ry /tmp. [ 25.136472] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. [ 25.139154] systemd[1]: modprobe@configfs.service: Deactivated successfully. [ 25.140015] audit: type=1130 audit(1777421469.060:107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 25.140848] systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. [ 25.151455] audit: type=1130 audit(1777421469.073:108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 25.153344] systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... [ 25.162039] audit: type=1131 audit(1777421469.073:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 25.170085] systemd-journald[1448]: Collecting audit messages is enabled. [ 25.180263] systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... [ 25.188867] systemd[1]: Started systemd-journald.service - Journal Service. [ 25.196624] fuse: init (API version 7.41) [ 25.344473] systemd-journald[1448]: Received client request to flush runtime journal. [ 25.399396] loop6: detected capacity change from 0 to 43472 [ 25.412133] loop6: p1 p2 p3 [ 25.459484] ACPI: bus type drm_connector registered [ 25.554823] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.560017] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.564073] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 25.571807] device-mapper: ioctl: error adding target to table [ 25.586094] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.859117] tun: Universal TUN/TAP device driver, 1.6 [ 27.017459] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 27.023570] ACPI: button: Power Button [PWRF] [ 27.028483] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 27.040439] ACPI: button: Sleep Button [SLPF] [ 27.098601] mousedev: PS/2 mouse device common for all mice [ 27.114697] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 27.387254] erofs: (device dm-5): mounted with root inode @ nid 40. [ 27.441793] loop6: detected capacity change from 0 to 43472 [ 27.446748] loop6: p1 p2 p3 [ 27.488125] device-mapper: verity: sha256 using shash "sha256-avx2" [ 27.491009] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 27.494016] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 27.495786] device-mapper: ioctl: error adding target to table [ 27.500196] device-mapper: verity: sha256 using shash "sha256-avx2" [ 27.620412] erofs: (device dm-5): mounted with root inode @ nid 40. [ 27.629146] device-mapper: ioctl: remove_all left 5 open device(s) [ 27.665266] loop6: detected capacity change from 0 to 228704 [ 27.712775] loop6: detected capacity change from 0 to 178200 [ 27.718758] loop6: p1 p2 p3 [ 27.741698] device-mapper: verity: sha256 using shash "sha256-avx2" [ 27.743024] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 27.744863] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 27.746621] device-mapper: ioctl: error adding target to table [ 27.750664] device-mapper: verity: sha256 using shash "sha256-avx2" [ 27.795926] erofs: (device dm-5): mounted with root inode @ nid 39. [ 27.814777] loop6: detected capacity change from 0 to 378016 [ 27.820255] loop6: p1 p2 p3 [ 27.863820] device-mapper: verity: sha256 using shash "sha256-avx2" [ 27.866350] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 27.869175] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 27.870973] device-mapper: ioctl: error adding target to table [ 27.873793] device-mapper: verity: sha256 using shash "sha256-avx2" [ 27.950091] erofs: (device dm-5): mounted with root inode @ nid 39. [ 27.973104] loop6: detected capacity change from 0 to 291952 [ 27.975420] loop6: p1 p2 p3 [ 27.993614] device-mapper: verity: sha256 using shash "sha256-avx2" [ 27.994721] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 27.996222] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 27.997547] device-mapper: ioctl: error adding target to table [ 27.999568] device-mapper: verity: sha256 using shash "sha256-avx2" [ 28.040343] erofs: (device dm-5): mounted with root inode @ nid 39. [ 28.061921] loop6: detected capacity change from 0 to 228704 [ 28.097165] loop7: detected capacity change from 0 to 178200 [ 28.103881] loop7: p1 p2 p3 [ 28.110037] loop7: p1 p2 p3 [ 28.132823] device-mapper: verity: sha256 using shash "sha256-avx2" [ 28.134203] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 28.136730] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 28.138253] device-mapper: ioctl: error adding target to table [ 28.141167] device-mapper: verity: sha256 using shash "sha256-avx2" [ 28.205232] erofs: (device dm-5): mounted with root inode @ nid 39. [ 28.209428] loop8: detected capacity change from 0 to 378016 [ 28.211257] loop8: p1 p2 p3 [ 28.215255] loop8: p1 p2 p3 [ 28.255724] device-mapper: verity: sha256 using shash "sha256-avx2" [ 28.257079] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 28.258782] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 28.260480] device-mapper: ioctl: error adding target to table [ 28.264256] device-mapper: verity: sha256 using shash "sha256-avx2" [ 28.362719] erofs: (device dm-6): mounted with root inode @ nid 39. [ 28.368629] loop9: detected capacity change from 0 to 291952 [ 28.370744] loop9: p1 p2 p3 [ 28.377239] loop9: p1 p2 p3 [ 28.400717] device-mapper: verity: sha256 using shash "sha256-avx2" [ 28.402247] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 28.406018] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 28.409033] device-mapper: ioctl: error adding target to table [ 28.414153] device-mapper: verity: sha256 using shash "sha256-avx2" [ 28.475729] erofs: (device dm-7): mounted with root inode @ nid 39. [ 28.494423] device-mapper: ioctl: remove_all left 5 open device(s) [ 28.496404] device-mapper: ioctl: remove_all left 5 open device(s) [ 32.014305] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 32.043611] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/04/29 00:11:19Z: Amazon SSM Agent v3.3.0.0 is running 2026/04/29 00:11:19Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/04/29 00:11:19Z: OsVersion: 4669.0.0 [!p]104[?7hP+q6E616D65\ This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:11:22 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:11:22 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: [ 49.946726] kauditd_printk_skb: 60 callbacks suppressed [ 49.946731] audit: type=1305 audit(1777421495.563:166): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 49.949596] audit: type=1300 audit(1777421495.563:166): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff6c94a160 a2=420 a3=0 items=0 ppid=2215 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 49.955144] audit: type=1327 audit(1777421495.563:166): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 49.957101] audit: type=1130 audit(1777421495.569:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 49.960101] audit: type=1131 audit(1777421495.569:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 49.962960] audit: type=1106 audit(1777421495.571:169): pid=2209 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 49.966187] audit: type=1104 audit(1777421495.571:170): pid=2209 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 50.127556] audit: type=1106 audit(1777421495.743:171): pid=2189 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 50.135252] audit: type=1104 audit(1777421495.743:172): pid=2189 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 50.140873] audit: type=1131 audit(1777421495.754:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4098-172.31.17.61:22-20.229.252.112:55864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.202988] Initializing XFRM netlink socket [ 60.345067] kauditd_printk_skb: 11 callbacks suppressed [ 60.345071] audit: type=1130 audit(1777421505.961:183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.386282] audit: type=1325 audit(1777421506.003:184): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 60.391996] audit: type=1300 audit(1777421506.003:184): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff05cd67d0 a2=0 a3=0 items=0 ppid=2268 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 60.400024] audit: type=1327 audit(1777421506.003:184): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 60.404596] audit: type=1325 audit(1777421506.016:185): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 60.409761] audit: type=1300 audit(1777421506.016:185): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff31ce6800 a2=0 a3=0 items=0 ppid=2268 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 60.419940] audit: type=1327 audit(1777421506.016:185): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 60.422883] audit: type=1325 audit(1777421506.018:186): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 60.427703] audit: type=1300 audit(1777421506.018:186): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc079c5bc0 a2=0 a3=0 items=0 ppid=2268 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 60.434302] audit: type=1327 audit(1777421506.018:186): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:11:47 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:11:47 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: [ 71.093960] kauditd_printk_skb: 109 callbacks suppressed [ 71.093964] audit: type=1130 audit(1777421516.710:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.211764] audit: type=1131 audit(1777421516.827:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 78.611916] audit: type=1130 audit(1777421524.228:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 78.618146] audit: type=1131 audit(1777421524.228:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 78.836956] zram_generator::config[3063]: No configuration found. [ 78.848813] systemd-ssh-generator[3057]: Failed to query local AF_VSOCK CID: Cannot assign requested address [ 79.212673] audit: type=1334 audit(1777421524.829:230): prog-id=36 op=LOAD [ 79.214327] audit: type=1334 audit(1777421524.829:231): prog-id=13 op=UNLOAD [ 79.216144] audit: type=1334 audit(1777421524.829:232): prog-id=37 op=LOAD [ 79.217704] audit: type=1334 audit(1777421524.829:233): prog-id=38 op=LOAD [ 79.219408] audit: type=1334 audit(1777421524.829:234): prog-id=14 op=UNLOAD [ 79.220992] audit: type=1334 audit(1777421524.829:235): prog-id=15 op=UNLOAD [ 79.222388] audit: type=1334 audit(1777421524.830:236): prog-id=39 op=LOAD [ 79.224005] audit: type=1334 audit(1777421524.830:237): prog-id=28 op=UNLOAD [ 88.601020] zram_generator::config[3455]: No configuration found. [ 88.610070] systemd-ssh-generator[3451]: Failed to query local AF_VSOCK CID: Cannot assign requested address [ 88.956652] kauditd_printk_skb: 202 callbacks suppressed [ 88.956655] audit: type=1334 audit(1777421534.573:332): prog-id=86 op=LOAD [ 88.960063] audit: type=1334 audit(1777421534.573:333): prog-id=36 op=UNLOAD [ 88.961921] audit: type=1334 audit(1777421534.573:334): prog-id=87 op=LOAD [ 88.963935] audit: type=1334 audit(1777421534.573:335): prog-id=88 op=LOAD [ 88.965728] audit: type=1334 audit(1777421534.573:336): prog-id=37 op=UNLOAD [ 88.967630] audit: type=1334 audit(1777421534.573:337): prog-id=38 op=UNLOAD [ 88.969537] audit: type=1334 audit(1777421534.574:338): prog-id=89 op=LOAD [ 88.971308] audit: type=1334 audit(1777421534.574:339): prog-id=39 op=UNLOAD [ 88.973087] audit: type=1334 audit(1777421534.577:340): prog-id=90 op=LOAD [ 88.974511] audit: type=1334 audit(1777421534.577:341): prog-id=40 op=UNLOAD [ 94.108060] kauditd_printk_skb: 51 callbacks suppressed [ 94.108064] audit: type=1106 audit(1777421539.725:393): pid=2243 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 94.117806] audit: type=1104 audit(1777421539.726:394): pid=2243 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 94.123722] audit: type=1131 audit(1777421539.736:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4099-172.31.17.61:22-20.229.252.112:55880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 96.496741] audit: type=1334 audit(1777421542.113:396): prog-id=112 op=LOAD [ 96.498881] audit: type=1334 audit(1777421542.115:397): prog-id=113 op=LOAD [ 96.501150] audit: type=1334 audit(1777421542.115:398): prog-id=114 op=LOAD [ 96.503320] audit: type=1300 audit(1777421542.115:398): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000106240 a2=98 a3=0 items=0 ppid=3612 pid=3636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.510056] audit: type=1327 audit(1777421542.115:398): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261376265373734393536363232643162363062663332383239656235 [ 96.516795] audit: type=1334 audit(1777421542.115:399): prog-id=114 op=UNLOAD [ 96.519456] audit: type=1300 audit(1777421542.115:399): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3612 pid=3636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.728040] kauditd_printk_skb: 227 callbacks suppressed [ 105.728043] audit: type=1334 audit(1777421551.345:476): prog-id=130 op=LOAD [ 105.731644] audit: type=1334 audit(1777421551.348:477): prog-id=131 op=LOAD [ 105.732817] audit: type=1300 audit(1777421551.348:477): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000138240 a2=98 a3=0 items=0 ppid=3612 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.738018] audit: type=1327 audit(1777421551.348:477): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366376461393834353434636465373039663637323232396463656339 [ 105.743655] audit: type=1334 audit(1777421551.348:478): prog-id=131 op=UNLOAD [ 105.745083] audit: type=1300 audit(1777421551.348:478): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3612 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.751240] audit: type=1327 audit(1777421551.348:478): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366376461393834353434636465373039663637323232396463656339 [ 105.757038] audit: type=1334 audit(1777421551.348:479): prog-id=132 op=LOAD [ 105.758474] audit: type=1300 audit(1777421551.348:479): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000138490 a2=98 a3=0 items=0 ppid=3612 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.765508] audit: type=1327 audit(1777421551.348:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366376461393834353434636465373039663637323232396463656339 [ 110.870736] kauditd_printk_skb: 122 callbacks suppressed [ 110.870740] audit: type=1334 audit(1777421556.487:528): prog-id=158 op=LOAD [ 110.873327] audit: type=1300 audit(1777421556.487:528): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd412609d0 a2=74 a3=7ffd412609d0 items=0 ppid=4156 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.878908] audit: type=1327 audit(1777421556.487:528): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 110.880989] audit: type=1334 audit(1777421556.487:529): prog-id=158 op=UNLOAD [ 110.882188] audit: type=1300 audit(1777421556.487:529): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffd412609d0 a2=74 a3=7ffd412609d0 items=0 ppid=4156 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.887708] audit: type=1327 audit(1777421556.487:529): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 110.889803] audit: type=1334 audit(1777421556.489:530): prog-id=159 op=LOAD [ 110.891064] audit: type=1300 audit(1777421556.489:530): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd4125fa50 a2=90 a3=2 items=0 ppid=4156 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 110.896456] audit: type=1327 audit(1777421556.489:530): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 110.898480] audit: type=1334 audit(1777421556.489:531): prog-id=159 op=UNLOAD This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:40 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:40 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: [ 114.656918] NET: Registered PF_ALG protocol family This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:41 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:41 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: [ 115.789409] eth0: renamed from tmpbbbe2 [ 115.811695] eth0: renamed from tmp931f1 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:42 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:42 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: [ 116.934980] kauditd_printk_skb: 5876 callbacks suppressed [ 116.934984] audit: type=1334 audit(1777421562.551:2490): prog-id=1117 op=LOAD [ 116.938993] audit: type=1300 audit(1777421562.551:2490): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff9f4b43d0 a2=74 a3=7fff9f4b43d0 items=0 ppid=4156 pid=4645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.947895] audit: type=1327 audit(1777421562.551:2490): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003930325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 116.954966] audit: type=1334 audit(1777421562.551:2491): prog-id=1117 op=UNLOAD [ 116.956482] audit: type=1300 audit(1777421562.551:2491): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fff9f4b43d0 a2=74 a3=7fff9f4b43d0 items=0 ppid=4156 pid=4645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 116.965473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.966674] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 116.967994] audit: backlog limit exceeded [ 116.969269] audit: type=1327 audit(1777421562.551:2491): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003930325F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 116.974044] audit: type=1334 audit(1777421562.554:2492): prog-id=1118 op=LOAD This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:43 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:43 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:44 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:12:44 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: [ 122.888433] kauditd_printk_skb: 591 callbacks suppressed [ 122.888436] audit: type=1325 audit(1777421568.505:2692): table=filter:157 family=2 entries=8 op=nft_register_rule pid=4825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 122.892007] audit: type=1300 audit(1777421568.505:2692): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffde2507200 a2=0 a3=7ffde25071ec items=0 ppid=3744 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.897550] audit: type=1327 audit(1777421568.505:2692): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 122.904584] audit: type=1325 audit(1777421568.521:2693): table=nat:158 family=2 entries=54 op=nft_register_chain pid=4825 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 122.907358] audit: type=1300 audit(1777421568.521:2693): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7ffde2507200 a2=0 a3=7ffde25071ec items=0 ppid=3744 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.913283] audit: type=1327 audit(1777421568.521:2693): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 153.627027] audit: type=1130 audit(1777421599.241:2694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4100-172.31.17.61:22-20.229.252.112:53344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 154.625102] audit: type=1101 audit(1777421600.242:2695): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 154.630995] audit: type=1103 audit(1777421600.243:2696): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 154.636478] audit: type=1006 audit(1777421600.244:2697): pid=4834 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 154.639759] audit: type=1300 audit(1777421600.244:2697): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd83cfc4d0 a2=3 a3=0 items=0 ppid=1 pid=4834 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.646660] audit: type=1327 audit(1777421600.244:2697): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 154.658023] audit: type=1105 audit(1777421600.275:2698): pid=4834 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 154.664848] audit: type=1103 audit(1777421600.278:2699): pid=4838 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.920073] audit: type=1106 audit(1777421601.537:2700): pid=4834 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.931265] audit: type=1104 audit(1777421601.537:2701): pid=4834 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 161.093955] kauditd_printk_skb: 1 callbacks suppressed [ 161.093959] audit: type=1130 audit(1777421606.710:2703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.17.61:22-20.229.252.112:45548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.002276] audit: type=1101 audit(1777421607.619:2704): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.008856] audit: type=1103 audit(1777421607.620:2705): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.014819] audit: type=1006 audit(1777421607.620:2706): pid=4855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 162.018157] audit: type=1300 audit(1777421607.620:2706): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe438ca820 a2=3 a3=0 items=0 ppid=1 pid=4855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.024013] audit: type=1327 audit(1777421607.620:2706): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 162.030177] audit: type=1105 audit(1777421607.647:2707): pid=4855 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.037072] audit: type=1103 audit(1777421607.651:2708): pid=4859 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.616749] audit: type=1106 audit(1777421608.233:2709): pid=4855 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.624479] audit: type=1104 audit(1777421608.233:2710): pid=4855 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 167.792802] kauditd_printk_skb: 1 callbacks suppressed [ 167.792806] audit: type=1130 audit(1777421613.409:2712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-172.31.17.61:22-20.229.252.112:45556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.697074] audit: type=1101 audit(1777421614.314:2713): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 168.703548] audit: type=1103 audit(1777421614.316:2714): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 168.709444] audit: type=1006 audit(1777421614.316:2715): pid=4872 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 168.712836] audit: type=1300 audit(1777421614.316:2715): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc30c5eea0 a2=3 a3=0 items=0 ppid=1 pid=4872 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.718679] audit: type=1327 audit(1777421614.316:2715): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 168.724765] audit: type=1105 audit(1777421614.341:2716): pid=4872 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 168.731639] audit: type=1103 audit(1777421614.344:2717): pid=4876 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 169.285962] audit: type=1106 audit(1777421614.902:2718): pid=4872 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 169.294062] audit: type=1104 audit(1777421614.903:2719): pid=4872 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 177.902273] kauditd_printk_skb: 23 callbacks suppressed [ 177.902277] audit: type=1130 audit(1777421623.518:2739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-8-172.31.17.61:22-20.229.252.112:47670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.835107] audit: type=1101 audit(1777421624.452:2740): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 178.841340] audit: type=1103 audit(1777421624.454:2741): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 178.847257] audit: type=1006 audit(1777421624.454:2742): pid=4920 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 178.850603] audit: type=1300 audit(1777421624.454:2742): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd1b214570 a2=3 a3=0 items=0 ppid=1 pid=4920 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.856506] audit: type=1327 audit(1777421624.454:2742): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 178.863684] audit: type=1105 audit(1777421624.480:2743): pid=4920 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 178.870450] audit: type=1103 audit(1777421624.484:2744): pid=4924 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 179.444102] audit: type=1106 audit(1777421625.060:2745): pid=4920 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 179.452860] audit: type=1104 audit(1777421625.060:2746): pid=4920 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.609953] kauditd_printk_skb: 1 callbacks suppressed [ 184.609957] audit: type=1130 audit(1777421630.226:2748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-9-172.31.17.61:22-20.229.252.112:39900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.482086] audit: type=1101 audit(1777421631.099:2749): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 185.488453] audit: type=1103 audit(1777421631.100:2750): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 185.494835] audit: type=1006 audit(1777421631.100:2751): pid=4936 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 185.498642] audit: type=1300 audit(1777421631.100:2751): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf74787f0 a2=3 a3=0 items=0 ppid=1 pid=4936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.505013] audit: type=1327 audit(1777421631.100:2751): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 185.512729] audit: type=1105 audit(1777421631.129:2752): pid=4936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 185.520059] audit: type=1103 audit(1777421631.137:2753): pid=4940 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.063730] audit: type=1106 audit(1777421631.680:2754): pid=4936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.070479] audit: type=1104 audit(1777421631.680:2755): pid=4936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.354852] kauditd_printk_skb: 20 callbacks suppressed [ 190.354856] audit: type=1325 audit(1777421635.970:2772): table=filter:159 family=2 entries=20 op=nft_register_rule pid=4982 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 190.364618] audit: type=1300 audit(1777421635.970:2772): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffde4f264f0 a2=0 a3=7ffde4f264dc items=0 ppid=3744 pid=4982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.372445] audit: type=1327 audit(1777421635.970:2772): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 190.375868] audit: type=1325 audit(1777421635.979:2773): table=nat:160 family=2 entries=18 op=nft_register_rule pid=4982 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 190.382869] audit: type=1300 audit(1777421635.979:2773): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffde4f264f0 a2=0 a3=0 items=0 ppid=3744 pid=4982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.389642] audit: type=1327 audit(1777421635.979:2773): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 190.407104] audit: type=1325 audit(1777421636.014:2774): table=filter:161 family=2 entries=32 op=nft_register_rule pid=4984 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 190.412951] audit: type=1300 audit(1777421636.014:2774): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff4ad5e4a0 a2=0 a3=7fff4ad5e48c items=0 ppid=3744 pid=4984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.424949] audit: type=1327 audit(1777421636.014:2774): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 190.429125] audit: type=1325 audit(1777421636.037:2775): table=nat:162 family=2 entries=18 op=nft_register_rule pid=4984 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.362070] kauditd_printk_skb: 27 callbacks suppressed [ 198.362073] audit: type=1325 audit(1777421643.978:2797): table=filter:163 family=2 entries=20 op=nft_register_rule pid=5019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.366569] audit: type=1300 audit(1777421643.978:2797): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffff2672290 a2=0 a3=7ffff267227c items=0 ppid=3744 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.372543] audit: type=1327 audit(1777421643.978:2797): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 198.375592] audit: type=1325 audit(1777421643.989:2798): table=nat:164 family=2 entries=102 op=nft_register_chain pid=5019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.378573] audit: type=1300 audit(1777421643.989:2798): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffff2672290 a2=0 a3=7ffff267227c items=0 ppid=3744 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.385221] audit: type=1327 audit(1777421643.989:2798): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 199.152289] audit: type=1130 audit(1777421644.768:2799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-12-172.31.17.61:22-20.229.252.112:46194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.081422] audit: type=1101 audit(1777421645.698:2800): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 200.087993] audit: type=1103 audit(1777421645.701:2801): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 200.093686] audit: type=1006 audit(1777421645.701:2802): pid=5021 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 205.880323] kauditd_printk_skb: 7 callbacks suppressed [ 205.880328] audit: type=1130 audit(1777421651.497:2808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4104-172.31.17.61:22-20.229.252.112:35388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.743400] audit: type=1101 audit(1777421652.360:2809): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 206.750939] audit: type=1103 audit(1777421652.362:2810): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 206.756894] audit: type=1006 audit(1777421652.362:2811): pid=5037 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 206.760179] audit: type=1300 audit(1777421652.362:2811): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe899dc9d0 a2=3 a3=0 items=0 ppid=1 pid=5037 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.766040] audit: type=1327 audit(1777421652.362:2811): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 206.772817] audit: type=1105 audit(1777421652.389:2812): pid=5037 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 206.779602] audit: type=1103 audit(1777421652.393:2813): pid=5041 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.307944] audit: type=1106 audit(1777421652.924:2814): pid=5037 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.315583] audit: type=1104 audit(1777421652.924:2815): pid=5037 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:14:17 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:14:17 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: [ 212.566860] kauditd_printk_skb: 17 callbacks suppressed [ 212.566865] audit: type=1106 audit(1777421658.183:2831): pid=5053 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 212.574966] audit: type=1104 audit(1777421658.184:2832): pid=5053 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 212.589486] audit: type=1131 audit(1777421658.206:2833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-13-172.31.17.61:22-20.229.252.112:35400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 212.740314] audit: type=1130 audit(1777421658.357:2834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-14-172.31.17.61:22-20.229.252.112:34904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 213.666067] audit: type=1101 audit(1777421659.283:2835): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 213.671881] audit: type=1103 audit(1777421659.284:2836): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 213.678270] audit: type=1006 audit(1777421659.284:2837): pid=5209 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 213.681353] audit: type=1300 audit(1777421659.284:2837): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd5e65fa70 a2=3 a3=0 items=0 ppid=1 pid=5209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 213.688141] audit: type=1327 audit(1777421659.284:2837): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 213.696397] audit: type=1105 audit(1777421659.313:2838): pid=5209 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.703992] kauditd_printk_skb: 102 callbacks suppressed [ 217.703995] audit: type=1101 audit(1777421663.321:2887): pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.711634] audit: type=1103 audit(1777421663.322:2888): pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.717572] audit: type=1006 audit(1777421663.322:2889): pid=5375 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 217.720800] audit: type=1300 audit(1777421663.322:2889): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcbd0c86d0 a2=3 a3=0 items=0 ppid=1 pid=5375 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 217.726474] audit: type=1327 audit(1777421663.322:2889): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 217.730745] audit: type=1105 audit(1777421663.347:2890): pid=5375 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.737448] audit: type=1103 audit(1777421663.350:2891): pid=5424 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 218.178105] audit: type=1334 audit(1777421663.795:2892): prog-id=1257 op=LOAD [ 218.180939] audit: type=1334 audit(1777421663.795:2893): prog-id=1258 op=LOAD [ 218.183825] audit: type=1300 audit(1777421663.795:2893): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0240 a2=98 a3=0 items=0 ppid=5235 pid=5432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 219.947390] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 222.705804] kauditd_printk_skb: 5946 callbacks suppressed [ 222.705808] audit: type=1325 audit(1777421668.322:4878): table=filter:208 family=2 entries=1 op=nft_register_rule pid=5935 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 222.710450] audit: type=1300 audit(1777421668.322:4878): arch=c000003e syscall=46 success=yes exit=628 a0=3 a1=7ffecc6f0840 a2=0 a3=7ffecc6f082c items=0 ppid=5484 pid=5935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 222.717616] audit: type=1327 audit(1777421668.322:4878): proctitle=69707461626C6573002D770035002D410043494C49554D5F464F5257415244002D69006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20636C75737465722D3E616E79206F6E206C78632B20666F727761726420616363657074002D6A00414343455054 [ 222.722467] audit: type=1325 audit(1777421668.334:4879): table=filter:209 family=2 entries=1 op=nft_register_rule pid=5936 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 222.725617] audit: type=1300 audit(1777421668.334:4879): arch=c000003e syscall=46 success=yes exit=636 a0=3 a1=7ffd222b9310 a2=0 a3=7ffd222b92fc items=0 ppid=5484 pid=5936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 222.733651] audit: type=1327 audit(1777421668.334:4879): proctitle=69707461626C6573002D770035002D410043494C49554D5F464F5257415244002D690063696C69756D5F6E6574002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20636C75737465722D3E616E79206F6E2063696C69756D5F6E657420666F72776172642061636365707420286E6F6465706F727429 [ 222.739094] audit: type=1325 audit(1777421668.341:4880): table=filter:210 family=2 entries=1 op=nft_register_rule pid=5937 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 222.742378] audit: type=1300 audit(1777421668.341:4880): arch=c000003e syscall=46 success=yes exit=628 a0=3 a1=7ffea3f6b840 a2=0 a3=7ffea3f6b82c items=0 ppid=5484 pid=5937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 222.748823] audit: type=1327 audit(1777421668.341:4880): proctitle=69707461626C6573002D770035002D410043494C49554D5F464F5257415244002D6F006C78632B002D6D00636F6D6D656E74002D2D636F6D6D656E740063696C69756D3A20616E792D3E636C7573746572206F6E206C78632B20666F727761726420616363657074002D6A00414343455054 [ 222.753949] audit: type=1325 audit(1777421668.343:4881): table=filter:211 family=2 entries=1 op=nft_register_rule pid=5938 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:14:30 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 This is ip-172-31-17-61 (Linux x86_64 6.12.81-flatcar) 00:14:30 SSH host key: SHA256:mUbMwfH/aGC2SAn+OZ8SoMugm6oCxXdoszKwQKlrXL4 (ED25519) SSH host key: SHA256:VsMSCzFcfOFblLlUb9tf7Ip4uwP5w11HufiD4yf83Yk (ECDSA) SSH host key: SHA256:i7WdkjsznAjCEWAZBwygjkPl3R7JGvU+NdQ/4NIPICg (RSA) eth0: 172.31.17.61 fe80::4eb:16ff:fe3a:dc47 ip-172-31-17-61 login: [ 228.102855] kauditd_printk_skb: 333 callbacks suppressed [ 228.102859] audit: type=1334 audit(1777421673.719:4999): prog-id=2250 op=LOAD [ 228.106945] audit: type=1300 audit(1777421673.719:4999): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fffb3303940 a2=74 a3=7fffb3303940 items=0 ppid=5484 pid=6131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 228.113400] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.114645] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 228.115922] audit: type=1327 audit(1777421673.719:4999): proctitle=74630066696C746572007265706C61636500646576006C786331313464646261383562386400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003832375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 228.115974] audit: backlog limit exceeded [ 228.117001] audit: type=1334 audit(1777421673.722:5000): prog-id=2250 op=UNLOAD [ 228.123939] audit: type=1300 audit(1777421673.722:5000): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fffb3303940 a2=74 a3=7fffb3303940 items=0 ppid=5484 pid=6131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 228.131965] audit: type=1327 audit(1777421673.722:5000): proctitle=74630066696C746572007265706C61636500646576006C786331313464646261383562386400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003832375F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 228.136752] audit: audit_backlog=65 > audit_backlog_limit=64