0n1p9 Starting systemd-hostnamed.service - Hostname Service... [ OK ] Started update-engine.service - Update Engine. [ OK ] Started locksmithd.service - Cluster reboot manager. [ OK ] Started systemd-logind.service - User Login Management. [ OK ] Finished coreos-metadata.service - Flatcar Metadata Agent. [ OK ] Finished update-ssh-keys-after-ign…pdate-ssh-keys once after Ignition. Starting sshkeys.service... [ OK ] Created slice system-coreos\x2dmet…ce /system/coreos-metadata-sshkeys. Starting coreos-metadata-sshkeys@c…latcar Metadata Agent (SSH Keys)... [ OK ] Started systemd-hostnamed.service - Hostname Service. Starting polkit.service - Authorization Manager... [ OK ] Finished coreos-metadata-sshkeys@c… Flatcar Metadata Agent (SSH Keys). [ OK ] Finished sshkeys.service. [ OK ] Started polkit.service - Authorization Manager. [ OK ] Finished sshd-keygen.service - Generate sshd host keys. Starting issuegen.service - Generate /run/issue... [ OK ] Started containerd.service - containerd container runtime. [ OK ] Finished issuegen.service - Generate /run/issue. Starting systemd-user-sessions.service - Permit User Sessions... [ OK ] Finished systemd-user-sessions.service - Permit User Sessions. [ OK ] Started getty@tty1.service - Getty on tty1. [ OK ] Started serial-getty@ttyS0.service - Serial Getty on ttyS0. [ OK ] Reached target getty.target - Login Prompts. [ OK ] Finished prepare-helm.service - Unpack helm to /opt/bin. 2026/06/04 23:24:55Z: Amazon SSM Agent v3.3.0.0 is running 2026/06/04 23:24:55Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/06/04 23:24:55Z: OsVersion: 4593.2.2 [ OK ] Started kubelet.service - kubelet: The Kubernetes Node Agent. [ OK ] Reached target multi-user.target - Multi-User System. [!p]104[?7h This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:24:58 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:24:58 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: [ 42.315213] systemd-journald[1374]: Time jumped backwards, rotating. [ 52.659295] kauditd_printk_skb: 120 callbacks suppressed [ 52.659301] audit: type=1305 audit(1780615508.937:235): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 52.665089] audit: type=1300 audit(1780615508.937:235): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe1edc180 a2=420 a3=0 items=0 ppid=2228 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 52.674199] audit: type=1327 audit(1780615508.937:235): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 52.677023] audit: type=1130 audit(1780615508.943:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.681428] audit: type=1131 audit(1780615508.943:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.685688] audit: type=1106 audit(1780615508.950:238): pid=2218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 52.690121] audit: type=1104 audit(1780615508.951:239): pid=2218 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 52.694057] audit: type=1131 audit(1780615508.954:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 52.847701] audit: type=1106 audit(1780615509.125:241): pid=2208 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 52.854193] audit: type=1104 audit(1780615509.126:242): pid=2208 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 56.682391] Initializing XFRM netlink socket This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:25:14 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:25:14 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: [ 63.159090] kauditd_printk_skb: 133 callbacks suppressed [ 63.159095] audit: type=1130 audit(1780615519.437:294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.290044] audit: type=1131 audit(1780615519.567:295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 67.180341] audit: type=1131 audit(1780615523.458:296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.208097] audit: type=1334 audit(1780615523.486:297): prog-id=65 op=UNLOAD [ 73.906499] audit: type=1130 audit(1780615530.183:298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 74.008121] audit: type=1131 audit(1780615530.285:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 74.039641] audit: type=1130 audit(1780615530.317:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 74.046057] audit: type=1131 audit(1780615530.317:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 74.357768] zram_generator::config[2801]: No configuration found. [ 74.919056] audit: type=1334 audit(1780615531.195:302): prog-id=69 op=LOAD [ 74.921695] audit: type=1334 audit(1780615531.195:303): prog-id=70 op=LOAD [ 74.926074] audit: type=1334 audit(1780615531.195:304): prog-id=49 op=UNLOAD [ 74.927491] audit: type=1334 audit(1780615531.195:305): prog-id=50 op=UNLOAD [ 74.928901] audit: type=1334 audit(1780615531.201:306): prog-id=71 op=LOAD [ 74.930400] audit: type=1334 audit(1780615531.201:307): prog-id=52 op=UNLOAD [ 84.144823] zram_generator::config[3385]: No configuration found. [ 84.745207] kauditd_printk_skb: 204 callbacks suppressed [ 84.745212] audit: type=1131 audit(1780615541.023:404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 84.753580] audit: type=1334 audit(1780615541.031:405): prog-id=119 op=LOAD [ 84.755455] audit: type=1334 audit(1780615541.031:406): prog-id=77 op=UNLOAD [ 84.757411] audit: type=1334 audit(1780615541.035:407): prog-id=120 op=LOAD [ 84.759151] audit: type=1334 audit(1780615541.035:408): prog-id=121 op=LOAD [ 84.760589] audit: type=1334 audit(1780615541.035:409): prog-id=69 op=UNLOAD [ 84.762485] audit: type=1334 audit(1780615541.035:410): prog-id=70 op=UNLOAD [ 84.764138] audit: type=1334 audit(1780615541.038:411): prog-id=122 op=LOAD [ 84.765669] audit: type=1334 audit(1780615541.038:412): prog-id=82 op=UNLOAD [ 84.767350] audit: type=1334 audit(1780615541.045:413): prog-id=123 op=LOAD [ 92.040135] kauditd_printk_skb: 37 callbacks suppressed [ 92.040140] audit: type=1106 audit(1780615548.318:451): pid=2267 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 92.049095] audit: type=1104 audit(1780615548.318:452): pid=2267 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 92.134589] audit: type=1334 audit(1780615548.412:453): prog-id=139 op=LOAD [ 92.137964] audit: type=1334 audit(1780615548.415:454): prog-id=140 op=LOAD [ 92.139810] audit: type=1300 audit(1780615548.415:454): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000178180 a2=98 a3=0 items=0 ppid=3525 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.145773] audit: type=1327 audit(1780615548.415:454): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373465386330643532663830626432616533653964626137663732 [ 92.151507] audit: type=1334 audit(1780615548.415:455): prog-id=140 op=UNLOAD [ 92.154763] audit: type=1300 audit(1780615548.415:455): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3525 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.161277] audit: type=1327 audit(1780615548.415:455): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373465386330643532663830626432616533653964626137663732 [ 92.167359] audit: type=1334 audit(1780615548.415:456): prog-id=141 op=LOAD [ 100.218204] kauditd_printk_skb: 229 callbacks suppressed [ 100.218209] audit: type=1334 audit(1780615556.496:536): prog-id=157 op=LOAD [ 100.221221] audit: type=1334 audit(1780615556.499:537): prog-id=158 op=LOAD [ 100.222606] audit: type=1300 audit(1780615556.499:537): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000106180 a2=98 a3=0 items=0 ppid=3553 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.228330] audit: type=1327 audit(1780615556.499:537): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633962343531363163393732643939363138663634366433393162 [ 100.234295] audit: type=1334 audit(1780615556.499:538): prog-id=158 op=UNLOAD [ 100.235868] audit: type=1300 audit(1780615556.499:538): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3553 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.244596] audit: type=1327 audit(1780615556.499:538): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633962343531363163393732643939363138663634366433393162 [ 100.250747] audit: type=1334 audit(1780615556.499:539): prog-id=159 op=LOAD [ 100.253196] audit: type=1300 audit(1780615556.499:539): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001063e8 a2=98 a3=0 items=0 ppid=3553 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.259460] audit: type=1327 audit(1780615556.499:539): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633962343531363163393732643939363138663634366433393162 [ 105.240098] kauditd_printk_skb: 100 callbacks suppressed [ 105.240103] audit: type=1334 audit(1780615561.518:580): prog-id=180 op=LOAD [ 105.244186] audit: type=1334 audit(1780615561.521:581): prog-id=181 op=LOAD [ 105.245667] audit: type=1300 audit(1780615561.521:581): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000130180 a2=98 a3=0 items=0 ppid=3553 pid=4074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.251616] audit: type=1327 audit(1780615561.521:581): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063323530663136666563303362316437623338636235646266346563 [ 105.257278] audit: type=1334 audit(1780615561.522:582): prog-id=181 op=UNLOAD [ 105.258843] audit: type=1300 audit(1780615561.522:582): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3553 pid=4074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.264637] audit: type=1327 audit(1780615561.522:582): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063323530663136666563303362316437623338636235646266346563 [ 105.270315] audit: type=1334 audit(1780615561.522:583): prog-id=182 op=LOAD [ 105.271815] audit: type=1300 audit(1780615561.522:583): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001303e8 a2=98 a3=0 items=0 ppid=3553 pid=4074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.277726] audit: type=1327 audit(1780615561.522:583): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063323530663136666563303362316437623338636235646266346563 [ 109.660422] NET: Registered PF_ALG protocol family This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:06 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:06 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: [ 110.639704] kauditd_printk_skb: 5754 callbacks suppressed [ 110.639709] audit: type=1325 audit(1780615566.917:2502): table=nat:105 family=2 entries=1 op=nft_register_chain pid=4420 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 110.644662] audit: type=1300 audit(1780615566.917:2502): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=ffffcbdefb80 a2=0 a3=ffff8e0e25c0 items=0 ppid=4087 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.651928] audit: type=1327 audit(1780615566.917:2502): proctitle=69707461626C6573002D770035002D74006E6174002D53 [ 110.654400] audit: type=1325 audit(1780615566.926:2503): table=nat:106 family=10 entries=1 op=nft_register_chain pid=4421 subj=system_u:system_r:spc_t:s0 comm="ip6tables" [ 110.659368] audit: type=1300 audit(1780615566.926:2503): arch=c00000b7 syscall=211 success=yes exit=152 a0=3 a1=ffffc35d7cd0 a2=0 a3=ffff874d55c0 items=0 ppid=4087 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.666538] audit: type=1327 audit(1780615566.926:2503): proctitle=6970367461626C6573002D770035002D74006E6174002D53 [ 110.669103] audit: type=1325 audit(1780615566.932:2504): table=mangle:107 family=2 entries=5 op=nft_register_chain pid=4422 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 110.672257] audit: type=1300 audit(1780615566.932:2504): arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffffed25900 a2=0 a3=ffffb40c45c0 items=0 ppid=4087 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.678580] audit: type=1327 audit(1780615566.932:2504): proctitle=69707461626C6573002D770035002D74006D616E676C65002D53 [ 110.680949] audit: type=1325 audit(1780615566.937:2505): table=mangle:108 family=10 entries=5 op=nft_register_chain pid=4423 subj=system_u:system_r:spc_t:s0 comm="ip6tables" This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:07 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:07 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: [ 111.620289] eth0: renamed from tmpcbc43 [ 111.625090] eth0: renamed from tmp57448 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:08 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:08 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:10 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:10 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:11 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:26:11 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: [ 119.820051] kauditd_printk_skb: 251 callbacks suppressed [ 119.820057] audit: type=1334 audit(1780615576.097:2589): prog-id=1168 op=LOAD [ 119.825056] audit: type=1300 audit(1780615576.097:2589): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc9eed7a8 a2=74 a3=11 items=0 ppid=4087 pid=4585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.833187] audit: type=1327 audit(1780615576.097:2589): proctitle=74630066696C746572007265706C61636500646576006C786364646232356234626366643600696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313932355F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 119.843254] audit: type=1334 audit(1780615576.101:2590): prog-id=1168 op=UNLOAD [ 119.844897] audit: type=1300 audit(1780615576.101:2590): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff8822df50 a2=74 a3=11 items=0 ppid=4087 pid=4585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.853867] audit: type=1327 audit(1780615576.101:2590): proctitle=74630066696C746572007265706C61636500646576006C786364646232356234626366643600696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313932355F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 119.861238] audit: type=1334 audit(1780615576.101:2591): prog-id=1169 op=LOAD [ 119.862931] audit: type=1300 audit(1780615576.101:2591): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc9eed788 a2=80 a3=0 items=0 ppid=4087 pid=4585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 119.868529] audit: type=1327 audit(1780615576.101:2591): proctitle=74630066696C746572007265706C61636500646576006C786364646232356234626366643600696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313932355F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 119.873948] audit: type=1334 audit(1780615576.101:2592): prog-id=1169 op=UNLOAD [ 131.274778] kauditd_printk_skb: 468 callbacks suppressed [ 131.274783] audit: type=1325 audit(1780615587.552:2751): table=filter:157 family=2 entries=8 op=nft_register_rule pid=4767 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 131.279870] audit: type=1300 audit(1780615587.552:2751): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc891e2a0 a2=0 a3=1 items=0 ppid=3661 pid=4767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.286504] audit: type=1327 audit(1780615587.552:2751): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 131.298940] audit: type=1325 audit(1780615587.576:2752): table=nat:158 family=2 entries=54 op=nft_register_chain pid=4767 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 131.302266] audit: type=1300 audit(1780615587.576:2752): arch=c00000b7 syscall=211 success=yes exit=19092 a0=3 a1=ffffc891e2a0 a2=0 a3=1 items=0 ppid=3661 pid=4767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.309540] audit: type=1327 audit(1780615587.576:2752): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 152.427528] audit: type=1130 audit(1780615608.705:2753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.217:22-20.229.252.112:45976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.282661] audit: type=1101 audit(1780615609.560:2754): pid=4777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 153.290463] audit: type=1103 audit(1780615609.568:2755): pid=4777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 153.296545] audit: type=1006 audit(1780615609.568:2756): pid=4777 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 153.300392] audit: type=1300 audit(1780615609.568:2756): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe7b5f080 a2=3 a3=0 items=0 ppid=1 pid=4777 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.306632] audit: type=1327 audit(1780615609.568:2756): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 153.323642] audit: type=1105 audit(1780615609.601:2757): pid=4777 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 153.332206] audit: type=1103 audit(1780615609.609:2758): pid=4783 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 153.922295] audit: type=1106 audit(1780615610.199:2759): pid=4777 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 153.930096] audit: type=1104 audit(1780615610.201:2760): pid=4777 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 159.093879] kauditd_printk_skb: 1 callbacks suppressed [ 159.093884] audit: type=1130 audit(1780615615.371:2762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.217:22-20.229.252.112:45990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.970853] audit: type=1101 audit(1780615616.248:2763): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 159.976771] audit: type=1103 audit(1780615616.254:2764): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 159.982303] audit: type=1006 audit(1780615616.254:2765): pid=4796 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 159.985979] audit: type=1300 audit(1780615616.254:2765): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd0ecadb0 a2=3 a3=0 items=0 ppid=1 pid=4796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.992440] audit: type=1327 audit(1780615616.254:2765): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 160.015072] audit: type=1105 audit(1780615616.292:2766): pid=4796 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 160.022742] audit: type=1103 audit(1780615616.300:2767): pid=4801 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 160.590508] audit: type=1106 audit(1780615616.868:2768): pid=4796 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 160.600221] audit: type=1104 audit(1780615616.868:2769): pid=4796 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 165.771640] kauditd_printk_skb: 1 callbacks suppressed [ 165.771645] audit: type=1130 audit(1780615622.049:2771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.217:22-20.229.252.112:59550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.673938] audit: type=1101 audit(1780615622.951:2772): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 166.681149] audit: type=1103 audit(1780615622.958:2773): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 166.687584] audit: type=1006 audit(1780615622.959:2774): pid=4815 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 166.691921] audit: type=1300 audit(1780615622.959:2774): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd57c2eb0 a2=3 a3=0 items=0 ppid=1 pid=4815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.698426] audit: type=1327 audit(1780615622.959:2774): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 166.721075] audit: type=1105 audit(1780615622.999:2775): pid=4815 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 166.729249] audit: type=1103 audit(1780615623.007:2776): pid=4819 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 167.305349] audit: type=1106 audit(1780615623.582:2777): pid=4815 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 167.314122] audit: type=1104 audit(1780615623.582:2778): pid=4815 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 172.472493] kauditd_printk_skb: 1 callbacks suppressed [ 172.472499] audit: type=1130 audit(1780615628.750:2780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.217:22-20.229.252.112:38050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.341132] audit: type=1101 audit(1780615629.618:2781): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.348173] audit: type=1103 audit(1780615629.625:2782): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.356838] audit: type=1006 audit(1780615629.625:2783): pid=4834 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 173.362953] audit: type=1300 audit(1780615629.625:2783): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd5bbaba0 a2=3 a3=0 items=0 ppid=1 pid=4834 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.370285] audit: type=1327 audit(1780615629.625:2783): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 173.392459] audit: type=1105 audit(1780615629.670:2784): pid=4834 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.399886] audit: type=1103 audit(1780615629.677:2785): pid=4838 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.952385] audit: type=1106 audit(1780615630.230:2786): pid=4834 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 173.961046] audit: type=1104 audit(1780615630.230:2787): pid=4834 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 182.630038] kauditd_printk_skb: 23 callbacks suppressed [ 182.630043] audit: type=1130 audit(1780615638.907:2807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.217:22-20.229.252.112:56670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.521811] audit: type=1101 audit(1780615639.799:2808): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 183.531093] audit: type=1103 audit(1780615639.806:2809): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 183.537439] audit: type=1006 audit(1780615639.806:2810): pid=4881 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 183.541507] audit: type=1300 audit(1780615639.806:2810): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdc3fd810 a2=3 a3=0 items=0 ppid=1 pid=4881 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.547938] audit: type=1327 audit(1780615639.806:2810): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 183.571395] audit: type=1105 audit(1780615639.849:2811): pid=4881 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 183.579293] audit: type=1103 audit(1780615639.857:2812): pid=4887 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.147050] audit: type=1106 audit(1780615640.424:2813): pid=4881 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.155959] audit: type=1104 audit(1780615640.425:2814): pid=4881 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 189.308375] kauditd_printk_skb: 1 callbacks suppressed [ 189.308381] audit: type=1130 audit(1780615645.585:2816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.217:22-20.229.252.112:56680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.155457] audit: type=1101 audit(1780615646.433:2817): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.164062] audit: type=1103 audit(1780615646.441:2818): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.169718] audit: type=1006 audit(1780615646.441:2819): pid=4898 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 190.174507] audit: type=1300 audit(1780615646.441:2819): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd9280700 a2=3 a3=0 items=0 ppid=1 pid=4898 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.180696] audit: type=1327 audit(1780615646.441:2819): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 190.205056] audit: type=1105 audit(1780615646.482:2820): pid=4898 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.211872] audit: type=1103 audit(1780615646.486:2821): pid=4902 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.767096] audit: type=1106 audit(1780615647.044:2822): pid=4898 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.774222] audit: type=1104 audit(1780615647.044:2823): pid=4898 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 194.834602] kauditd_printk_skb: 20 callbacks suppressed [ 194.834608] audit: type=1325 audit(1780615651.111:2840): table=filter:159 family=2 entries=20 op=nft_register_rule pid=4942 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 194.840296] audit: type=1300 audit(1780615651.111:2840): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd16d1d60 a2=0 a3=1 items=0 ppid=3661 pid=4942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.847323] audit: type=1327 audit(1780615651.111:2840): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 194.851037] audit: type=1325 audit(1780615651.128:2841): table=nat:160 family=2 entries=18 op=nft_register_rule pid=4942 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 194.856183] audit: type=1300 audit(1780615651.128:2841): arch=c00000b7 syscall=211 success=yes exit=5004 a0=3 a1=ffffd16d1d60 a2=0 a3=1 items=0 ppid=3661 pid=4942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.864190] audit: type=1327 audit(1780615651.128:2841): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 194.997472] audit: type=1106 audit(1780615651.275:2842): pid=4928 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 195.007395] audit: type=1104 audit(1780615651.275:2843): pid=4928 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 195.013029] audit: type=1131 audit(1780615651.284:2844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.217:22-20.229.252.112:50046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.166529] audit: type=1130 audit(1780615651.444:2845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.217:22-20.229.252.112:50054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.179616] kauditd_printk_skb: 27 callbacks suppressed [ 202.179622] audit: type=1325 audit(1780615658.457:2865): table=filter:163 family=2 entries=20 op=nft_register_rule pid=4979 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 202.184123] audit: type=1300 audit(1780615658.457:2865): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffda95eb30 a2=0 a3=1 items=0 ppid=3661 pid=4979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.190689] audit: type=1327 audit(1780615658.457:2865): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 202.199086] audit: type=1325 audit(1780615658.475:2866): table=nat:164 family=2 entries=102 op=nft_register_chain pid=4979 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 202.202177] audit: type=1300 audit(1780615658.475:2866): arch=c00000b7 syscall=211 success=yes exit=47916 a0=3 a1=ffffda95eb30 a2=0 a3=1 items=0 ppid=3661 pid=4979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.208321] audit: type=1327 audit(1780615658.475:2866): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 203.800706] audit: type=1130 audit(1780615660.078:2867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.217:22-20.229.252.112:47432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.670688] audit: type=1101 audit(1780615660.949:2868): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 204.679810] audit: type=1103 audit(1780615660.957:2869): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 204.685582] audit: type=1006 audit(1780615660.957:2870): pid=4981 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 210.455940] kauditd_printk_skb: 7 callbacks suppressed [ 210.455945] audit: type=1130 audit(1780615666.734:2876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.217:22-20.229.252.112:47448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.340919] audit: type=1101 audit(1780615667.619:2877): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.347809] audit: type=1103 audit(1780615667.626:2878): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.353717] audit: type=1006 audit(1780615667.626:2879): pid=4999 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 211.357133] audit: type=1300 audit(1780615667.626:2879): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd5bf0180 a2=3 a3=0 items=0 ppid=1 pid=4999 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.364063] audit: type=1327 audit(1780615667.626:2879): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 211.389083] audit: type=1105 audit(1780615667.667:2880): pid=4999 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.396667] audit: type=1103 audit(1780615667.675:2881): pid=5003 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.963984] audit: type=1106 audit(1780615668.242:2882): pid=4999 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.973358] audit: type=1104 audit(1780615668.242:2883): pid=4999 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 215.769397] kauditd_printk_skb: 9 callbacks suppressed [ 215.769402] audit: type=1334 audit(1780615672.048:2891): prog-id=167 op=UNLOAD [ 215.772774] audit: type=1334 audit(1780615672.048:2892): prog-id=171 op=UNLOAD [ 215.815170] audit: type=1334 audit(1780615672.094:2893): prog-id=1229 op=UNLOAD [ 215.817558] audit: type=1334 audit(1780615672.094:2894): prog-id=1255 op=UNLOAD [ 215.921756] audit: type=1334 audit(1780615672.200:2895): prog-id=149 op=UNLOAD [ 215.924300] audit: type=1334 audit(1780615672.200:2896): prog-id=153 op=UNLOAD [ 215.954550] audit: type=1334 audit(1780615672.233:2897): prog-id=144 op=UNLOAD [ 215.956645] audit: type=1334 audit(1780615672.233:2898): prog-id=148 op=UNLOAD This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:27:53 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:27:53 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: [ 217.701086] audit: type=1106 audit(1780615673.978:2899): pid=5014 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.709521] audit: type=1104 audit(1780615673.978:2900): pid=5014 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 221.098506] kauditd_printk_skb: 9 callbacks suppressed [ 221.098513] audit: type=1106 audit(1780615677.375:2908): pid=5164 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 221.111111] audit: type=1104 audit(1780615677.375:2909): pid=5164 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 221.117761] audit: type=1131 audit(1780615677.387:2910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.217:22-20.229.252.112:57232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 221.262993] audit: type=1130 audit(1780615677.541:2911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.217:22-20.229.252.112:57236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 221.394441] audit: type=1334 audit(1780615677.673:2912): prog-id=1266 op=LOAD [ 221.396190] audit: type=1334 audit(1780615677.673:2913): prog-id=1267 op=LOAD [ 221.398031] audit: type=1300 audit(1780615677.673:2913): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000130180 a2=98 a3=0 items=0 ppid=5192 pid=5205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 221.403871] audit: type=1327 audit(1780615677.673:2913): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233363264323231356436623562383535613763386639313537323166 [ 221.411272] audit: type=1334 audit(1780615677.674:2914): prog-id=1267 op=UNLOAD [ 221.413141] audit: type=1300 audit(1780615677.674:2914): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5192 pid=5205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.100038] kauditd_printk_skb: 1296 callbacks suppressed [ 226.100051] audit: type=1334 audit(1780615682.378:3362): prog-id=1486 op=LOAD [ 226.103636] audit: type=1300 audit(1780615682.378:3362): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffee599cb8 a2=90 a3=2 items=0 ppid=5433 pid=5491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 226.110659] audit: type=1327 audit(1780615682.378:3362): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 226.113164] audit: type=1334 audit(1780615682.380:3363): prog-id=1486 op=UNLOAD [ 226.115185] audit: type=1300 audit(1780615682.380:3363): arch=c00000b7 syscall=57 success=yes exit=0 a0=3 a1=ffffb3ea0f10 a2=0 a3=2 items=0 ppid=5433 pid=5491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 226.121715] audit: type=1327 audit(1780615682.380:3363): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 226.124339] audit: type=1334 audit(1780615682.388:3364): prog-id=1487 op=LOAD [ 226.126525] audit: type=1300 audit(1780615682.388:3364): arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffee599cb8 a2=90 a3=2 items=0 ppid=5433 pid=5491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 226.132872] audit: type=1327 audit(1780615682.388:3364): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 226.135145] audit: type=1334 audit(1780615682.388:3365): prog-id=1487 op=UNLOAD [ 227.044283] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aes-ce)) [ 231.102145] kauditd_printk_skb: 4864 callbacks suppressed [ 231.102151] audit: type=1325 audit(1780615687.381:4988): table=raw:249 family=2 entries=1 op=nft_unregister_rule pid=5901 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 231.106291] audit: type=1300 audit(1780615687.381:4988): arch=c00000b7 syscall=211 success=yes exit=632 a0=3 a1=ffffeddec5c0 a2=0 a3=ffffaef645c0 items=0 ppid=5433 pid=5901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 231.112509] audit: type=1327 audit(1780615687.381:4988): proctitle=69707461626C6573002D770035002D7400726177002D44004F4C445F43494C49554D5F5052455F726177002D6D006D61726B002D2D6D61726B0030783230302F3078663030002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A204E4F545241434B20666F722070726F78792074726166666963002D6A [ 231.124570] audit: type=1325 audit(1780615687.403:4989): table=filter:250 family=2 entries=1 op=nft_unregister_rule pid=5904 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 231.127675] audit: type=1300 audit(1780615687.403:4989): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=fffffa6294f0 a2=0 a3=ffff8c1d05c0 items=0 ppid=5433 pid=5904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 231.134139] audit: type=1327 audit(1780615687.403:4989): proctitle=69707461626C6573002D770035002D740066696C746572002D4400494E505554002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F494E505554002D6A004F4C445F43494C49554D5F494E505554 [ 231.138840] audit: type=1325 audit(1780615687.416:4990): table=filter:251 family=2 entries=1 op=nft_unregister_rule pid=5905 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 231.141938] audit: type=1300 audit(1780615687.416:4990): arch=c00000b7 syscall=211 success=yes exit=536 a0=3 a1=ffffd76c2080 a2=0 a3=ffff92aa55c0 items=0 ppid=5433 pid=5905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 231.147753] audit: type=1327 audit(1780615687.416:4990): proctitle=69707461626C6573002D770035002D740066696C746572002D4400464F5257415244002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D2D6665656465723A2043494C49554D5F464F5257415244002D6A004F4C445F43494C49554D5F464F5257415244 [ 231.152843] audit: type=1325 audit(1780615687.431:4991): table=filter:252 family=2 entries=1 op=nft_unregister_rule pid=5906 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:28:10 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 This is ip-172-31-29-217 (Linux aarch64 6.12.92-flatcar) 23:28:10 SSH host key: SHA256:XR3xfSTFaMLLG5RdPUyFLaPlRAk/eUckWS3TwvNRD5w (ED25519) SSH host key: SHA256:aOgAmnmn7ak4PQpVDt67s0ydpUQjRuMEaGbgbJm1M2Q (ECDSA) SSH host key: SHA256:20B30EC/PMibi0OQCH9JBYiqEznMTuInZDV0/+VVAwg (RSA) eth0: 172.31.29.217 fe80::4f6:4cff:fe32:167 ip-172-31-29-217 login: [ 237.849643] kauditd_printk_skb: 210 callbacks suppressed [ 237.849648] audit: type=1106 audit(1780615694.127:5068): pid=5331 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 237.864079] audit: type=1104 audit(1780615694.127:5069): pid=5331 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 237.875450] audit: type=1131 audit(1780615694.137:5070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.217:22-20.229.252.112:58662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 240.341702] audit: type=1334 audit(1780615696.619:5071): prog-id=2277 op=LOAD [ 240.343720] audit: type=1300 audit(1780615696.619:5071): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc7688468 a2=74 a3=11 items=0 ppid=5433 pid=6080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 240.352496] audit: type=1327 audit(1780615696.619:5071): proctitle=74630066696C746572007265706C61636500646576006C786338376439316264653538633000696E6772657373007072696F00310068616E646C65003100627066006461006F626A00313439385F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 240.360082] audit: type=1334 audit(1780615696.619:5072): prog-id=2277 op=UNLOAD [ 240.363045] audit: type=1300 audit(1780615696.619:5072): arch=c00000b7 syscall=57 success=yes exit=0 a0=5 a1=ffff95988f50 a2=74 a3=11 items=0 ppid=5433 pid=6080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 240.369427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.370726] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64