592): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff877fddf0 a2=80 a3=0 items=0 ppid=4112 pid=4642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 117.593375] audit: type=1327 audit(1776306904.821:2592): proctitle=74630066696C746572007265706C61636500646576006C786364613163353734306538333500696E6772657373007072696F00310068616E646C65003100627066006461006F626A00323838345F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 117.597691] audit: type=1334 audit(1776306904.821:2593): prog-id=1170 op=UNLOAD [ 128.631202] kauditd_printk_skb: 468 callbacks suppressed [ 128.631206] audit: type=1325 audit(1776306915.896:2752): table=filter:157 family=2 entries=11 op=nft_register_rule pid=4811 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 128.635653] audit: type=1300 audit(1776306915.896:2752): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff3ea60e20 a2=0 a3=7fff3ea60e0c items=0 ppid=3735 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.641722] audit: type=1327 audit(1776306915.896:2752): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 128.644206] audit: type=1325 audit(1776306915.902:2753): table=nat:158 family=2 entries=33 op=nft_register_chain pid=4811 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 128.647148] audit: type=1300 audit(1776306915.902:2753): arch=c000003e syscall=46 success=yes exit=13428 a0=3 a1=7fff3ea60e20 a2=0 a3=7fff3ea60e0c items=0 ppid=3735 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.657059] audit: type=1327 audit(1776306915.902:2753): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 129.663962] audit: type=1325 audit(1776306916.929:2754): table=filter:159 family=2 entries=8 op=nft_register_rule pid=4813 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 129.667002] audit: type=1300 audit(1776306916.929:2754): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd526e8c00 a2=0 a3=7ffd526e8bec items=0 ppid=3735 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.673003] audit: type=1327 audit(1776306916.929:2754): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 129.687773] audit: type=1325 audit(1776306916.952:2755): table=nat:160 family=2 entries=54 op=nft_register_chain pid=4813 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 134.348915] kauditd_printk_skb: 2 callbacks suppressed [ 134.348920] audit: type=1130 audit(1776306921.614:2756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.31.247:22-50.85.169.122:53184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 135.235085] audit: type=1101 audit(1776306922.500:2757): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 135.241660] audit: type=1103 audit(1776306922.502:2758): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 135.247434] audit: type=1006 audit(1776306922.502:2759): pid=4820 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 135.250718] audit: type=1300 audit(1776306922.502:2759): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdc7a0e9f0 a2=3 a3=0 items=0 ppid=1 pid=4820 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.256768] audit: type=1327 audit(1776306922.502:2759): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 135.263674] audit: type=1105 audit(1776306922.529:2760): pid=4820 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 135.271034] audit: type=1103 audit(1776306922.536:2761): pid=4824 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 136.564528] audit: type=1106 audit(1776306923.830:2762): pid=4820 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 136.572426] audit: type=1104 audit(1776306923.830:2763): pid=4820 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 141.740884] kauditd_printk_skb: 1 callbacks suppressed [ 141.740887] audit: type=1130 audit(1776306929.005:2765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.31.247:22-50.85.169.122:53192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 142.610442] audit: type=1101 audit(1776306929.875:2766): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 142.617672] audit: type=1103 audit(1776306929.877:2767): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 142.624032] audit: type=1006 audit(1776306929.877:2768): pid=4837 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 142.627081] audit: type=1300 audit(1776306929.877:2768): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe7bd9bb40 a2=3 a3=0 items=0 ppid=1 pid=4837 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.632528] audit: type=1327 audit(1776306929.877:2768): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 142.638145] audit: type=1105 audit(1776306929.903:2769): pid=4837 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 142.645388] audit: type=1103 audit(1776306929.910:2770): pid=4843 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 143.208747] audit: type=1106 audit(1776306930.474:2771): pid=4837 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 143.217615] audit: type=1104 audit(1776306930.474:2772): pid=4837 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 148.381971] kauditd_printk_skb: 1 callbacks suppressed [ 148.381975] audit: type=1130 audit(1776306935.647:2774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.31.247:22-50.85.169.122:49730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.260232] audit: type=1101 audit(1776306936.525:2775): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 149.266921] audit: type=1103 audit(1776306936.525:2776): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 149.272859] audit: type=1006 audit(1776306936.527:2777): pid=4856 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 149.277272] audit: type=1300 audit(1776306936.527:2777): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcb54c1c90 a2=3 a3=0 items=0 ppid=1 pid=4856 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.284733] audit: type=1327 audit(1776306936.527:2777): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 149.296313] audit: type=1105 audit(1776306936.561:2778): pid=4856 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 149.304929] audit: type=1103 audit(1776306936.570:2779): pid=4860 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 149.834347] audit: type=1106 audit(1776306937.099:2780): pid=4856 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 149.841264] audit: type=1104 audit(1776306937.100:2781): pid=4856 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.009582] kauditd_printk_skb: 1 callbacks suppressed [ 155.009586] audit: type=1130 audit(1776306942.275:2783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.31.247:22-50.85.169.122:40316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.888740] audit: type=1101 audit(1776306943.154:2784): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.894899] audit: type=1103 audit(1776306943.155:2785): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.900803] audit: type=1006 audit(1776306943.156:2786): pid=4873 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 155.904108] audit: type=1300 audit(1776306943.156:2786): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffd050cf70 a2=3 a3=0 items=0 ppid=1 pid=4873 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.910194] audit: type=1327 audit(1776306943.156:2786): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 155.916534] audit: type=1105 audit(1776306943.182:2787): pid=4873 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 155.923427] audit: type=1103 audit(1776306943.184:2788): pid=4877 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 156.491684] audit: type=1106 audit(1776306943.756:2789): pid=4873 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 156.498897] audit: type=1104 audit(1776306943.756:2790): pid=4873 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 164.957467] kauditd_printk_skb: 23 callbacks suppressed [ 164.957471] audit: type=1130 audit(1776306952.222:2810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.31.247:22-50.85.169.122:58560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.824875] audit: type=1101 audit(1776306953.090:2811): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.832309] audit: type=1103 audit(1776306953.092:2812): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.838570] audit: type=1006 audit(1776306953.092:2813): pid=4921 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 165.842920] audit: type=1300 audit(1776306953.092:2813): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffce61b05d0 a2=3 a3=0 items=0 ppid=1 pid=4921 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.849074] audit: type=1327 audit(1776306953.092:2813): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 165.851937] audit: type=1105 audit(1776306953.115:2814): pid=4921 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 165.858481] audit: type=1103 audit(1776306953.119:2815): pid=4925 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 166.396802] audit: type=1106 audit(1776306953.661:2816): pid=4921 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 166.404193] audit: type=1104 audit(1776306953.662:2817): pid=4921 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 170.589502] kauditd_printk_skb: 20 callbacks suppressed [ 170.589506] audit: type=1325 audit(1776306957.854:2834): table=filter:161 family=2 entries=20 op=nft_register_rule pid=4966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 170.593721] audit: type=1300 audit(1776306957.854:2834): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe035572c0 a2=0 a3=7ffe035572ac items=0 ppid=3735 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.600190] audit: type=1327 audit(1776306957.854:2834): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 170.603977] audit: type=1325 audit(1776306957.860:2835): table=nat:162 family=2 entries=18 op=nft_register_rule pid=4966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 170.607056] audit: type=1300 audit(1776306957.860:2835): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffe035572c0 a2=0 a3=0 items=0 ppid=3735 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.612998] audit: type=1327 audit(1776306957.860:2835): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 170.792770] audit: type=1106 audit(1776306958.057:2836): pid=4951 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 170.801409] audit: type=1104 audit(1776306958.057:2837): pid=4951 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 170.806534] audit: type=1131 audit(1776306958.063:2838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.31.247:22-50.85.169.122:58576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.969387] audit: type=1130 audit(1776306958.234:2839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.31.247:22-50.85.169.122:58580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.443102] kauditd_printk_skb: 27 callbacks suppressed [ 179.443106] audit: type=1325 audit(1776306966.708:2859): table=filter:165 family=2 entries=20 op=nft_register_rule pid=5005 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 179.447535] audit: type=1300 audit(1776306966.708:2859): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd99b3e410 a2=0 a3=7ffd99b3e3fc items=0 ppid=3735 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.453269] audit: type=1327 audit(1776306966.708:2859): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 179.458340] audit: type=1325 audit(1776306966.723:2860): table=nat:166 family=2 entries=102 op=nft_register_chain pid=5005 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 179.461191] audit: type=1300 audit(1776306966.723:2860): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffd99b3e410 a2=0 a3=7ffd99b3e3fc items=0 ppid=3735 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.466958] audit: type=1327 audit(1776306966.723:2860): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 179.534622] audit: type=1130 audit(1776306966.799:2861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.31.247:22-50.85.169.122:48366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.403535] audit: type=1101 audit(1776306967.669:2862): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 180.410083] audit: type=1103 audit(1776306967.670:2863): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 180.415393] audit: type=1006 audit(1776306967.670:2864): pid=5007 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 186.140459] kauditd_printk_skb: 7 callbacks suppressed [ 186.140463] audit: type=1130 audit(1776306973.405:2870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.31.247:22-50.85.169.122:60822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.008760] audit: type=1101 audit(1776306974.274:2871): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 187.015140] audit: type=1103 audit(1776306974.275:2872): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 187.021158] audit: type=1006 audit(1776306974.275:2873): pid=5023 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 187.024707] audit: type=1300 audit(1776306974.275:2873): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc863bc5f0 a2=3 a3=0 items=0 ppid=1 pid=5023 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.030218] audit: type=1327 audit(1776306974.275:2873): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 187.036599] audit: type=1105 audit(1776306974.302:2874): pid=5023 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 187.043867] audit: type=1103 audit(1776306974.309:2875): pid=5027 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 187.571646] audit: type=1106 audit(1776306974.837:2876): pid=5023 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 187.580185] audit: type=1104 audit(1776306974.837:2877): pid=5023 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 191.191942] kauditd_printk_skb: 15 callbacks suppressed [ 191.191947] audit: type=1334 audit(1776306978.457:2891): prog-id=140 op=UNLOAD [ 191.194275] audit: type=1334 audit(1776306978.457:2892): prog-id=144 op=UNLOAD This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:36:19 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 This is ip-172-31-31-247 (Linux x86_64 6.12.81-flatcar) 02:36:19 SSH host key: SHA256:kD1/Aq0/FjXepAgCamsDDje1/EE2mOkbbTZImwUiu38 (ECDSA) SSH host key: SHA256:YvyfnvogA9mWI0mHwQLqzLjHscCvGW1p9DRVTOFfQdk (RSA) SSH host key: SHA256:1nbe2H6QZI+VTeKjFh+2OenNzIQD4GPqakGeWjV80NQ (ED25519) eth0: 172.31.31.247 fe80::43b:ddff:fedd:bd85 ip-172-31-31-247 login: [ 192.947322] audit: type=1106 audit(1776306980.212:2893): pid=5039 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 192.954187] audit: type=1104 audit(1776306980.212:2894): pid=5039 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' [ 192.961323] audit: type=1131 audit(1776306980.219:2895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.31.247:22-50.85.169.122:60838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 193.122907] audit: type=1130 audit(1776306980.388:2896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.31.247:22-50.85.169.122:43696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'