May 22 19:11:25.455741 kernel: Linux version 6.12.90-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 15.2.1_p20260214 p5) 15.2.1 20260214, GNU ld (Gentoo 2.46.0 p1) 2.46.0) #1 SMP PREEMPT_DYNAMIC Fri May 22 16:15:53 -00 2026 May 22 19:11:25.455801 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=52c0da84a3f2e3835ffa746c8f820a8956b2e6f69edb5b3b2e9f90b6eb0ea633 May 22 19:11:25.455817 kernel: BIOS-provided physical RAM map: May 22 19:11:25.455827 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable May 22 19:11:25.455839 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved May 22 19:11:25.455849 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000044fdfff] usable May 22 19:11:25.455861 kernel: BIOS-e820: [mem 0x00000000044fe000-0x00000000048fdfff] reserved May 22 19:11:25.455871 kernel: BIOS-e820: [mem 0x00000000048fe000-0x000000003ff1efff] usable May 22 19:11:25.455880 kernel: BIOS-e820: [mem 0x000000003ff1f000-0x000000003ffc8fff] reserved May 22 19:11:25.455887 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data May 22 19:11:25.455897 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS May 22 19:11:25.455905 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable May 22 19:11:25.455915 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable May 22 19:11:25.455927 kernel: printk: legacy bootconsole [earlyser0] enabled May 22 19:11:25.455940 kernel: NX (Execute Disable) protection: active May 22 19:11:25.455950 kernel: APIC: Static calls initialized May 22 19:11:25.455960 kernel: efi: EFI v2.7 by Microsoft May 22 19:11:25.455972 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff88000 SMBIOS 3.0=0x3ff86000 MEMATTR=0x3ea91018 RNG=0x3ffd2018 May 22 19:11:25.455983 kernel: random: crng init done May 22 19:11:25.455994 kernel: secureboot: Secure boot disabled May 22 19:11:25.456004 kernel: SMBIOS 3.1.0 present. May 22 19:11:25.456015 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 01/08/2026 May 22 19:11:25.456025 kernel: DMI: Memory slots populated: 2/2 May 22 19:11:25.456035 kernel: Hypervisor detected: Microsoft Hyper-V May 22 19:11:25.456043 kernel: Hyper-V: privilege flags low 0xae7f, high 0x3b8030, hints 0x9e4e24, misc 0xe0bed7b2 May 22 19:11:25.456050 kernel: Hyper-V: Nested features: 0x3e0101 May 22 19:11:25.456061 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 May 22 19:11:25.456071 kernel: Hyper-V: Using hypercall for remote TLB flush May 22 19:11:25.456084 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns May 22 19:11:25.456093 kernel: clocksource: hyperv_clocksource_msr: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns May 22 19:11:25.456103 kernel: tsc: Detected 2300.000 MHz processor May 22 19:11:25.456113 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved May 22 19:11:25.456128 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable May 22 19:11:25.456146 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x10000000000 May 22 19:11:25.456163 kernel: MTRR map: 4 entries (2 fixed + 2 variable; max 18), built from 8 variable MTRRs May 22 19:11:25.456177 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT May 22 19:11:25.456193 kernel: e820: update [mem 0x48000000-0xffffffff] usable ==> reserved May 22 19:11:25.456208 kernel: last_pfn = 0x40000 max_arch_pfn = 0x10000000000 May 22 19:11:25.456222 kernel: Using GB pages for direct mapping May 22 19:11:25.456237 kernel: ACPI: Early table checksum verification disabled May 22 19:11:25.456254 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) May 22 19:11:25.456274 kernel: ACPI: XSDT 0x000000003FFF90E8 00005C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) May 22 19:11:25.456290 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) May 22 19:11:25.456304 kernel: ACPI: DSDT 0x000000003FFD6000 01E22B (v02 MSFTVM DSDT01 00000001 INTL 20230628) May 22 19:11:25.456319 kernel: ACPI: FACS 0x000000003FFFE000 000040 May 22 19:11:25.456328 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) May 22 19:11:25.456341 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) May 22 19:11:25.456356 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) May 22 19:11:25.456371 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v05 HVLITE HVLITETB 00000000 MSHV 00000000) May 22 19:11:25.456390 kernel: ACPI: SRAT 0x000000003FFD4000 0000A0 (v03 HVLITE HVLITETB 00000000 MSHV 00000000) May 22 19:11:25.456400 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) May 22 19:11:25.456413 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] May 22 19:11:25.456427 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff422a] May 22 19:11:25.456442 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] May 22 19:11:25.456459 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] May 22 19:11:25.456469 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] May 22 19:11:25.456483 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] May 22 19:11:25.456496 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] May 22 19:11:25.456515 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd409f] May 22 19:11:25.456525 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] May 22 19:11:25.456540 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] May 22 19:11:25.456558 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] May 22 19:11:25.456575 kernel: NUMA: Node 0 [mem 0x00001000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00001000-0x2bfffffff] May 22 19:11:25.456585 kernel: NODE_DATA(0) allocated [mem 0x2bfff8dc0-0x2bfffffff] May 22 19:11:25.456595 kernel: Zone ranges: May 22 19:11:25.456608 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] May 22 19:11:25.456632 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] May 22 19:11:25.456644 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] May 22 19:11:25.456660 kernel: Device empty May 22 19:11:25.456670 kernel: Movable zone start for each node May 22 19:11:25.456678 kernel: Early memory node ranges May 22 19:11:25.456693 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] May 22 19:11:25.456701 kernel: node 0: [mem 0x0000000000100000-0x00000000044fdfff] May 22 19:11:25.456711 kernel: node 0: [mem 0x00000000048fe000-0x000000003ff1efff] May 22 19:11:25.456719 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] May 22 19:11:25.456727 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] May 22 19:11:25.456742 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] May 22 19:11:25.456750 kernel: On node 0, zone DMA: 1 pages in unavailable ranges May 22 19:11:25.456761 kernel: On node 0, zone DMA: 96 pages in unavailable ranges May 22 19:11:25.456775 kernel: On node 0, zone DMA32: 1024 pages in unavailable ranges May 22 19:11:25.456787 kernel: On node 0, zone DMA32: 224 pages in unavailable ranges May 22 19:11:25.456796 kernel: ACPI: PM-Timer IO Port: 0x408 May 22 19:11:25.456811 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) May 22 19:11:25.456826 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 May 22 19:11:25.456837 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) May 22 19:11:25.456849 kernel: ACPI: Using ACPI (MADT) for SMP configuration information May 22 19:11:25.456860 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 May 22 19:11:25.456869 kernel: TSC deadline timer available May 22 19:11:25.456878 kernel: CPU topo: Max. logical packages: 1 May 22 19:11:25.456890 kernel: CPU topo: Max. logical dies: 1 May 22 19:11:25.456903 kernel: CPU topo: Max. dies per package: 1 May 22 19:11:25.456911 kernel: CPU topo: Max. threads per core: 2 May 22 19:11:25.456919 kernel: CPU topo: Num. cores per package: 1 May 22 19:11:25.456933 kernel: CPU topo: Num. threads per package: 2 May 22 19:11:25.456941 kernel: CPU topo: Allowing 2 present CPUs plus 0 hotplug CPUs May 22 19:11:25.456953 kernel: [mem 0x40000000-0xffffffff] available for PCI devices May 22 19:11:25.456961 kernel: Booting paravirtualized kernel on Hyper-V May 22 19:11:25.456973 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns May 22 19:11:25.456991 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:1 May 22 19:11:25.457002 kernel: percpu: Embedded 60 pages/cpu s208408 r8192 d29160 u1048576 May 22 19:11:25.457013 kernel: pcpu-alloc: s208408 r8192 d29160 u1048576 alloc=1*2097152 May 22 19:11:25.457024 kernel: pcpu-alloc: [0] 0 1 May 22 19:11:25.457032 kernel: Hyper-V: PV spinlocks enabled May 22 19:11:25.457045 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) May 22 19:11:25.457057 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=52c0da84a3f2e3835ffa746c8f820a8956b2e6f69edb5b3b2e9f90b6eb0ea633 May 22 19:11:25.457067 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) May 22 19:11:25.457076 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) May 22 19:11:25.457090 kernel: Fallback order for Node 0: 0 May 22 19:11:25.457098 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2095807 May 22 19:11:25.457106 kernel: Policy zone: Normal May 22 19:11:25.457115 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off May 22 19:11:25.457126 kernel: software IO TLB: area num 2. May 22 19:11:25.457135 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 May 22 19:11:25.457144 kernel: ftrace: allocating 41958 entries in 164 pages May 22 19:11:25.457153 kernel: ftrace: allocated 164 pages with 3 groups May 22 19:11:25.457167 kernel: Dynamic Preempt: voluntary May 22 19:11:25.457175 kernel: rcu: Preemptible hierarchical RCU implementation. May 22 19:11:25.457185 kernel: rcu: RCU event tracing is enabled. May 22 19:11:25.457203 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. May 22 19:11:25.457221 kernel: Trampoline variant of Tasks RCU enabled. May 22 19:11:25.457235 kernel: Rude variant of Tasks RCU enabled. May 22 19:11:25.457244 kernel: Tracing variant of Tasks RCU enabled. May 22 19:11:25.457253 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. May 22 19:11:25.457262 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 May 22 19:11:25.457275 kernel: RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. May 22 19:11:25.457285 kernel: RCU Tasks Rude: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. May 22 19:11:25.457295 kernel: RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. May 22 19:11:25.457306 kernel: Using NULL legacy PIC May 22 19:11:25.457318 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 May 22 19:11:25.457327 kernel: rcu: srcu_init: Setting srcu_struct sizes based on contention. May 22 19:11:25.457339 kernel: Console: colour dummy device 80x25 May 22 19:11:25.457350 kernel: printk: legacy console [tty1] enabled May 22 19:11:25.457360 kernel: printk: legacy console [ttyS0] enabled May 22 19:11:25.457369 kernel: printk: legacy bootconsole [earlyser0] disabled May 22 19:11:25.457379 kernel: ACPI: Core revision 20240827 May 22 19:11:25.457391 kernel: Failed to register legacy timer interrupt May 22 19:11:25.457400 kernel: APIC: Switch to symmetric I/O mode setup May 22 19:11:25.457409 kernel: x2apic enabled May 22 19:11:25.457419 kernel: APIC: Switched APIC routing to: physical x2apic May 22 19:11:25.457428 kernel: Hyper-V: Host Build 10.0.26102.1310-1-0 May 22 19:11:25.457441 kernel: Hyper-V: enabling crash_kexec_post_notifiers May 22 19:11:25.457451 kernel: Hyper-V: Disabling IBT because of Hyper-V bug May 22 19:11:25.457461 kernel: Hyper-V: Using IPI hypercalls May 22 19:11:25.457474 kernel: APIC: send_IPI() replaced with hv_send_ipi() May 22 19:11:25.457483 kernel: APIC: send_IPI_mask() replaced with hv_send_ipi_mask() May 22 19:11:25.457494 kernel: APIC: send_IPI_mask_allbutself() replaced with hv_send_ipi_mask_allbutself() May 22 19:11:25.457503 kernel: APIC: send_IPI_allbutself() replaced with hv_send_ipi_allbutself() May 22 19:11:25.457513 kernel: APIC: send_IPI_all() replaced with hv_send_ipi_all() May 22 19:11:25.457522 kernel: APIC: send_IPI_self() replaced with hv_send_ipi_self() May 22 19:11:25.457532 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns May 22 19:11:25.457542 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 4600.00 BogoMIPS (lpj=2300000) May 22 19:11:25.457551 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated May 22 19:11:25.457563 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 May 22 19:11:25.457572 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 May 22 19:11:25.457580 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization May 22 19:11:25.457589 kernel: Spectre V2 : Mitigation: Retpolines May 22 19:11:25.457597 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT May 22 19:11:25.457607 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! May 22 19:11:25.457634 kernel: RETBleed: Vulnerable May 22 19:11:25.457644 kernel: Speculative Store Bypass: Vulnerable May 22 19:11:25.457652 kernel: active return thunk: its_return_thunk May 22 19:11:25.457660 kernel: ITS: Mitigation: Aligned branch/return thunks May 22 19:11:25.457671 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' May 22 19:11:25.457680 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' May 22 19:11:25.457689 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' May 22 19:11:25.457698 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' May 22 19:11:25.457707 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' May 22 19:11:25.457717 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' May 22 19:11:25.457728 kernel: x86/fpu: Supporting XSAVE feature 0x800: 'Control-flow User registers' May 22 19:11:25.457737 kernel: x86/fpu: Supporting XSAVE feature 0x20000: 'AMX Tile config' May 22 19:11:25.457745 kernel: x86/fpu: Supporting XSAVE feature 0x40000: 'AMX Tile data' May 22 19:11:25.457754 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 May 22 19:11:25.457765 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 May 22 19:11:25.457774 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 May 22 19:11:25.457783 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 May 22 19:11:25.457792 kernel: x86/fpu: xstate_offset[11]: 2432, xstate_sizes[11]: 16 May 22 19:11:25.457801 kernel: x86/fpu: xstate_offset[17]: 2496, xstate_sizes[17]: 64 May 22 19:11:25.457810 kernel: x86/fpu: xstate_offset[18]: 2560, xstate_sizes[18]: 8192 May 22 19:11:25.457819 kernel: x86/fpu: Enabled xstate features 0x608e7, context size is 10752 bytes, using 'compacted' format. May 22 19:11:25.457827 kernel: Freeing SMP alternatives memory: 36K May 22 19:11:25.457836 kernel: pid_max: default: 32768 minimum: 301 May 22 19:11:25.457845 kernel: LSM: initializing lsm=lockdown,capability,landlock,selinux,ima May 22 19:11:25.457854 kernel: landlock: Up and running. May 22 19:11:25.457866 kernel: SELinux: Initializing. May 22 19:11:25.457875 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) May 22 19:11:25.457883 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) May 22 19:11:25.457892 kernel: smpboot: CPU0: Intel INTEL(R) XEON(R) PLATINUM 8573C (family: 0x6, model: 0xcf, stepping: 0x2) May 22 19:11:25.457901 kernel: Performance Events: unsupported p6 CPU model 207 no PMU driver, software events only. May 22 19:11:25.457910 kernel: signal: max sigframe size: 11952 May 22 19:11:25.457920 kernel: rcu: Hierarchical SRCU implementation. May 22 19:11:25.457930 kernel: rcu: Max phase no-delay instances is 400. May 22 19:11:25.457941 kernel: Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level May 22 19:11:25.457951 kernel: NMI watchdog: Perf NMI watchdog permanently disabled May 22 19:11:25.457960 kernel: smp: Bringing up secondary CPUs ... May 22 19:11:25.457969 kernel: smpboot: x86: Booting SMP configuration: May 22 19:11:25.457978 kernel: .... node #0, CPUs: #1 May 22 19:11:25.457987 kernel: smp: Brought up 1 node, 2 CPUs May 22 19:11:25.457996 kernel: smpboot: Total of 2 processors activated (9200.00 BogoMIPS) May 22 19:11:25.458006 kernel: Memory: 8058736K/8383228K available (14336K kernel code, 2475K rwdata, 32160K rodata, 15988K init, 2068K bss, 318232K reserved, 0K cma-reserved) May 22 19:11:25.458018 kernel: devtmpfs: initialized May 22 19:11:25.458031 kernel: x86/mm: Memory block size: 128MB May 22 19:11:25.458040 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) May 22 19:11:25.458052 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns May 22 19:11:25.458061 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) May 22 19:11:25.458070 kernel: pinctrl core: initialized pinctrl subsystem May 22 19:11:25.458080 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family May 22 19:11:25.458092 kernel: audit: initializing netlink subsys (disabled) May 22 19:11:25.458104 kernel: audit: type=2000 audit(1779477078.078:1): state=initialized audit_enabled=0 res=1 May 22 19:11:25.458114 kernel: thermal_sys: Registered thermal governor 'step_wise' May 22 19:11:25.458123 kernel: thermal_sys: Registered thermal governor 'user_space' May 22 19:11:25.458132 kernel: cpuidle: using governor menu May 22 19:11:25.458141 kernel: efi: Freeing EFI boot services memory: 34628K May 22 19:11:25.458150 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 May 22 19:11:25.458162 kernel: dca service started, version 1.12.1 May 22 19:11:25.458172 kernel: e820: reserve RAM buffer [mem 0x044fe000-0x07ffffff] May 22 19:11:25.458182 kernel: e820: reserve RAM buffer [mem 0x3ff1f000-0x3fffffff] May 22 19:11:25.458191 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. May 22 19:11:25.458200 kernel: HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages May 22 19:11:25.458209 kernel: HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page May 22 19:11:25.458218 kernel: HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages May 22 19:11:25.458229 kernel: HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page May 22 19:11:25.458239 kernel: ACPI: Added _OSI(Module Device) May 22 19:11:25.458249 kernel: ACPI: Added _OSI(Processor Device) May 22 19:11:25.458259 kernel: ACPI: Added _OSI(Processor Aggregator Device) May 22 19:11:25.458269 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded May 22 19:11:25.458277 kernel: ACPI: Interpreter enabled May 22 19:11:25.458286 kernel: ACPI: PM: (supports S0 S5) May 22 19:11:25.458300 kernel: ACPI: Using IOAPIC for interrupt routing May 22 19:11:25.458310 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug May 22 19:11:25.458320 kernel: PCI: Ignoring E820 reservations for host bridge windows May 22 19:11:25.458329 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F May 22 19:11:25.458339 kernel: iommu: Default domain type: Translated May 22 19:11:25.458348 kernel: iommu: DMA domain TLB invalidation policy: lazy mode May 22 19:11:25.458357 kernel: efivars: Registered efivars operations May 22 19:11:25.458368 kernel: PCI: Using ACPI for IRQ routing May 22 19:11:25.458377 kernel: PCI: System does not support PCI May 22 19:11:25.458387 kernel: vgaarb: loaded May 22 19:11:25.458396 kernel: clocksource: Switched to clocksource tsc-early May 22 19:11:25.458406 kernel: VFS: Disk quotas dquot_6.6.0 May 22 19:11:25.458416 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) May 22 19:11:25.458425 kernel: pnp: PnP ACPI init May 22 19:11:25.458436 kernel: pnp: PnP ACPI: found 3 devices May 22 19:11:25.458445 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns May 22 19:11:25.458454 kernel: NET: Registered PF_INET protocol family May 22 19:11:25.458464 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) May 22 19:11:25.458473 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) May 22 19:11:25.458483 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) May 22 19:11:25.458493 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) May 22 19:11:25.458504 kernel: TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear) May 22 19:11:25.458513 kernel: TCP: Hash tables configured (established 65536 bind 65536) May 22 19:11:25.458522 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) May 22 19:11:25.458531 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) May 22 19:11:25.458540 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family May 22 19:11:25.458550 kernel: NET: Registered PF_XDP protocol family May 22 19:11:25.458559 kernel: PCI: CLS 0 bytes, default 64 May 22 19:11:25.458571 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) May 22 19:11:25.458581 kernel: software IO TLB: mapped [mem 0x000000003a9aa000-0x000000003e9aa000] (64MB) May 22 19:11:25.458590 kernel: RAPL PMU: API unit is 2^-32 Joules, 1 fixed counters, 10737418240 ms ovfl timer May 22 19:11:25.458599 kernel: RAPL PMU: hw unit of domain psys 2^-0 Joules May 22 19:11:25.458608 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns May 22 19:11:25.458617 kernel: clocksource: Switched to clocksource tsc May 22 19:11:25.458882 kernel: Initialise system trusted keyrings May 22 19:11:25.458895 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 May 22 19:11:25.458904 kernel: Key type asymmetric registered May 22 19:11:25.458913 kernel: Asymmetric key parser 'x509' registered May 22 19:11:25.458922 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) May 22 19:11:25.458954 kernel: io scheduler mq-deadline registered May 22 19:11:25.458966 kernel: io scheduler kyber registered May 22 19:11:25.458976 kernel: io scheduler bfq registered May 22 19:11:25.458986 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 May 22 19:11:25.459000 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled May 22 19:11:25.459009 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A May 22 19:11:25.459018 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A May 22 19:11:25.459028 kernel: serial8250: ttyS2 at I/O 0x3e8 (irq = 4, base_baud = 115200) is a 16550A May 22 19:11:25.459037 kernel: ACPI: bus type drm_connector registered May 22 19:11:25.459046 kernel: i8042: PNP: No PS/2 controller found. May 22 19:11:25.459535 kernel: rtc_cmos 00:02: registered as rtc0 May 22 19:11:25.459712 kernel: rtc_cmos 00:02: setting system clock to 2026-05-22T19:11:20 UTC (1779477080) May 22 19:11:25.459843 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram May 22 19:11:25.459856 kernel: intel_pstate: Intel P-state driver initializing May 22 19:11:25.459866 kernel: efifb: probing for efifb May 22 19:11:25.459876 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k May 22 19:11:25.459888 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 May 22 19:11:25.459898 kernel: efifb: scrolling: redraw May 22 19:11:25.459907 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 May 22 19:11:25.459917 kernel: Console: switching to colour frame buffer device 128x48 May 22 19:11:25.459927 kernel: fb0: EFI VGA frame buffer device May 22 19:11:25.459937 kernel: pstore: Using crash dump compression: deflate May 22 19:11:25.459947 kernel: pstore: Registered efi_pstore as persistent store backend May 22 19:11:25.459956 kernel: NET: Registered PF_INET6 protocol family May 22 19:11:25.459968 kernel: Segment Routing with IPv6 May 22 19:11:25.459977 kernel: In-situ OAM (IOAM) with IPv6 May 22 19:11:25.459987 kernel: NET: Registered PF_PACKET protocol family May 22 19:11:25.459997 kernel: Key type dns_resolver registered May 22 19:11:25.460007 kernel: IPI shorthand broadcast: enabled May 22 19:11:25.460017 kernel: sched_clock: Marking stable (2083006571, 94197838)->(2499210620, -322006211) May 22 19:11:25.460027 kernel: registered taskstats version 1 May 22 19:11:25.460038 kernel: Loading compiled-in X.509 certificates May 22 19:11:25.460047 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 6.12.90-flatcar: 84c66e33e90bd2c3a833720e1054371cb72bb7d1' May 22 19:11:25.460057 kernel: Demotion targets for Node 0: null May 22 19:11:25.460066 kernel: Key type .fscrypt registered May 22 19:11:25.460076 kernel: Key type fscrypt-provisioning registered May 22 19:11:25.460086 kernel: ima: No TPM chip found, activating TPM-bypass! May 22 19:11:25.460097 kernel: ima: Allocated hash algorithm: sha1 May 22 19:11:25.460109 kernel: ima: No architecture policies found May 22 19:11:25.460118 kernel: clk: Disabling unused clocks May 22 19:11:25.460127 kernel: Freeing unused kernel image (initmem) memory: 15988K May 22 19:11:25.460136 kernel: Write protecting the kernel read-only data: 47104k May 22 19:11:25.460146 kernel: Freeing unused kernel image (rodata/data gap) memory: 608K May 22 19:11:25.460155 kernel: Run /init as init process May 22 19:11:25.460165 kernel: with arguments: May 22 19:11:25.460177 kernel: /init May 22 19:11:25.460187 kernel: with environment: May 22 19:11:25.460196 kernel: HOME=/ May 22 19:11:25.460205 kernel: TERM=linux May 22 19:11:25.460214 kernel: hv_vmbus: Vmbus version:5.3 May 22 19:11:25.460223 kernel: pps_core: LinuxPPS API ver. 1 registered May 22 19:11:25.460233 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti May 22 19:11:25.460243 kernel: PTP clock support registered May 22 19:11:25.460255 kernel: SCSI subsystem initialized May 22 19:11:25.460265 kernel: hv_utils: Registering HyperV Utility Driver May 22 19:11:25.460274 kernel: hv_vmbus: registering driver hv_utils May 22 19:11:25.460284 kernel: hv_utils: Shutdown IC version 3.2 May 22 19:11:25.460293 kernel: hv_utils: Heartbeat IC version 3.0 May 22 19:11:25.460303 kernel: hv_utils: TimeSync IC version 4.0 May 22 19:11:25.460312 kernel: hv_vmbus: registering driver hv_pci May 22 19:11:25.460491 kernel: hv_pci 7ad35d50-c05b-47ab-b3a0-56a9a845852b: PCI VMBus probing: Using version 0x10004 May 22 19:11:25.462686 kernel: hv_pci 7ad35d50-c05b-47ab-b3a0-56a9a845852b: PCI host bridge to bus c05b:00 May 22 19:11:25.462912 kernel: pci_bus c05b:00: root bus resource [mem 0xfc0000000-0xfc007ffff window] May 22 19:11:25.463071 kernel: pci_bus c05b:00: No busn resource found for root bus, will use [bus 00-ff] May 22 19:11:25.463262 kernel: pci c05b:00:00.0: [1414:00a9] type 00 class 0x010802 PCIe Endpoint May 22 19:11:25.463466 kernel: pci c05b:00:00.0: BAR 0 [mem 0xfc0000000-0xfc007ffff 64bit] May 22 19:11:25.463673 kernel: pci_bus c05b:00: busn_res: [bus 00-ff] end is updated to 00 May 22 19:11:25.463846 kernel: pci c05b:00:00.0: BAR 0 [mem 0xfc0000000-0xfc007ffff 64bit]: assigned May 22 19:11:25.463860 kernel: hv_vmbus: registering driver hv_storvsc May 22 19:11:25.464053 kernel: scsi host0: storvsc_host_t May 22 19:11:25.464262 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 5 May 22 19:11:25.464275 kernel: hid: raw HID events driver (C) Jiri Kosina May 22 19:11:25.464286 kernel: hv_vmbus: registering driver hid_hyperv May 22 19:11:25.464296 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 May 22 19:11:25.464436 kernel: hid-hyperv 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on May 22 19:11:25.464449 kernel: hv_vmbus: registering driver hyperv_keyboard May 22 19:11:25.464461 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 May 22 19:11:25.464612 kernel: nvme nvme0: pci function c05b:00:00.0 May 22 19:11:25.464793 kernel: nvme c05b:00:00.0: enabling device (0000 -> 0002) May 22 19:11:25.464928 kernel: nvme nvme0: 2/0/0 default/read/poll queues May 22 19:11:25.464940 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 May 22 19:11:25.465100 kernel: sr 0:0:0:2: [sr0] scsi-1 drive May 22 19:11:25.465114 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 May 22 19:11:25.465272 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 May 22 19:11:25.465283 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. May 22 19:11:25.465294 kernel: device-mapper: uevent: version 1.0.3 May 22 19:11:25.465321 kernel: device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev May 22 19:11:25.465333 kernel: device-mapper: verity: sha256 using shash "sha256-generic" May 22 19:11:25.465344 kernel: raid6: avx512x4 gen() 44315 MB/s May 22 19:11:25.465354 kernel: raid6: avx512x2 gen() 42770 MB/s May 22 19:11:25.465363 kernel: raid6: avx512x1 gen() 25015 MB/s May 22 19:11:25.465373 kernel: raid6: avx2x4 gen() 34161 MB/s May 22 19:11:25.465383 kernel: raid6: avx2x2 gen() 36459 MB/s May 22 19:11:25.465393 kernel: raid6: avx2x1 gen() 29633 MB/s May 22 19:11:25.465403 kernel: raid6: using algorithm avx512x4 gen() 44315 MB/s May 22 19:11:25.465414 kernel: raid6: .... xor() 7813 MB/s, rmw enabled May 22 19:11:25.465424 kernel: raid6: using avx512x2 recovery algorithm May 22 19:11:25.465434 kernel: xor: automatically using best checksumming function avx May 22 19:11:25.465444 kernel: Btrfs loaded, zoned=no, fsverity=no May 22 19:11:25.465453 kernel: BTRFS: device fsid 994ff57d-783d-4a21-97d1-907bbd4728b4 devid 1 transid 39 /dev/mapper/usr (254:0) scanned by mount (864) May 22 19:11:25.465464 kernel: BTRFS info (device dm-0): first mount of filesystem 994ff57d-783d-4a21-97d1-907bbd4728b4 May 22 19:11:25.465474 kernel: BTRFS info (device dm-0): using crc32c (crc32c-intel) checksum algorithm May 22 19:11:25.465485 kernel: BTRFS info (device dm-0 state E): enabling ssd optimizations May 22 19:11:25.465497 kernel: BTRFS info (device dm-0 state E): disabling log replay at mount time May 22 19:11:25.465507 kernel: BTRFS info (device dm-0 state E): enabling free space tree May 22 19:11:25.465516 kernel: loop: module loaded May 22 19:11:25.465525 kernel: loop0: detected capacity change from 0 to 107200 May 22 19:11:25.465535 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher May 22 19:11:25.465548 systemd[1]: /etc/systemd/system.conf.d/nocgroup.conf:2: Support for option DefaultCPUAccounting= has been removed and it is ignored May 22 19:11:25.465563 systemd[1]: /etc/systemd/system.conf.d/nocgroup.conf:5: Support for option DefaultBlockIOAccounting= has been removed and it is ignored May 22 19:11:25.465574 systemd[1]: Successfully made /usr/ read-only. May 22 19:11:25.465585 systemd[1]: systemd 258.3 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE) May 22 19:11:25.465595 systemd[1]: Detected virtualization microsoft. May 22 19:11:25.465604 systemd[1]: Detected architecture x86-64. May 22 19:11:25.465615 systemd[1]: Running in initrd. May 22 19:11:25.465638 systemd[1]: Initializing machine ID from random generator. May 22 19:11:25.465649 systemd[1]: No hostname configured, using default hostname. May 22 19:11:25.465658 systemd[1]: Hostname set to . May 22 19:11:25.465668 systemd[1]: Queued start job for default target initrd.target. May 22 19:11:25.465682 systemd[1]: Unnecessary job was removed for dev-mapper-usr.device - /dev/mapper/usr. May 22 19:11:25.465692 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. May 22 19:11:25.465703 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. May 22 19:11:25.465715 systemd[1]: Expecting device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - /dev/disk/by-label/EFI-SYSTEM... May 22 19:11:25.465726 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... May 22 19:11:25.465737 systemd[1]: Expecting device dev-disk-by\x2dlabel-ROOT.device - /dev/disk/by-label/ROOT... May 22 19:11:25.465753 systemd[1]: Expecting device dev-disk-by\x2dpartlabel-USR\x2dA.device - /dev/disk/by-partlabel/USR-A... May 22 19:11:25.465763 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). May 22 19:11:25.465774 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. May 22 19:11:25.465784 systemd[1]: Reached target initrd-usr-fs.target - Initrd /usr File System. May 22 19:11:25.465795 systemd[1]: Reached target paths.target - Path Units. May 22 19:11:25.465806 systemd[1]: Reached target slices.target - Slice Units. May 22 19:11:25.465818 systemd[1]: Reached target swap.target - Swaps. May 22 19:11:25.465828 systemd[1]: Reached target timers.target - Timer Units. May 22 19:11:25.465838 systemd[1]: Listening on iscsid.socket - Open-iSCSI iscsid Socket. May 22 19:11:25.465848 systemd[1]: Listening on iscsiuio.socket - Open-iSCSI iscsiuio Socket. May 22 19:11:25.465858 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. May 22 19:11:25.465869 systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log). May 22 19:11:25.465880 systemd[1]: Listening on systemd-journald.socket - Journal Sockets. May 22 19:11:25.465892 systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. May 22 19:11:25.465903 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. May 22 19:11:25.465913 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. May 22 19:11:25.465923 systemd[1]: Reached target sockets.target - Socket Units. May 22 19:11:25.465934 systemd[1]: afterburn-network-kargs.service - Afterburn Initrd Setup Network Kernel Arguments was skipped because no trigger condition checks were met. May 22 19:11:25.465945 systemd[1]: Starting ignition-setup-pre.service - Ignition env setup... May 22 19:11:25.465956 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... May 22 19:11:25.465968 systemd[1]: Finished network-cleanup.service - Network Cleanup. May 22 19:11:25.465980 systemd[1]: systemd-battery-check.service - Check battery level during early boot was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/class/power_supply). May 22 19:11:25.465990 systemd[1]: Starting systemd-fsck-usr.service... May 22 19:11:25.466000 systemd[1]: Starting systemd-journald.service - Journal Service... May 22 19:11:25.466012 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... May 22 19:11:25.466023 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... May 22 19:11:25.466058 systemd-journald[999]: Collecting audit messages is enabled. May 22 19:11:25.466085 systemd[1]: Finished ignition-setup-pre.service - Ignition env setup. May 22 19:11:25.466096 kernel: audit: type=1130 audit(1779477085.457:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.466107 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. May 22 19:11:25.466119 systemd-journald[999]: Journal started May 22 19:11:25.466143 systemd-journald[999]: Runtime Journal (/run/log/journal/c2a85c5440574baf8a39dc1df6660b01) is 8M, max 158.5M, 150.5M free. May 22 19:11:25.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.471674 kernel: audit: type=1130 audit(1779477085.467:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.471704 systemd[1]: Started systemd-journald.service - Journal Service. May 22 19:11:25.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.475740 systemd[1]: Finished systemd-fsck-usr.service. May 22 19:11:25.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.481744 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... May 22 19:11:25.490730 kernel: audit: type=1130 audit(1779477085.472:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.490754 kernel: audit: type=1130 audit(1779477085.477:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.490765 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... May 22 19:11:25.633034 systemd-tmpfiles[1010]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. May 22 19:11:25.638969 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. May 22 19:11:25.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.645664 kernel: audit: type=1130 audit(1779477085.637:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.647198 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... May 22 19:11:25.647605 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. May 22 19:11:25.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.651641 kernel: audit: type=1130 audit(1779477085.646:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.671651 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. May 22 19:11:25.677911 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. May 22 19:11:25.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.681641 kernel: audit: type=1130 audit(1779477085.676:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.684500 systemd-modules-load[1002]: Inserted module 'br_netfilter' May 22 19:11:25.685273 kernel: Bridge firewalling registered May 22 19:11:25.685494 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. May 22 19:11:25.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.689684 kernel: audit: type=1130 audit(1779477085.683:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.691866 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... May 22 19:11:25.715324 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. May 22 19:11:25.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.726048 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. May 22 19:11:25.728166 kernel: audit: type=1130 audit(1779477085.720:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.730661 systemd[1]: Starting dracut-cmdline-ask.service - dracut ask for additional cmdline parameters... May 22 19:11:25.734953 kernel: audit: type=1130 audit(1779477085.727:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.736983 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... May 22 19:11:25.734000 audit: BPF prog-id=5 op=LOAD May 22 19:11:25.764297 systemd[1]: Finished dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. May 22 19:11:25.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:25.772316 systemd[1]: Starting dracut-cmdline.service - dracut cmdline hook... May 22 19:11:25.843372 dracut-cmdline[1039]: dracut-109 May 22 19:11:25.846448 dracut-cmdline[1039]: Using kernel command line parameters: SYSTEMD_SULOGIN_FORCE=1 rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=52c0da84a3f2e3835ffa746c8f820a8956b2e6f69edb5b3b2e9f90b6eb0ea633 May 22 19:11:25.863254 systemd-resolved[1027]: Positive Trust Anchors: May 22 19:11:25.863267 systemd-resolved[1027]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d May 22 19:11:25.863270 systemd-resolved[1027]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 May 22 19:11:25.863307 systemd-resolved[1027]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test May 22 19:11:25.952771 systemd-resolved[1027]: Defaulting to hostname 'linux'. May 22 19:11:26.005019 systemd[1]: Started systemd-resolved.service - Network Name Resolution. May 22 19:11:26.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.008844 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. May 22 19:11:26.094643 kernel: Loading iSCSI transport class v2.0-870. May 22 19:11:26.219654 kernel: iscsi: registered transport (tcp) May 22 19:11:26.268681 kernel: iscsi: registered transport (qla4xxx) May 22 19:11:26.268741 kernel: QLogic iSCSI HBA Driver May 22 19:11:26.332868 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... May 22 19:11:26.345965 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. May 22 19:11:26.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.351866 systemd[1]: Reached target network-pre.target - Preparation for Network. May 22 19:11:26.387462 systemd[1]: Finished dracut-cmdline.service - dracut cmdline hook. May 22 19:11:26.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.390232 systemd[1]: Starting dracut-pre-udev.service - dracut pre-udev hook... May 22 19:11:26.394816 systemd[1]: Starting parse-ip-for-networkd.service - Write systemd-networkd units from cmdline... May 22 19:11:26.421662 systemd[1]: Finished dracut-pre-udev.service - dracut pre-udev hook. May 22 19:11:26.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.425000 audit: BPF prog-id=6 op=LOAD May 22 19:11:26.425000 audit: BPF prog-id=7 op=LOAD May 22 19:11:26.428767 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... May 22 19:11:26.474305 systemd-udevd[1278]: Using default interface naming scheme 'v258'. May 22 19:11:26.482063 systemd[1]: Finished parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. May 22 19:11:26.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.604352 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. May 22 19:11:26.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.607614 systemd[1]: Starting dracut-pre-trigger.service - dracut pre-trigger hook... May 22 19:11:26.617000 audit: BPF prog-id=8 op=LOAD May 22 19:11:26.622772 systemd[1]: Starting systemd-networkd.service - Network Configuration... May 22 19:11:26.642644 dracut-pre-trigger[1367]: rd.md=0: removing MD RAID activation May 22 19:11:26.669062 systemd-networkd[1385]: lo: Link UP May 22 19:11:26.670802 systemd-networkd[1385]: lo: Gained carrier May 22 19:11:26.671491 systemd[1]: Started systemd-networkd.service - Network Configuration. May 22 19:11:26.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.674920 systemd[1]: Finished dracut-pre-trigger.service - dracut pre-trigger hook. May 22 19:11:26.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.679290 systemd[1]: Reached target network.target - Network. May 22 19:11:26.682137 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... May 22 19:11:26.749677 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. May 22 19:11:26.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.755267 systemd[1]: Starting dracut-initqueue.service - dracut initqueue hook... May 22 19:11:26.842658 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#61 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 May 22 19:11:26.876255 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. May 22 19:11:26.876879 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. May 22 19:11:26.886066 systemd[1]: Stopping systemd-vconsole-setup.service - Virtual Console Setup... May 22 19:11:26.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.891687 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... May 22 19:11:26.892669 kernel: hv_vmbus: registering driver hv_netvsc May 22 19:11:26.900708 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. May 22 19:11:26.902818 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. May 22 19:11:26.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.916636 kernel: hv_netvsc f8615163-0000-1000-2000-7ced8db7dc71 (unnamed net_device) (uninitialized): VF slot 1 added May 22 19:11:26.916896 kernel: cryptd: max_cpu_qlen set to 1000 May 22 19:11:26.918743 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... May 22 19:11:26.972426 systemd-networkd[1385]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network May 22 19:11:26.972434 systemd-networkd[1385]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. May 22 19:11:26.975821 systemd-networkd[1385]: eth0: Link UP May 22 19:11:26.977364 systemd-networkd[1385]: eth0: Gained carrier May 22 19:11:26.977648 systemd-networkd[1385]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network May 22 19:11:26.990107 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. May 22 19:11:26.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:26.996376 kernel: AES CTR mode by8 optimization enabled May 22 19:11:27.000706 systemd-networkd[1385]: eth0: DHCPv4 address 10.0.0.4/24, gateway 10.0.0.1 acquired from 168.63.129.16 May 22 19:11:27.038746 kernel: nvme nvme0: using unchecked data buffer May 22 19:11:27.150287 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device - MSFT NVMe Accelerator v1.0 USR-A. May 22 19:11:27.154305 systemd[1]: Starting disk-uuid.service - Generate new UUID for disk GPT if necessary... May 22 19:11:27.212038 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - MSFT NVMe Accelerator v1.0 OEM. May 22 19:11:27.235755 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device - MSFT NVMe Accelerator v1.0 ROOT. May 22 19:11:27.255592 systemd[1]: Mounting oem.mount - /oem... May 22 19:11:27.290820 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - MSFT NVMe Accelerator v1.0 EFI-SYSTEM. May 22 19:11:27.325650 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 (259:5) scanned by mount (1571) May 22 19:11:27.332639 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem e33db1dc-bf4d-468d-946e-8f4b5a090363 May 22 19:11:27.336640 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm May 22 19:11:27.411211 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations May 22 19:11:27.411258 kernel: BTRFS info (device nvme0n1p6): turning on async discard May 22 19:11:27.413109 kernel: BTRFS info (device nvme0n1p6): enabling free space tree May 22 19:11:27.414374 systemd[1]: Mounted oem.mount - /oem. May 22 19:11:27.417764 systemd[1]: Starting ignition-fetch-offline.service - Ignition (fetch-offline)... May 22 19:11:27.434287 systemd[1]: Finished dracut-initqueue.service - dracut initqueue hook. May 22 19:11:27.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:27.438302 systemd[1]: Reached target remote-fs-pre.target - Preparation for Remote File Systems. May 22 19:11:27.439592 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. May 22 19:11:27.439753 systemd[1]: Reached target remote-fs.target - Remote File Systems. May 22 19:11:27.465982 systemd[1]: Starting dracut-pre-mount.service - dracut pre-mount hook... May 22 19:11:27.498362 systemd[1]: Finished dracut-pre-mount.service - dracut pre-mount hook. May 22 19:11:27.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:27.936651 kernel: hv_pci 00000001-7870-47b5-b203-907d12ca697e: PCI VMBus probing: Using version 0x10004 May 22 19:11:27.940896 kernel: hv_pci 00000001-7870-47b5-b203-907d12ca697e: PCI host bridge to bus 7870:00 May 22 19:11:27.941130 kernel: pci_bus 7870:00: root bus resource [mem 0xfc2000000-0xfc4007fff window] May 22 19:11:27.942442 kernel: pci_bus 7870:00: No busn resource found for root bus, will use [bus 00-ff] May 22 19:11:27.946712 kernel: pci 7870:00:00.0: [1414:00ba] type 00 class 0x020000 PCIe Endpoint May 22 19:11:27.950663 kernel: pci 7870:00:00.0: BAR 0 [mem 0xfc2000000-0xfc3ffffff 64bit pref] May 22 19:11:27.954669 kernel: pci 7870:00:00.0: BAR 4 [mem 0xfc4000000-0xfc4007fff 64bit pref] May 22 19:11:27.956675 kernel: pci 7870:00:00.0: enabling Extended Tags May 22 19:11:27.969572 kernel: pci_bus 7870:00: busn_res: [bus 00-ff] end is updated to 00 May 22 19:11:27.969815 kernel: pci 7870:00:00.0: BAR 0 [mem 0xfc2000000-0xfc3ffffff 64bit pref]: assigned May 22 19:11:27.973748 kernel: pci 7870:00:00.0: BAR 4 [mem 0xfc4000000-0xfc4007fff 64bit pref]: assigned May 22 19:11:27.997977 kernel: mana 7870:00:00.0: enabling device (0000 -> 0002) May 22 19:11:28.006634 kernel: mana 7870:00:00.0: Microsoft Azure Network Adapter protocol version: 0.1.1 May 22 19:11:28.010392 kernel: hv_netvsc f8615163-0000-1000-2000-7ced8db7dc71 eth0: VF registering: eth1 May 22 19:11:28.010631 kernel: mana 7870:00:00.0 eth1: joined to eth0 May 22 19:11:28.015635 kernel: mana 7870:00:00.0 enP30832s1: renamed from eth1 May 22 19:11:28.015900 systemd-networkd[1385]: eth1: Interface name change detected, renamed to enP30832s1. May 22 19:11:28.119641 kernel: mana 7870:00:00.0 enP30832s1: Configured vPort 0 PD 18 DB 16 May 22 19:11:28.124844 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 May 22 19:11:28.125176 kernel: hv_netvsc f8615163-0000-1000-2000-7ced8db7dc71 eth0: Data path switched to VF: enP30832s1 May 22 19:11:28.125525 systemd-networkd[1385]: enP30832s1: Link UP May 22 19:11:28.125736 systemd-networkd[1385]: enP30832s1: Gained carrier May 22 19:11:28.491102 disk-uuid[1564]: Warning: The kernel is still using the old partition table. May 22 19:11:28.491102 disk-uuid[1564]: The new table will be used at the next reboot or after you May 22 19:11:28.491102 disk-uuid[1564]: run partprobe(8) or kpartx(8) May 22 19:11:28.491102 disk-uuid[1564]: The operation has completed successfully. May 22 19:11:28.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:28.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:28.496994 systemd[1]: disk-uuid.service: Deactivated successfully. May 22 19:11:28.497100 systemd[1]: Finished disk-uuid.service - Generate new UUID for disk GPT if necessary. May 22 19:11:28.743228 ignition[1602]: Ignition 2.24.0 May 22 19:11:28.743246 ignition[1602]: Stage: fetch-offline May 22 19:11:28.746142 ignition[1602]: no config dir at "/usr/lib/ignition/base.d" May 22 19:11:28.746152 ignition[1602]: no config dir at "/usr/lib/ignition/base.platform.d/azure" May 22 19:11:28.749060 systemd[1]: Finished ignition-fetch-offline.service - Ignition (fetch-offline). May 22 19:11:28.746235 ignition[1602]: parsed url from cmdline: "" May 22 19:11:28.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:28.746237 ignition[1602]: no config URL provided May 22 19:11:28.746304 ignition[1602]: reading system config file "/usr/lib/ignition/user.ign" May 22 19:11:28.755767 systemd[1]: Starting ignition-fetch.service - Ignition (fetch)... May 22 19:11:28.746324 ignition[1602]: no config at "/usr/lib/ignition/user.ign" May 22 19:11:28.746328 ignition[1602]: failed to fetch config: resource requires networking May 22 19:11:28.746487 ignition[1602]: Ignition finished successfully May 22 19:11:28.774688 ignition[1633]: Ignition 2.24.0 May 22 19:11:28.774700 ignition[1633]: Stage: fetch May 22 19:11:28.774931 ignition[1633]: no config dir at "/usr/lib/ignition/base.d" May 22 19:11:28.774938 ignition[1633]: no config dir at "/usr/lib/ignition/base.platform.d/azure" May 22 19:11:28.775023 ignition[1633]: parsed url from cmdline: "" May 22 19:11:28.775026 ignition[1633]: no config URL provided May 22 19:11:28.775032 ignition[1633]: reading system config file "/usr/lib/ignition/user.ign" May 22 19:11:28.775040 ignition[1633]: no config at "/usr/lib/ignition/user.ign" May 22 19:11:28.775060 ignition[1633]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 May 22 19:11:28.838672 ignition[1633]: GET result: OK May 22 19:11:28.838729 ignition[1633]: config has been read from IMDS userdata May 22 19:11:28.838739 ignition[1633]: parsing config with SHA512: 616fd1f899d9680506c850a070a8c7e32889f83b0417ede10db203e5fa642b7218718c0acea55d0f26c4c3520ba6cb87103227d3fbace1787f0028fd2e87c7c8 May 22 19:11:28.844823 unknown[1633]: fetched base config from "system" May 22 19:11:28.844832 unknown[1633]: fetched base config from "system" May 22 19:11:28.845000 ignition[1633]: fetch: fetch complete May 22 19:11:28.844838 unknown[1633]: fetched user config from "azure" May 22 19:11:28.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:28.845004 ignition[1633]: fetch: fetch passed May 22 19:11:28.848108 systemd[1]: Finished ignition-fetch.service - Ignition (fetch). May 22 19:11:28.845039 ignition[1633]: Ignition finished successfully May 22 19:11:28.853765 systemd[1]: Starting ignition-kargs.service - Ignition (kargs)... May 22 19:11:28.868759 systemd-networkd[1385]: eth0: Gained IPv6LL May 22 19:11:28.876702 ignition[1639]: Ignition 2.24.0 May 22 19:11:28.876713 ignition[1639]: Stage: kargs May 22 19:11:28.876919 ignition[1639]: no config dir at "/usr/lib/ignition/base.d" May 22 19:11:28.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:28.878546 systemd[1]: Finished ignition-kargs.service - Ignition (kargs). May 22 19:11:28.876927 ignition[1639]: no config dir at "/usr/lib/ignition/base.platform.d/azure" May 22 19:11:28.883111 systemd[1]: Starting ignition-disks.service - Ignition (disks)... May 22 19:11:28.877447 ignition[1639]: kargs: kargs passed May 22 19:11:28.877480 ignition[1639]: Ignition finished successfully May 22 19:11:28.947699 systemd[1]: ignition-kargs.service: Deactivated successfully. May 22 19:11:28.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:28.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:28.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:28.947802 systemd[1]: Stopped ignition-kargs.service - Ignition (kargs). May 22 19:11:28.948610 systemd[1]: ignition-fetch.service: Deactivated successfully. May 22 19:11:28.948744 systemd[1]: Stopped ignition-fetch.service - Ignition (fetch). May 22 19:11:28.949089 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. May 22 19:11:28.949191 systemd[1]: Stopped ignition-fetch-offline.service - Ignition (fetch-offline). May 22 19:11:28.950710 systemd[1]: Unmounting oem.mount - /oem... May 22 19:11:28.968922 kernel: BTRFS info (device nvme0n1p6): last unmount of filesystem e33db1dc-bf4d-468d-946e-8f4b5a090363 May 22 19:11:28.969338 systemd[1]: oem.mount: Deactivated successfully. May 22 19:11:28.969462 systemd[1]: Unmounted oem.mount - /oem. May 22 19:11:28.998452 ignition[1649]: Ignition 2.24.0 May 22 19:11:28.998464 ignition[1649]: Stage: disks May 22 19:11:28.998727 ignition[1649]: no config dir at "/usr/lib/ignition/base.d" May 22 19:11:29.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:29.000794 systemd[1]: Finished ignition-disks.service - Ignition (disks). May 22 19:11:28.998735 ignition[1649]: no config dir at "/usr/lib/ignition/base.platform.d/azure" May 22 19:11:29.003935 systemd[1]: Reached target initrd-root-device.target - Initrd Root Device. May 22 19:11:28.999391 ignition[1649]: disks: disks passed May 22 19:11:29.006303 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. May 22 19:11:28.999429 ignition[1649]: Ignition finished successfully May 22 19:11:29.009695 systemd[1]: Reached target local-fs.target - Local File Systems. May 22 19:11:29.011785 systemd[1]: Reached target sysinit.target - System Initialization. May 22 19:11:29.013012 systemd[1]: Reached target basic.target - Basic System. May 22 19:11:29.017755 systemd[1]: Starting systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT... May 22 19:11:29.114669 systemd-fsck[1659]: ROOT: clean, 15/6361680 files, 408771/6359552 blocks May 22 19:11:29.122957 systemd[1]: Finished systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT. May 22 19:11:29.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:29.130040 systemd[1]: Mounting sysroot.mount - /sysroot... May 22 19:11:29.433706 kernel: EXT4-fs (nvme0n1p9): mounted filesystem 47741ff1-2f1b-4b93-b3f5-dcc2ee688f01 r/w with ordered data mode. Quota mode: none. May 22 19:11:29.434221 systemd[1]: Mounted sysroot.mount - /sysroot. May 22 19:11:29.439145 systemd[1]: Reached target initrd-root-fs.target - Initrd Root File System. May 22 19:11:29.453539 systemd[1]: Mounting sysroot-usr.mount - /sysroot/usr... May 22 19:11:29.455798 systemd[1]: Starting flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent... May 22 19:11:29.462730 systemd[1]: ignition-remount-sysroot.service - Remount /sysroot read-write for Ignition was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). May 22 19:11:29.462775 systemd[1]: Reached target ignition-diskful.target - Ignition Boot Disk Setup. May 22 19:11:29.472840 systemd[1]: Mounted sysroot-usr.mount - /sysroot/usr. May 22 19:11:29.475773 systemd[1]: Starting initrd-setup-root.service - Root filesystem setup... May 22 19:11:30.337596 coreos-metadata[1669]: May 22 19:11:30.337 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 May 22 19:11:30.341743 coreos-metadata[1669]: May 22 19:11:30.340 INFO Fetch successful May 22 19:11:30.341743 coreos-metadata[1669]: May 22 19:11:30.341 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 May 22 19:11:30.351306 coreos-metadata[1669]: May 22 19:11:30.351 INFO Fetch successful May 22 19:11:30.353009 coreos-metadata[1669]: May 22 19:11:30.351 INFO wrote hostname ci-4694.0.1-a-f792323a16 to /sysroot/etc/hostname May 22 19:11:30.353370 systemd[1]: Finished flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. May 22 19:11:30.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:31.387641 kernel: loop1: detected capacity change from 0 to 43464 May 22 19:11:31.430647 kernel: loop1: p1 p2 p3 May 22 19:11:32.083860 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:32.083929 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:32.085732 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:32.086975 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:32.087495 systemd-confext[1747]: device-mapper: reload ioctl on 34c0bb0cf7c56978b902b451b6b90d2903015da37e581b8f5a52ffa1a203cba5-verity (254:1) failed: Invalid argument May 22 19:11:32.136709 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:32.230650 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. May 22 19:11:32.250670 kernel: loop2: detected capacity change from 0 to 43464 May 22 19:11:32.252643 kernel: loop2: p1 p2 p3 May 22 19:11:32.266018 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:32.266059 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:32.267570 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:32.268764 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:32.268826 (sd-merge)[1758]: device-mapper: reload ioctl on 34c0bb0cf7c56978b902b451b6b90d2903015da37e581b8f5a52ffa1a203cba5-verity (254:1) failed: Invalid argument May 22 19:11:32.275661 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:32.297063 (sd-merge)[1758]: Using extensions '00-flatcar-default.raw'. May 22 19:11:32.298927 (sd-merge)[1758]: Merged extensions into '/sysroot/etc'. May 22 19:11:32.301503 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. May 22 19:11:32.304924 initrd-setup-root[1765]: /etc 00-flatcar-default Fri 2026-05-22 19:11:25 UTC May 22 19:11:32.307028 systemd[1]: Finished initrd-setup-root.service - Root filesystem setup. May 22 19:11:32.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.314104 kernel: kauditd_printk_skb: 31 callbacks suppressed May 22 19:11:32.314129 kernel: audit: type=1130 audit(1779477092.308:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.314421 systemd[1]: Starting ignition-mount.service - Ignition (mount)... May 22 19:11:32.319478 systemd[1]: Starting sysroot-boot.service - /sysroot/boot... May 22 19:11:32.358853 ignition[1770]: INFO : Ignition 2.24.0 May 22 19:11:32.358853 ignition[1770]: INFO : Stage: mount May 22 19:11:32.362708 ignition[1770]: INFO : no config dir at "/usr/lib/ignition/base.d" May 22 19:11:32.362708 ignition[1770]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" May 22 19:11:32.362708 ignition[1770]: INFO : mount: mount passed May 22 19:11:32.362708 ignition[1770]: INFO : Ignition finished successfully May 22 19:11:32.362391 systemd[1]: Finished sysroot-boot.service - /sysroot/boot. May 22 19:11:32.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.370869 systemd[1]: Finished ignition-mount.service - Ignition (mount). May 22 19:11:32.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.377826 systemd[1]: Starting ignition-files.service - Ignition (files)... May 22 19:11:32.387687 kernel: audit: type=1130 audit(1779477092.369:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.387711 kernel: audit: type=1130 audit(1779477092.373:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.397250 systemd[1]: Mounting oem.mount - /oem... May 22 19:11:32.417638 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 (259:5) scanned by mount (1782) May 22 19:11:32.423653 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem e33db1dc-bf4d-468d-946e-8f4b5a090363 May 22 19:11:32.423696 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm May 22 19:11:32.429444 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations May 22 19:11:32.429481 kernel: BTRFS info (device nvme0n1p6): turning on async discard May 22 19:11:32.430932 kernel: BTRFS info (device nvme0n1p6): enabling free space tree May 22 19:11:32.433899 systemd[1]: Mounted oem.mount - /oem. May 22 19:11:32.436726 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... May 22 19:11:32.447791 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. May 22 19:11:32.472940 ignition[1801]: INFO : Ignition 2.24.0 May 22 19:11:32.472940 ignition[1801]: INFO : Stage: files May 22 19:11:32.476666 ignition[1801]: INFO : no config dir at "/usr/lib/ignition/base.d" May 22 19:11:32.476666 ignition[1801]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" May 22 19:11:32.476666 ignition[1801]: DEBUG : files: compiled without relabeling support, skipping May 22 19:11:32.485783 ignition[1801]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" May 22 19:11:32.485783 ignition[1801]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" May 22 19:11:32.501685 ignition[1801]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" May 22 19:11:32.501685 ignition[1801]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" May 22 19:11:32.501685 ignition[1801]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" May 22 19:11:32.501685 ignition[1801]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/etc/flatcar/update.conf" May 22 19:11:32.501685 ignition[1801]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/etc/flatcar/update.conf" May 22 19:11:32.501685 ignition[1801]: INFO : files: createResultFile: createFiles: op(4): [started] writing file "/sysroot/etc/.ignition-result.json" May 22 19:11:32.501685 ignition[1801]: INFO : files: createResultFile: createFiles: op(4): [finished] writing file "/sysroot/etc/.ignition-result.json" May 22 19:11:32.501685 ignition[1801]: INFO : files: files passed May 22 19:11:32.501685 ignition[1801]: INFO : Ignition finished successfully May 22 19:11:32.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.489437 unknown[1801]: wrote ssh authorized keys file for user: core May 22 19:11:32.527485 kernel: audit: type=1130 audit(1779477092.502:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.491789 systemd[1]: Finished ignition-files.service - Ignition (files). May 22 19:11:32.503788 systemd[1]: Starting ignition-quench.service - Ignition (record completion)... May 22 19:11:32.522841 systemd[1]: Starting initrd-setup-root-after-ignition.service - Root filesystem completion... May 22 19:11:32.536581 systemd[1]: ignition-quench.service: Deactivated successfully. May 22 19:11:32.536704 systemd[1]: Finished ignition-quench.service - Ignition (record completion). May 22 19:11:32.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.549497 kernel: audit: type=1130 audit(1779477092.537:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.549525 kernel: audit: type=1131 audit(1779477092.537:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:32.566612 initrd-setup-root-after-ignition[1834]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory May 22 19:11:32.566612 initrd-setup-root-after-ignition[1834]: grep: /sysroot/usr/share/flatcar/enabled-sysext.conf: No such file or directory May 22 19:11:32.575686 initrd-setup-root-after-ignition[1838]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory May 22 19:11:32.577645 kernel: loop3: detected capacity change from 0 to 43464 May 22 19:11:32.579644 kernel: loop3: p1 p2 p3 May 22 19:11:32.592327 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:32.592367 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:32.595634 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:32.595667 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:32.595618 systemd-confext[1840]: device-mapper: reload ioctl on loop3p1-verity (254:2) failed: Invalid argument May 22 19:11:32.604651 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:32.625651 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. May 22 19:11:32.647705 kernel: loop4: detected capacity change from 0 to 43464 May 22 19:11:32.647810 kernel: loop4: p1 p2 p3 May 22 19:11:32.655735 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:32.655770 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:32.657366 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:32.658565 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:32.658636 (sd-merge)[1848]: device-mapper: reload ioctl on loop4p1-verity (254:2) failed: Invalid argument May 22 19:11:32.664043 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:32.680999 (sd-merge)[1848]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. May 22 19:11:32.685708 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. May 22 19:11:32.748643 kernel: loop4: detected capacity change from 0 to 378016 May 22 19:11:32.842647 kernel: loop4: p1 p2 p3 May 22 19:11:33.568430 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:33.568506 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:33.570433 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:33.571751 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:33.572219 systemd-sysext[1856]: device-mapper: reload ioctl on 95e1797b1c18833e5778f5d77b5f1ee1782531a60657be5a26ef59522d21e1dc-verity (254:2) failed: Invalid argument May 22 19:11:33.578645 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:33.737649 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. May 22 19:11:33.900648 kernel: loop5: detected capacity change from 0 to 136912 May 22 19:11:33.929634 kernel: loop5: p1 p2 p3 May 22 19:11:34.396646 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:34.400114 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:34.400218 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:34.403028 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:34.403103 systemd-sysext[1856]: device-mapper: reload ioctl on 13729d316cd67e1d034d8331f36a5bad38437e7a747108afcb7e4d2c7a932a72-verity (254:2) failed: Invalid argument May 22 19:11:34.408202 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:34.514637 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. May 22 19:11:34.567663 kernel: loop6: detected capacity change from 0 to 178200 May 22 19:11:34.680663 kernel: loop6: p1 p2 p3 May 22 19:11:35.378449 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:35.382694 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:35.382735 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:35.386152 systemd-sysext[1856]: device-mapper: reload ioctl on 76e564ce832c92102e0654503bbfd4392ed6cbfef96de72cad1d345713379e94-verity (254:2) failed: Invalid argument May 22 19:11:35.389116 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:35.391637 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:35.507842 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. May 22 19:11:35.535871 kernel: loop7: detected capacity change from 0 to 378016 May 22 19:11:35.535924 kernel: loop7: p1 p2 p3 May 22 19:11:35.569764 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:35.569820 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:35.571239 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:35.573018 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:35.573056 (sd-merge)[1879]: device-mapper: reload ioctl on 95e1797b1c18833e5778f5d77b5f1ee1782531a60657be5a26ef59522d21e1dc-verity (254:2) failed: Invalid argument May 22 19:11:35.579641 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:35.627639 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. May 22 19:11:35.631812 kernel: loop1: detected capacity change from 0 to 136912 May 22 19:11:35.631855 kernel: loop1: p1 p2 p3 May 22 19:11:35.633636 kernel: loop1: p1 p2 p3 May 22 19:11:35.647756 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:35.647791 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:35.651201 kernel: device-mapper: table: 254:3: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:35.653227 (sd-merge)[1879]: device-mapper: reload ioctl on 13729d316cd67e1d034d8331f36a5bad38437e7a747108afcb7e4d2c7a932a72-verity (254:3) failed: Invalid argument May 22 19:11:35.659080 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:35.660692 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:35.693518 kernel: erofs: (device dm-3): mounted with root inode @ nid 39. May 22 19:11:35.693551 kernel: loop3: detected capacity change from 0 to 178200 May 22 19:11:35.695641 kernel: loop3: p1 p2 p3 May 22 19:11:35.696656 kernel: loop3: p1 p2 p3 May 22 19:11:35.706136 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:35.706180 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:35.707124 kernel: device-mapper: table: 254:4: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:35.708052 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:35.708398 (sd-merge)[1879]: device-mapper: reload ioctl on 76e564ce832c92102e0654503bbfd4392ed6cbfef96de72cad1d345713379e94-verity (254:4) failed: Invalid argument May 22 19:11:35.712571 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:35.735637 kernel: erofs: (device dm-4): mounted with root inode @ nid 39. May 22 19:11:35.736173 (sd-merge)[1879]: Using extensions 'containerd-flatcar.raw', 'docker-flatcar.raw', 'oem-azure-4694.0.1.raw'. May 22 19:11:35.738121 (sd-merge)[1879]: Merged extensions into '/sysroot/usr'. May 22 19:11:35.740897 systemd[1]: Finished initrd-setup-root-after-ignition.service - Root filesystem completion. May 22 19:11:35.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.749270 kernel: audit: type=1130 audit(1779477095.739:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.746353 systemd[1]: Starting initrd-parse-etc.service - Mountpoints Configured in the Real Root... May 22 19:11:35.775253 systemd[1]: initrd-parse-etc.service: Deactivated successfully. May 22 19:11:35.775346 systemd[1]: Finished initrd-parse-etc.service - Mountpoints Configured in the Real Root. May 22 19:11:35.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.788766 kernel: audit: type=1130 audit(1779477095.777:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.780266 systemd[1]: initrd-parse-etc.service: Triggering OnSuccess= dependencies. May 22 19:11:35.791364 kernel: audit: type=1131 audit(1779477095.779:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.780985 systemd[1]: Reached target initrd-fs.target - Initrd File Systems. May 22 19:11:35.791775 systemd[1]: dracut-mount.service - dracut mount hook was skipped because no trigger condition checks were met. May 22 19:11:35.792948 systemd[1]: Starting dracut-pre-pivot.service - dracut pre-pivot and cleanup hook... May 22 19:11:35.812444 systemd[1]: Finished dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. May 22 19:11:35.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.818721 kernel: audit: type=1130 audit(1779477095.811:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.819762 systemd[1]: Starting initrd-cleanup.service - Cleaning Up and Shutting Down Daemons... May 22 19:11:35.832665 systemd[1]: Stopped target basic.target - Basic System. May 22 19:11:35.832844 systemd[1]: Stopped target ignition-diskful.target - Ignition Boot Disk Setup. May 22 19:11:35.833002 systemd[1]: Stopped target initrd-root-device.target - Initrd Root Device. May 22 19:11:35.833300 systemd[1]: Stopped target initrd-usr-fs.target - Initrd /usr File System. May 22 19:11:35.838835 systemd[1]: Stopped target nss-lookup.target - Host and Network Name Lookups. May 22 19:11:35.842736 systemd[1]: Stopped target paths.target - Path Units. May 22 19:11:35.843969 systemd[1]: Stopped target remote-cryptsetup.target - Remote Encrypted Volumes. May 22 19:11:35.846758 systemd[1]: Stopped target slices.target - Slice Units. May 22 19:11:35.850780 systemd[1]: Stopped target sockets.target - Socket Units. May 22 19:11:35.854779 systemd[1]: Stopped target sysinit.target - System Initialization. May 22 19:11:35.857228 systemd[1]: Stopped target local-fs.target - Local File Systems. May 22 19:11:35.860016 systemd[1]: Stopped target swap.target - Swaps. May 22 19:11:35.862342 systemd[1]: Stopped target timers.target - Timer Units. May 22 19:11:35.864691 systemd[1]: iscsid.socket: Deactivated successfully. May 22 19:11:35.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.864798 systemd[1]: Closed iscsid.socket - Open-iSCSI iscsid Socket. May 22 19:11:35.868771 systemd[1]: iscsiuio.socket: Deactivated successfully. May 22 19:11:35.868864 systemd[1]: Closed iscsiuio.socket - Open-iSCSI iscsiuio Socket. May 22 19:11:35.872767 systemd[1]: systemd-journald-audit.socket: Deactivated successfully. May 22 19:11:35.872861 systemd[1]: Closed systemd-journald-audit.socket - Journal Audit Socket. May 22 19:11:35.876804 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. May 22 19:11:35.876916 systemd[1]: Stopped dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. May 22 19:11:35.880843 systemd[1]: Stopped target remote-fs.target - Remote File Systems. May 22 19:11:35.883210 systemd[1]: Stopped target remote-fs-pre.target - Preparation for Remote File Systems. May 22 19:11:35.883529 systemd[1]: dracut-pre-mount.service: Deactivated successfully. May 22 19:11:35.883654 systemd[1]: Stopped dracut-pre-mount.service - dracut pre-mount hook. May 22 19:11:35.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.899848 systemd[1]: Stopped target cryptsetup.target - Local Encrypted Volumes. May 22 19:11:35.903726 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. May 22 19:11:35.904079 systemd[1]: Stopped systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. May 22 19:11:35.908854 systemd[1]: Stopped target cryptsetup-pre.target - Local Encrypted Volumes (Pre). May 22 19:11:35.913746 systemd[1]: clevis-luks-askpass.path: Deactivated successfully. May 22 19:11:35.914035 systemd[1]: Stopped clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. May 22 19:11:35.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.917799 systemd[1]: dracut-initqueue.service: Deactivated successfully. May 22 19:11:35.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.917930 systemd[1]: Stopped dracut-initqueue.service - dracut initqueue hook. May 22 19:11:35.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.921887 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. May 22 19:11:35.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.922014 systemd[1]: Stopped initrd-setup-root-after-ignition.service - Root filesystem completion. May 22 19:11:35.926824 systemd[1]: ignition-files.service: Deactivated successfully. May 22 19:11:35.926934 systemd[1]: Stopped ignition-files.service - Ignition (files). May 22 19:11:35.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.930813 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. May 22 19:11:35.930926 systemd[1]: Stopped flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. May 22 19:11:35.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.935741 systemd[1]: Stopping ignition-mount.service - Ignition (mount)... May 22 19:11:35.939850 systemd[1]: Stopping sysroot-boot.service - /sysroot/boot... May 22 19:11:35.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.941998 systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully. May 22 19:11:35.942165 systemd[1]: Stopped systemd-tmpfiles-setup.service - Create System Files and Directories. May 22 19:11:35.946146 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. May 22 19:11:35.946247 systemd[1]: Stopped systemd-udev-trigger.service - Coldplug All udev Devices. May 22 19:11:35.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.977992 ignition[1913]: INFO : Ignition 2.24.0 May 22 19:11:35.977992 ignition[1913]: INFO : Stage: umount May 22 19:11:35.977992 ignition[1913]: INFO : no config dir at "/usr/lib/ignition/base.d" May 22 19:11:35.977992 ignition[1913]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" May 22 19:11:35.977992 ignition[1913]: INFO : umount: umount passed May 22 19:11:35.977992 ignition[1913]: INFO : Ignition finished successfully May 22 19:11:35.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.954203 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. May 22 19:11:35.954306 systemd[1]: Stopped dracut-pre-trigger.service - dracut pre-trigger hook. May 22 19:11:35.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.969647 systemd[1]: initrd-cleanup.service: Deactivated successfully. May 22 19:11:35.969752 systemd[1]: Finished initrd-cleanup.service - Cleaning Up and Shutting Down Daemons. May 22 19:11:35.978310 systemd[1]: ignition-mount.service: Deactivated successfully. May 22 19:11:35.978451 systemd[1]: Stopped ignition-mount.service - Ignition (mount). May 22 19:11:35.986939 systemd[1]: Stopped target network.target - Network. May 22 19:11:36.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.990740 systemd[1]: ignition-disks.service: Deactivated successfully. May 22 19:11:35.990782 systemd[1]: Stopped ignition-disks.service - Ignition (disks). May 22 19:11:35.992822 systemd[1]: ignition-setup-pre.service: Deactivated successfully. May 22 19:11:36.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:35.992851 systemd[1]: Stopped ignition-setup-pre.service - Ignition env setup. May 22 19:11:35.996793 systemd[1]: Stopping systemd-networkd.service - Network Configuration... May 22 19:11:36.025000 audit: BPF prog-id=5 op=UNLOAD May 22 19:11:36.026000 audit: BPF prog-id=8 op=UNLOAD May 22 19:11:35.999230 systemd[1]: Stopping systemd-resolved.service - Network Name Resolution... May 22 19:11:36.011176 systemd[1]: systemd-resolved.service: Deactivated successfully. May 22 19:11:36.011292 systemd[1]: Stopped systemd-resolved.service - Network Name Resolution. May 22 19:11:36.018728 systemd[1]: systemd-networkd.service: Deactivated successfully. May 22 19:11:36.018833 systemd[1]: Stopped systemd-networkd.service - Network Configuration. May 22 19:11:36.026441 systemd[1]: sysroot-boot.mount: Deactivated successfully. May 22 19:11:36.027374 systemd[1]: Stopped target network-pre.target - Preparation for Network. May 22 19:11:36.033344 systemd[1]: systemd-networkd.socket: Deactivated successfully. May 22 19:11:36.033390 systemd[1]: Closed systemd-networkd.socket - Network Service Netlink Socket. May 22 19:11:36.039642 systemd[1]: Stopping network-cleanup.service - Network Cleanup... May 22 19:11:36.042710 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. May 22 19:11:36.044574 systemd[1]: Stopped parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. May 22 19:11:36.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.055729 systemd[1]: systemd-sysctl.service: Deactivated successfully. May 22 19:11:36.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.055756 systemd[1]: Stopped systemd-sysctl.service - Apply Kernel Variables. May 22 19:11:36.058856 systemd[1]: systemd-modules-load.service: Deactivated successfully. May 22 19:11:36.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.058893 systemd[1]: Stopped systemd-modules-load.service - Load Kernel Modules. May 22 19:11:36.068052 systemd[1]: Stopping systemd-udevd.service - Rule-based Manager for Device Events and Files... May 22 19:11:36.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.071528 systemd[1]: sysroot-boot.service: Deactivated successfully. May 22 19:11:36.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.071890 systemd[1]: Stopped sysroot-boot.service - /sysroot/boot. May 22 19:11:36.075059 systemd[1]: initrd-setup-root.service: Deactivated successfully. May 22 19:11:36.075121 systemd[1]: Stopped initrd-setup-root.service - Root filesystem setup. May 22 19:11:36.171976 systemd[1]: systemd-udevd.service: Deactivated successfully. May 22 19:11:36.172138 systemd[1]: Stopped systemd-udevd.service - Rule-based Manager for Device Events and Files. May 22 19:11:36.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.177478 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. May 22 19:11:36.177545 systemd[1]: Closed systemd-udevd-control.socket - udev Control Socket. May 22 19:11:36.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.182738 systemd[1]: dracut-pre-udev.service: Deactivated successfully. May 22 19:11:36.182782 systemd[1]: Stopped dracut-pre-udev.service - dracut pre-udev hook. May 22 19:11:36.184411 systemd[1]: dracut-cmdline.service: Deactivated successfully. May 22 19:11:36.184438 systemd[1]: Stopped dracut-cmdline.service - dracut cmdline hook. May 22 19:11:36.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.193952 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. May 22 19:11:36.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.194000 systemd[1]: Stopped dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. May 22 19:11:36.203741 kernel: hv_netvsc f8615163-0000-1000-2000-7ced8db7dc71 eth0: Data path switched from VF: enP30832s1 May 22 19:11:36.202857 systemd[1]: Starting initrd-udevadm-cleanup-db.service - Cleanup udev Database... May 22 19:11:36.207653 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 May 22 19:11:36.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.207191 systemd[1]: systemd-network-generator.service: Deactivated successfully. May 22 19:11:36.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.207233 systemd[1]: Stopped systemd-network-generator.service - Generate Network Units from Kernel Command Line. May 22 19:11:36.209479 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. May 22 19:11:36.209517 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. May 22 19:11:36.211166 systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully. May 22 19:11:36.211194 systemd[1]: Stopped systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. May 22 19:11:36.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.216849 systemd[1]: kmod-static-nodes.service: Deactivated successfully. May 22 19:11:36.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.216887 systemd[1]: Stopped kmod-static-nodes.service - Create List of Static Device Nodes. May 22 19:11:36.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.222168 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. May 22 19:11:36.222200 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. May 22 19:11:36.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:36.237449 systemd[1]: network-cleanup.service: Deactivated successfully. May 22 19:11:36.237533 systemd[1]: Stopped network-cleanup.service - Network Cleanup. May 22 19:11:36.241206 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. May 22 19:11:36.241299 systemd[1]: Finished initrd-udevadm-cleanup-db.service - Cleanup udev Database. May 22 19:11:36.245751 systemd[1]: Reached target initrd-switch-root.target - Switch Root. May 22 19:11:36.248043 systemd[1]: Starting initrd-switch-root.service - Switch Root... May 22 19:11:36.268122 systemd[1]: Switching root. May 22 19:11:36.307330 systemd-journald[999]: Journal stopped May 22 19:11:44.381418 systemd-journald[999]: Received SIGTERM from PID 1 (systemd). May 22 19:11:44.381463 kernel: SELinux: policy capability network_peer_controls=1 May 22 19:11:44.381482 kernel: SELinux: policy capability open_perms=1 May 22 19:11:44.381496 kernel: SELinux: policy capability extended_socket_class=1 May 22 19:11:44.381510 kernel: SELinux: policy capability always_check_network=0 May 22 19:11:44.381522 kernel: SELinux: policy capability cgroup_seclabel=1 May 22 19:11:44.381533 kernel: SELinux: policy capability nnp_nosuid_transition=1 May 22 19:11:44.381546 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 May 22 19:11:44.381558 kernel: SELinux: policy capability ioctl_skip_cloexec=0 May 22 19:11:44.381566 kernel: SELinux: policy capability userspace_initial_context=0 May 22 19:11:44.381578 kernel: kauditd_printk_skb: 36 callbacks suppressed May 22 19:11:44.381591 kernel: audit: type=1403 audit(1779477097.733:89): auid=4294967295 ses=4294967295 lsm=selinux res=1 May 22 19:11:44.381605 systemd[1]: Successfully loaded SELinux policy in 212.881ms. May 22 19:11:44.381638 systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 5.605ms. May 22 19:11:44.381652 systemd[1]: systemd 258.3 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE) May 22 19:11:44.381665 systemd[1]: Detected virtualization microsoft. May 22 19:11:44.381679 systemd[1]: Detected architecture x86-64. May 22 19:11:44.381690 systemd[1]: Detected first boot. May 22 19:11:44.381697 systemd[1]: Initializing machine ID from random generator. May 22 19:11:44.381706 systemd[1]: Hostname set to . May 22 19:11:44.381715 kernel: audit: type=1334 audit(1779477099.667:90): prog-id=9 op=LOAD May 22 19:11:44.381724 kernel: audit: type=1334 audit(1779477099.667:91): prog-id=9 op=UNLOAD May 22 19:11:44.381735 zram_generator::config[1960]: No configuration found. May 22 19:11:44.381753 kernel: Guest personality initialized and is inactive May 22 19:11:44.381767 kernel: VMCI host device registered (name=vmci, major=10, minor=259) May 22 19:11:44.381777 kernel: Initialized host personality May 22 19:11:44.381785 kernel: NET: Registered PF_VSOCK protocol family May 22 19:11:44.381798 systemd-ssh-generator[1956]: Failed to query local AF_VSOCK CID: Cannot assign requested address May 22 19:11:44.381811 (sd-exec-[1941]: /usr/lib/systemd/system-generators/systemd-ssh-generator failed with exit status 1. May 22 19:11:44.381821 systemd[1]: Applying preset policy. May 22 19:11:44.381832 systemd[1]: Created symlink '/etc/systemd/system/timers.target.wants/google-oslogin-cache.timer' → '/usr/lib/systemd/system/google-oslogin-cache.timer'. May 22 19:11:44.381842 systemd[1]: Populated /etc with preset unit settings. May 22 19:11:44.381851 kernel: audit: type=1334 audit(1779477103.839:92): prog-id=10 op=LOAD May 22 19:11:44.381862 kernel: audit: type=1334 audit(1779477103.839:93): prog-id=2 op=UNLOAD May 22 19:11:44.381874 systemd[1]: initrd-switch-root.service: Deactivated successfully. May 22 19:11:44.381888 kernel: audit: type=1334 audit(1779477103.839:94): prog-id=11 op=LOAD May 22 19:11:44.381895 systemd[1]: Stopped initrd-switch-root.service - Switch Root. May 22 19:11:44.381905 kernel: audit: type=1334 audit(1779477103.839:95): prog-id=12 op=LOAD May 22 19:11:44.381916 kernel: audit: type=1334 audit(1779477103.839:96): prog-id=3 op=UNLOAD May 22 19:11:44.381925 kernel: audit: type=1334 audit(1779477103.839:97): prog-id=4 op=UNLOAD May 22 19:11:44.381937 kernel: audit: type=1131 audit(1779477103.840:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.381946 kernel: audit: type=1334 audit(1779477103.848:99): prog-id=10 op=UNLOAD May 22 19:11:44.381955 kernel: audit: type=1130 audit(1779477103.857:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.381964 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. May 22 19:11:44.381978 kernel: audit: type=1131 audit(1779477103.857:101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.381987 systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. May 22 19:11:44.381997 systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. May 22 19:11:44.382011 systemd[1]: Created slice system-getty.slice - Slice /system/getty. May 22 19:11:44.382025 systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. May 22 19:11:44.382037 systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. May 22 19:11:44.382046 systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. May 22 19:11:44.382056 systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. May 22 19:11:44.382065 systemd[1]: Created slice user.slice - User and Session Slice. May 22 19:11:44.382075 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. May 22 19:11:44.382082 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. May 22 19:11:44.382090 systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. May 22 19:11:44.382098 systemd[1]: Set up automount boot.automount - Boot partition Automount Point. May 22 19:11:44.382108 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. May 22 19:11:44.382116 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... May 22 19:11:44.382123 systemd[1]: Expecting device dev-ptp_hyperv.device - /dev/ptp_hyperv... May 22 19:11:44.382130 systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... May 22 19:11:44.382137 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). May 22 19:11:44.382146 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. May 22 19:11:44.382153 systemd[1]: Reached target imports.target - Image Downloads. May 22 19:11:44.382161 systemd[1]: Stopped target initrd-switch-root.target - Switch Root. May 22 19:11:44.382168 systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. May 22 19:11:44.382175 systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. May 22 19:11:44.382185 systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. May 22 19:11:44.382196 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. May 22 19:11:44.382205 systemd[1]: Reached target remote-fs.target - Remote File Systems. May 22 19:11:44.382215 systemd[1]: Reached target remote-integritysetup.target - Remote Integrity Protected Volumes. May 22 19:11:44.382227 systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. May 22 19:11:44.382235 systemd[1]: Reached target slices.target - Slice Units. May 22 19:11:44.382245 systemd[1]: Reached target swap.target - Swaps. May 22 19:11:44.382252 systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. May 22 19:11:44.382259 systemd[1]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. May 22 19:11:44.382267 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. May 22 19:11:44.382274 systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. May 22 19:11:44.382281 systemd[1]: Listening on systemd-factory-reset.socket - Factory Reset Management. May 22 19:11:44.382289 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. May 22 19:11:44.382297 systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. May 22 19:11:44.382304 systemd[1]: Listening on systemd-networkd-varlink.socket - Network Service Varlink Socket. May 22 19:11:44.382311 systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. May 22 19:11:44.382318 systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. May 22 19:11:44.382325 systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. May 22 19:11:44.382334 systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. May 22 19:11:44.382344 systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. May 22 19:11:44.382351 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. May 22 19:11:44.382358 systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. May 22 19:11:44.382366 systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. May 22 19:11:44.382373 systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... May 22 19:11:44.382380 systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... May 22 19:11:44.382388 systemd[1]: Mounting media.mount - External Media Directory... May 22 19:11:44.382396 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). May 22 19:11:44.382403 systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... May 22 19:11:44.382410 systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... May 22 19:11:44.382417 systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. May 22 19:11:44.382424 systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... May 22 19:11:44.382434 systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). May 22 19:11:44.382443 systemd[1]: Reached target machines.target - Virtual Machines and Containers. May 22 19:11:44.382450 systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... May 22 19:11:44.382458 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. May 22 19:11:44.382467 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... May 22 19:11:44.382474 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... May 22 19:11:44.382481 systemd[1]: modprobe@dm_mod.service - Load Kernel Module dm_mod was skipped because of an unmet condition check (ConditionKernelModuleLoaded=!dm_mod). May 22 19:11:44.382492 systemd[1]: modprobe@drm.service - Load Kernel Module drm was skipped because of an unmet condition check (ConditionKernelModuleLoaded=!drm). May 22 19:11:44.382502 systemd[1]: modprobe@efi_pstore.service - Load Kernel Module efi_pstore was skipped because of an unmet condition check (ConditionKernelModuleLoaded=!efi_pstore). May 22 19:11:44.382509 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... May 22 19:11:44.382517 systemd[1]: modprobe@loop.service - Load Kernel Module loop was skipped because of an unmet condition check (ConditionKernelModuleLoaded=!loop). May 22 19:11:44.382524 systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). May 22 19:11:44.382533 systemd[1]: systemd-fsck-root.service: Deactivated successfully. May 22 19:11:44.382541 systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. May 22 19:11:44.382549 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. May 22 19:11:44.382556 systemd[1]: Stopped systemd-fsck-usr.service. May 22 19:11:44.382564 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). May 22 19:11:44.382571 systemd[1]: Starting systemd-journald.service - Journal Service... May 22 19:11:44.382580 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... May 22 19:11:44.382590 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... May 22 19:11:44.382602 systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. May 22 19:11:44.382610 systemd[1]: Reached target time-set.target - System Time Set. May 22 19:11:44.382660 systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... May 22 19:11:44.382672 systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... May 22 19:11:44.382685 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... May 22 19:11:44.382693 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). May 22 19:11:44.382701 systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. May 22 19:11:44.382709 systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. May 22 19:11:44.382719 systemd[1]: Mounted media.mount - External Media Directory. May 22 19:11:44.382727 systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. May 22 19:11:44.382734 systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. May 22 19:11:44.382742 systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. May 22 19:11:44.382749 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. May 22 19:11:44.382757 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. May 22 19:11:44.382765 systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. May 22 19:11:44.382774 systemd[1]: Reached target network-pre.target - Preparation for Network. May 22 19:11:44.382781 systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. May 22 19:11:44.382789 systemd[1]: remount-root.service - Remount Root File System was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). May 22 19:11:44.382796 systemd[1]: Reached target local-fs.target - Local File Systems. May 22 19:11:44.382805 systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. May 22 19:11:44.382813 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. May 22 19:11:44.382820 systemd[1]: Starting systemd-confext.service - Merge System Configuration Images into /etc/... May 22 19:11:44.382845 systemd-journald[2039]: Collecting audit messages is enabled. May 22 19:11:44.382867 systemd-journald[2039]: Journal started May 22 19:11:44.382886 systemd-journald[2039]: Runtime Journal (/run/log/journal/56a76bc78c0243aeaffe509050ed811d) is 8M, max 158.5M, 150.5M free. May 22 19:11:43.992000 audit[1]: EVENT_LISTENER pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1 May 22 19:11:44.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.204000 audit: BPF prog-id=12 op=UNLOAD May 22 19:11:44.204000 audit: BPF prog-id=11 op=UNLOAD May 22 19:11:44.204000 audit: BPF prog-id=13 op=LOAD May 22 19:11:44.204000 audit: BPF prog-id=14 op=LOAD May 22 19:11:44.204000 audit: BPF prog-id=15 op=LOAD May 22 19:11:44.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.378000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 May 22 19:11:44.378000 audit[2039]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffcff5167c0 a2=4000 a3=0 items=0 ppid=1 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:11:44.378000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" May 22 19:11:43.832870 systemd[1]: Queued start job for default target multi-user.target. May 22 19:11:43.841531 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device - /dev/nvme0n1p6. May 22 19:11:43.841892 systemd[1]: systemd-journald.service: Deactivated successfully. May 22 19:11:44.443795 systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... May 22 19:11:44.443857 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). May 22 19:11:44.448912 systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... May 22 19:11:44.457656 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... May 22 19:11:44.465637 systemd[1]: Starting systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials... May 22 19:11:44.467778 systemd[1]: Started systemd-journald.service - Journal Service. May 22 19:11:44.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.469830 systemd[1]: modprobe@configfs.service: Deactivated successfully. May 22 19:11:44.470246 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. May 22 19:11:44.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.474747 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. May 22 19:11:44.475734 kernel: fuse: init (API version 7.41) May 22 19:11:44.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.484405 systemd[1]: modprobe@fuse.service: Deactivated successfully. May 22 19:11:44.485689 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. May 22 19:11:44.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.494615 systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System... May 22 19:11:44.498243 systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... May 22 19:11:44.510749 systemd[1]: Starting systemd-journal-flush.service - Flush Journal to Persistent Storage... May 22 19:11:44.514772 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... May 22 19:11:44.518265 systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System. May 22 19:11:44.522878 systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System. May 22 19:11:44.867009 systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. May 22 19:11:44.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.882654 kernel: loop4: detected capacity change from 0 to 43464 May 22 19:11:44.924945 systemd-journald[2039]: Time spent on flushing to /var/log/journal/56a76bc78c0243aeaffe509050ed811d is 92.948ms for 1191 entries. May 22 19:11:44.924945 systemd-journald[2039]: System Journal (/var/log/journal/56a76bc78c0243aeaffe509050ed811d) is 8M, max 2.2G, 2.2G free. May 22 19:11:44.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdb-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:44.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:45.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:45.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:46.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:46.914909 systemd-journald[2039]: Received client request to flush runtime journal. May 22 19:11:44.931221 systemd[1]: Finished systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials. May 22 19:11:46.916208 kernel: loop4: p1 p2 p3 May 22 19:11:44.939573 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. May 22 19:11:46.916393 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:44.961350 systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed. May 22 19:11:46.916498 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:44.965136 systemd[1]: Reached target first-boot-complete.target - First Boot Complete. May 22 19:11:46.916562 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:44.969518 systemd[1]: Starting systemd-machine-id-commit.service - Save Transient machine-id to Disk... May 22 19:11:46.916635 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:45.125908 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. May 22 19:11:46.916694 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:45.181233 systemd-confext[2059]: device-mapper: reload ioctl on loop4p1-verity (254:5) failed: Invalid argument May 22 19:11:45.682038 systemd-tmpfiles[2056]: ACLs are not supported, ignoring. May 22 19:11:45.682048 systemd-tmpfiles[2056]: ACLs are not supported, ignoring. May 22 19:11:45.684877 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. May 22 19:11:46.539870 systemd[1]: Finished flatcar-tmpfiles.service - Create missing system files. May 22 19:11:46.542552 systemd[1]: Starting systemd-sysusers.service - Create System Users... May 22 19:11:46.916503 systemd[1]: Finished systemd-journal-flush.service - Flush Journal to Persistent Storage. May 22 19:11:46.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:47.725349 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. May 22 19:11:47.726063 systemd[1]: Finished systemd-machine-id-commit.service - Save Transient machine-id to Disk. May 22 19:11:47.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:47.728324 systemd[1]: Finished systemd-sysusers.service - Create System Users. May 22 19:11:47.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:47.733000 audit: BPF prog-id=16 op=LOAD May 22 19:11:47.733000 audit: BPF prog-id=17 op=LOAD May 22 19:11:47.733000 audit: BPF prog-id=18 op=LOAD May 22 19:11:47.738000 audit: BPF prog-id=19 op=LOAD May 22 19:11:47.755000 audit: BPF prog-id=20 op=LOAD May 22 19:11:47.755000 audit: BPF prog-id=21 op=LOAD May 22 19:11:47.755000 audit: BPF prog-id=22 op=LOAD May 22 19:11:47.736039 systemd[1]: Starting systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer... May 22 19:11:47.741751 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... May 22 19:11:47.746813 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... May 22 19:11:47.753775 systemd[1]: Starting modprobe@tun.service - Load Kernel Module tun... May 22 19:11:47.757641 systemd[1]: Starting systemd-userdbd.service - User Database Manager... May 22 19:11:47.779086 systemd-tmpfiles[2123]: ACLs are not supported, ignoring. May 22 19:11:47.779388 systemd-tmpfiles[2123]: ACLs are not supported, ignoring. May 22 19:11:47.788731 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. May 22 19:11:47.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:47.792959 systemd[1]: Finished systemd-hwdb-update.service - Rebuild Hardware Database. May 22 19:11:47.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:47.796536 systemd[1]: Started systemd-userdbd.service - User Database Manager. May 22 19:11:47.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:47.799000 audit: BPF prog-id=23 op=LOAD May 22 19:11:47.799000 audit: BPF prog-id=24 op=LOAD May 22 19:11:47.801282 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... May 22 19:11:47.838861 systemd-udevd[2133]: Using default interface naming scheme 'v258'. May 22 19:11:47.865682 kernel: tun: Universal TUN/TAP device driver, 1.6 May 22 19:11:47.866066 systemd[1]: modprobe@tun.service: Deactivated successfully. May 22 19:11:47.866250 systemd[1]: Finished modprobe@tun.service - Load Kernel Module tun. May 22 19:11:47.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:47.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:47.866000 audit: BPF prog-id=25 op=LOAD May 22 19:11:47.866000 audit: BPF prog-id=26 op=LOAD May 22 19:11:47.866000 audit: BPF prog-id=27 op=LOAD May 22 19:11:47.869203 systemd[1]: Starting systemd-nsresourced.service - Namespace Resource Manager... May 22 19:11:48.174989 systemd-nsresourced[2136]: Not setting up BPF subsystem, as functionality has been disabled at compile time. May 22 19:11:48.176576 systemd[1]: Started systemd-nsresourced.service - Namespace Resource Manager. May 22 19:11:48.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-nsresourced comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:48.273651 systemd-resolved[2122]: Positive Trust Anchors: May 22 19:11:48.273668 systemd-resolved[2122]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d May 22 19:11:48.273671 systemd-resolved[2122]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 May 22 19:11:48.273702 systemd-resolved[2122]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test May 22 19:11:48.277762 systemd-oomd[2121]: No swap; memory pressure usage will be degraded May 22 19:11:48.278400 systemd[1]: Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer. May 22 19:11:48.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:48.350647 systemd-resolved[2122]: Using system hostname 'ci-4694.0.1-a-f792323a16'. May 22 19:11:48.351808 systemd[1]: Started systemd-resolved.service - Network Name Resolution. May 22 19:11:48.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:48.354790 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. May 22 19:11:48.511080 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. May 22 19:11:48.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:48.514000 audit: BPF prog-id=28 op=LOAD May 22 19:11:48.519000 audit: BPF prog-id=7 op=UNLOAD May 22 19:11:48.519000 audit: BPF prog-id=6 op=UNLOAD May 22 19:11:48.518793 systemd[1]: Starting systemd-networkd.service - Network Configuration... May 22 19:11:48.626871 systemd[1]: Condition check resulted in dev-ttyS0.device - /dev/ttyS0 being skipped. May 22 19:11:48.801698 kernel: hv_vmbus: registering driver hyperv_fb May 22 19:11:48.814650 kernel: mousedev: PS/2 mouse device common for all mice May 22 19:11:48.817867 systemd-networkd[2148]: lo: Link UP May 22 19:11:48.817874 systemd-networkd[2148]: lo: Gained carrier May 22 19:11:48.819760 systemd[1]: Started systemd-networkd.service - Network Configuration. May 22 19:11:48.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:48.822185 systemd[1]: Reached target network.target - Network. May 22 19:11:48.827810 systemd[1]: Starting systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd... May 22 19:11:48.830275 systemd-networkd[2148]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network May 22 19:11:48.830285 systemd-networkd[2148]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. May 22 19:11:48.832698 kernel: mana 7870:00:00.0 enP30832s1: Configured vPort 0 PD 18 DB 16 May 22 19:11:48.833203 systemd[1]: Starting systemd-networkd-wait-online.service - Wait for Network to be Configured... May 22 19:11:48.838782 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 May 22 19:11:48.841650 kernel: hyperv_fb: Synthvid Version major 3, minor 5 May 22 19:11:48.841697 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 May 22 19:11:48.844006 kernel: hv_netvsc f8615163-0000-1000-2000-7ced8db7dc71 eth0: Data path switched to VF: enP30832s1 May 22 19:11:48.843669 systemd-networkd[2148]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network May 22 19:11:48.843738 systemd-networkd[2148]: enP30832s1: Link UP May 22 19:11:48.843842 systemd-networkd[2148]: eth0: Link UP May 22 19:11:48.843846 systemd-networkd[2148]: eth0: Gained carrier May 22 19:11:48.843858 systemd-networkd[2148]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network May 22 19:11:48.852518 systemd-networkd[2148]: enP30832s1: Gained carrier May 22 19:11:48.854904 kernel: Console: switching to colour dummy device 80x25 May 22 19:11:48.860125 kernel: Console: switching to colour frame buffer device 128x48 May 22 19:11:48.872714 systemd-networkd[2148]: eth0: DHCPv4 address 10.0.0.4/24, gateway 10.0.0.1 acquired from 168.63.129.16 May 22 19:11:48.888874 systemd[1]: Condition check resulted in dev-ptp_hyperv.device - /dev/ptp_hyperv being skipped. May 22 19:11:49.018815 kernel: hv_vmbus: registering driver hv_balloon May 22 19:11:49.020652 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 May 22 19:11:49.068738 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#197 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 May 22 19:11:49.227071 systemd[1]: Finished systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd. May 22 19:11:49.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:49.231907 kernel: kauditd_printk_skb: 55 callbacks suppressed May 22 19:11:49.231945 kernel: audit: type=1130 audit(1779477109.227:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:49.237776 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... May 22 19:11:49.256146 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. May 22 19:11:49.256399 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. May 22 19:11:49.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:49.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:49.261901 kernel: audit: type=1130 audit(1779477109.257:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:49.261931 kernel: audit: type=1131 audit(1779477109.257:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:49.263449 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... May 22 19:11:49.353614 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. May 22 19:11:49.392650 kernel: loop4: detected capacity change from 0 to 43464 May 22 19:11:49.556654 kernel: loop4: p1 p2 p3 May 22 19:11:49.562987 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:49.563232 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:49.563307 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:49.564276 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:49.564324 (sd-merge)[2225]: device-mapper: reload ioctl on loop4p1-verity (254:5) failed: Invalid argument May 22 19:11:49.566923 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:49.582645 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. May 22 19:11:49.584726 (sd-merge)[2225]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. May 22 19:11:49.588477 systemd[1]: Finished systemd-confext.service - Merge System Configuration Images into /etc/. May 22 19:11:49.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:49.598189 kernel: audit: type=1130 audit(1779477109.590:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:49.595767 systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/... May 22 19:11:49.622639 kernel: loop4: detected capacity change from 0 to 378016 May 22 19:11:49.623747 kernel: loop4: p1 p2 p3 May 22 19:11:49.623889 kernel: kvm_intel: Using Hyper-V Enlightened VMCS May 22 19:11:49.626364 kernel: loop4: p1 p2 p3 May 22 19:11:49.628690 kernel: cpu_based_exec_ctrl unsupported with eVMCS: 0x20000 May 22 19:11:49.766032 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:49.766127 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:49.767120 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:49.767970 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:49.768232 systemd-sysext[2234]: device-mapper: reload ioctl on loop4p1-verity (254:5) failed: Invalid argument May 22 19:11:49.771706 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.280652 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. May 22 19:11:50.283074 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - MSFT NVMe Accelerator v1.0 OEM. May 22 19:11:50.299750 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM... May 22 19:11:50.311658 kernel: loop4: detected capacity change from 0 to 136912 May 22 19:11:50.313783 kernel: loop4: p1 p2 p3 May 22 19:11:50.317096 kernel: loop4: p1 p2 p3 May 22 19:11:50.337266 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.337322 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:50.338413 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:50.339773 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:50.340139 systemd-sysext[2234]: device-mapper: reload ioctl on loop4p1-verity (254:5) failed: Invalid argument May 22 19:11:50.343642 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.376785 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM. May 22 19:11:50.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:50.383636 kernel: audit: type=1130 audit(1779477110.375:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:50.389666 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. May 22 19:11:50.413647 kernel: loop4: detected capacity change from 0 to 178200 May 22 19:11:50.416008 kernel: loop4: p1 p2 p3 May 22 19:11:50.417688 kernel: loop4: p1 p2 p3 May 22 19:11:50.624665 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.624756 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:50.629110 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:50.631578 systemd-sysext[2234]: device-mapper: reload ioctl on loop4p1-verity (254:5) failed: Invalid argument May 22 19:11:50.631799 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:50.636653 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.675121 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. May 22 19:11:50.698652 kernel: loop4: detected capacity change from 0 to 378016 May 22 19:11:50.700657 kernel: loop4: p1 p2 p3 May 22 19:11:50.703471 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. May 22 19:11:50.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:50.711642 kernel: audit: type=1130 audit(1779477110.704:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:50.724829 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.724941 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:50.725994 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:50.726680 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:50.726967 (sd-merge)[2275]: device-mapper: reload ioctl on loop4p1-verity (254:5) failed: Invalid argument May 22 19:11:50.729641 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.820761 systemd-networkd[2148]: eth0: Gained IPv6LL May 22 19:11:50.822515 systemd[1]: Finished systemd-networkd-wait-online.service - Wait for Network to be Configured. May 22 19:11:50.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:50.825168 systemd[1]: Reached target network-online.target - Network is Online. May 22 19:11:50.830752 kernel: audit: type=1130 audit(1779477110.823:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:50.834036 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. May 22 19:11:50.837645 kernel: loop5: detected capacity change from 0 to 136912 May 22 19:11:50.839676 kernel: loop5: p1 p2 p3 May 22 19:11:50.857175 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.857224 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:50.858809 kernel: device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:50.859927 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:50.859997 (sd-merge)[2275]: device-mapper: reload ioctl on loop5p1-verity (254:6) failed: Invalid argument May 22 19:11:50.862641 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.892680 kernel: erofs: (device dm-6): mounted with root inode @ nid 39. May 22 19:11:50.895647 kernel: loop6: detected capacity change from 0 to 178200 May 22 19:11:50.898674 kernel: loop6: p1 p2 p3 May 22 19:11:50.901643 kernel: loop6: p1 p2 p3 May 22 19:11:50.926715 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.933648 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc May 22 19:11:50.937640 kernel: device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) May 22 19:11:50.937690 kernel: device-mapper: ioctl: error adding target to table May 22 19:11:50.938081 (sd-merge)[2275]: device-mapper: reload ioctl on loop6p1-verity (254:7) failed: Invalid argument May 22 19:11:50.941647 kernel: device-mapper: verity: sha256 using shash "sha256-ni" May 22 19:11:50.976644 kernel: erofs: (device dm-7): mounted with root inode @ nid 39. May 22 19:11:50.977103 (sd-merge)[2275]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. May 22 19:11:50.979490 systemd[1]: Finished systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/. May 22 19:11:50.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:50.983656 kernel: audit: type=1130 audit(1779477110.979:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:50.984009 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... May 22 19:11:51.009517 systemd-tmpfiles[2300]: /usr/lib/tmpfiles.d/nfs-utils.conf:6: Duplicate line for path "/var/lib/nfs/sm", ignoring. May 22 19:11:51.009544 systemd-tmpfiles[2300]: /usr/lib/tmpfiles.d/nfs-utils.conf:7: Duplicate line for path "/var/lib/nfs/sm.bak", ignoring. May 22 19:11:51.009797 systemd-tmpfiles[2300]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. May 22 19:11:51.010873 systemd-tmpfiles[2300]: ACLs are not supported, ignoring. May 22 19:11:51.010955 systemd-tmpfiles[2300]: ACLs are not supported, ignoring. May 22 19:11:51.072307 systemd-tmpfiles[2300]: Detected autofs mount point /boot during canonicalization of boot. May 22 19:11:51.072319 systemd-tmpfiles[2300]: Skipping /boot May 22 19:11:51.076266 systemd-tmpfiles[2300]: Detected autofs mount point /boot during canonicalization of boot. May 22 19:11:51.076279 systemd-tmpfiles[2300]: Skipping /boot May 22 19:11:51.084603 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. May 22 19:11:51.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:51.093766 systemd[1]: Starting audit-rules.service - Load Audit Rules... May 22 19:11:51.096310 kernel: audit: type=1130 audit(1779477111.087:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:51.098757 systemd[1]: Starting clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs... May 22 19:11:51.105737 systemd[1]: Starting ldconfig.service - Rebuild Dynamic Linker Cache... May 22 19:11:51.109754 systemd[1]: Starting systemd-journal-catalog-update.service - Rebuild Journal Catalog... May 22 19:11:51.113326 systemd[1]: Starting systemd-update-utmp.service - Record System Boot/Shutdown in UTMP... May 22 19:11:51.154000 audit[2310]: AUDIT1127 pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' May 22 19:11:51.160402 systemd[1]: Finished systemd-update-utmp.service - Record System Boot/Shutdown in UTMP. May 22 19:11:51.161683 kernel: audit: type=1127 audit(1779477111.154:164): pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' May 22 19:11:51.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:51.612204 systemd[1]: Finished systemd-journal-catalog-update.service - Rebuild Journal Catalog. May 22 19:11:51.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:52.511853 systemd[1]: Finished clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs. May 22 19:11:52.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:11:52.514922 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). May 22 19:11:52.599000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 May 22 19:11:52.599000 audit[2333]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe61bd3610 a2=420 a3=0 items=0 ppid=2306 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:11:52.599000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 May 22 19:11:52.601250 augenrules[2333]: No rules May 22 19:11:52.601501 systemd[1]: audit-rules.service: Deactivated successfully. May 22 19:11:52.601776 systemd[1]: Finished audit-rules.service - Load Audit Rules. May 22 19:12:02.388653 ldconfig[2308]: /sbin/ldconfig: /usr/lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. May 22 19:12:02.397585 systemd[1]: Finished ldconfig.service - Rebuild Dynamic Linker Cache. May 22 19:12:02.402900 systemd[1]: Starting systemd-update-done.service - Update is Completed... May 22 19:12:02.422202 systemd[1]: Finished systemd-update-done.service - Update is Completed. May 22 19:12:02.425994 systemd[1]: Reached target sysinit.target - System Initialization. May 22 19:12:02.427403 systemd[1]: Started motdgen.path - Watch for update engine configuration changes. May 22 19:12:02.429196 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path - Watch for a cloud-config at /var/lib/flatcar-install/user_data. May 22 19:12:02.432601 systemd[1]: Started google-oslogin-cache.timer - NSS cache refresh timer. May 22 19:12:02.434122 systemd[1]: Started logrotate.timer - Daily rotation of log files. May 22 19:12:02.435490 systemd[1]: Started mdadm.timer - Weekly check for MD array's redundancy information.. May 22 19:12:02.438750 systemd[1]: Started systemd-sysupdate-reboot.timer - Reboot Automatically After System Update. May 22 19:12:02.441741 systemd[1]: Started systemd-sysupdate.timer - Automatic System Update. May 22 19:12:02.443739 systemd[1]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories. May 22 19:12:02.446680 systemd[1]: update-engine-stub.timer - Update Engine Stub Timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). May 22 19:12:02.446729 systemd[1]: Reached target paths.target - Path Units. May 22 19:12:02.449688 systemd[1]: Reached target timers.target - Timer Units. May 22 19:12:02.453242 systemd[1]: Listening on dbus.socket - D-Bus System Message Bus Socket. May 22 19:12:02.468138 systemd[1]: Starting docker.socket - Docker Socket for the API... May 22 19:12:02.470936 systemd[1]: Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local). May 22 19:12:02.475097 systemd[1]: Listening on sshd.socket - OpenSSH Server Socket. May 22 19:12:02.477977 systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket. May 22 19:12:02.481116 systemd[1]: Listening on systemd-logind-varlink.socket - User Login Management Varlink Socket. May 22 19:12:02.482866 systemd[1]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. May 22 19:12:02.486233 systemd[1]: Listening on docker.socket - Docker Socket for the API. May 22 19:12:02.489457 systemd[1]: Reached target sockets.target - Socket Units. May 22 19:12:02.490723 systemd[1]: Reached target basic.target - Basic System. May 22 19:12:02.491860 systemd[1]: addon-config@oem.service - Configure Addon /oem was skipped because no trigger condition checks were met. May 22 19:12:02.491886 systemd[1]: addon-run@oem.service - Run Addon /oem was skipped because no trigger condition checks were met. May 22 19:12:02.493542 systemd[1]: Starting chronyd.service - NTP client/server... May 22 19:12:02.497744 systemd[1]: Starting containerd.service - containerd container runtime... May 22 19:12:02.501746 systemd[1]: Starting coreos-metadata.service - Flatcar Metadata Agent... May 22 19:12:02.507498 systemd[1]: Starting dbus.service - D-Bus System Message Bus... May 22 19:12:02.513027 systemd[1]: Starting dracut-shutdown.service - Restore /run/initramfs on shutdown... May 22 19:12:02.519795 systemd[1]: Starting enable-oem-cloudinit.service - Enable cloudinit... May 22 19:12:02.530760 systemd[1]: Starting extend-filesystems.service - Extend Filesystems... May 22 19:12:02.534720 systemd[1]: flatcar-setup-environment.service - Modifies /etc/environment for CoreOS was skipped because of an unmet condition check (ConditionPathExists=/oem/bin/flatcar-setup-environment). May 22 19:12:02.536260 systemd[1]: Starting google-oslogin-cache.service - NSS cache refresh... May 22 19:12:02.540727 systemd[1]: hv_fcopy_uio_daemon.service - Hyper-V FCOPY UIO daemon was skipped because of an unmet condition check (ConditionPathExists=/sys/bus/vmbus/devices/eb765408-105f-49b6-b4aa-c123b64d17d4/uio). May 22 19:12:02.542927 systemd[1]: Started hv_kvp_daemon.service - Hyper-V KVP daemon. May 22 19:12:02.545218 systemd[1]: hv_vss_daemon.service - Hyper-V VSS daemon was skipped because of an unmet condition check (ConditionPathExists=/dev/vmbus/hv_vss). May 22 19:12:02.549786 systemd[1]: Starting motdgen.service - Generate /run/flatcar/motd... May 22 19:12:02.552752 systemd[1]: Starting nvidia.service - NVIDIA Configure Service... May 22 19:12:02.559643 systemd[1]: Starting ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline... May 22 19:12:02.562208 KVP[2355]: KVP starting; pid is:2355 May 22 19:12:02.569666 KVP[2355]: KVP LIC Version: 3.1 May 22 19:12:02.574183 chronyd[2344]: chronyd version 4.8 starting (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER -SIGND +NTS +SECHASH +IPV6 -DEBUG) May 22 19:12:02.575718 kernel: hv_utils: KVP IC version 4.0 May 22 19:12:02.569831 systemd[1]: Starting sshd-keygen.service - Generate sshd host keys... May 22 19:12:02.580877 systemd[1]: Starting systemd-logind.service - User Login Management... May 22 19:12:02.583089 systemd[1]: tcsd.service - TCG Core Services Daemon was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). May 22 19:12:02.586522 systemd[1]: Starting update-engine.service - Update Engine... May 22 19:12:02.589434 systemd[1]: Starting update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition... May 22 19:12:02.597900 systemd[1]: Finished dracut-shutdown.service - Restore /run/initramfs on shutdown. May 22 19:12:02.603062 jq[2352]: false May 22 19:12:02.604884 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. May 22 19:12:02.605137 systemd[1]: Finished ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline. May 22 19:12:02.611046 extend-filesystems[2353]: Found /dev/nvme0n1p6 May 22 19:12:02.612200 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. May 22 19:12:02.616916 systemd[1]: Condition check resulted in enable-oem-cloudinit.service - Enable cloudinit being skipped. May 22 19:12:02.625472 jq[2367]: true May 22 19:12:02.638131 jq[2384]: true May 22 19:12:02.642244 google_oslogin_nss_cache[2354]: oslogin_cache_refresh[2354]: Refreshing passwd entry cache May 22 19:12:02.642255 oslogin_cache_refresh[2354]: Refreshing passwd entry cache May 22 19:12:02.664962 systemd[1]: motdgen.service: Deactivated successfully. May 22 19:12:02.669807 systemd[1]: Finished motdgen.service - Generate /run/flatcar/motd. May 22 19:12:02.670652 google_oslogin_nss_cache[2354]: oslogin_cache_refresh[2354]: Failure getting users, quitting May 22 19:12:02.670652 google_oslogin_nss_cache[2354]: oslogin_cache_refresh[2354]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. May 22 19:12:02.670652 google_oslogin_nss_cache[2354]: oslogin_cache_refresh[2354]: Refreshing group entry cache May 22 19:12:02.670422 oslogin_cache_refresh[2354]: Failure getting users, quitting May 22 19:12:02.670439 oslogin_cache_refresh[2354]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. May 22 19:12:02.670486 oslogin_cache_refresh[2354]: Refreshing group entry cache May 22 19:12:02.679795 google_oslogin_nss_cache[2354]: oslogin_cache_refresh[2354]: Failure getting groups, quitting May 22 19:12:02.679844 oslogin_cache_refresh[2354]: Failure getting groups, quitting May 22 19:12:02.680646 google_oslogin_nss_cache[2354]: oslogin_cache_refresh[2354]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. May 22 19:12:02.679855 oslogin_cache_refresh[2354]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. May 22 19:12:02.680967 systemd[1]: google-oslogin-cache.service: Deactivated successfully. May 22 19:12:02.681165 systemd[1]: Finished google-oslogin-cache.service - NSS cache refresh. May 22 19:12:02.709829 extend-filesystems[2353]: Found /dev/nvme0n1p9 May 22 19:12:02.711878 extend-filesystems[2353]: Checking size of /dev/nvme0n1p9 May 22 19:12:02.719079 chronyd[2344]: Timezone right/UTC failed leap second check, ignoring May 22 19:12:02.719394 systemd[1]: Started chronyd.service - NTP client/server. May 22 19:12:02.719246 chronyd[2344]: Loaded seccomp filter (level 2) May 22 19:12:02.770212 systemd-logind[2364]: New seat seat0. May 22 19:12:02.772159 systemd-logind[2364]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 22 19:12:02.772416 systemd[1]: Started systemd-logind.service - User Login Management. May 22 19:12:02.803242 update_engine[2366]: I20260522 19:12:02.803133 2366 main.cc:92] Flatcar Update Engine starting May 22 19:12:02.821687 extend-filesystems[2353]: Resized partition /dev/nvme0n1p9 May 22 19:12:02.837989 extend-filesystems[2434]: resize2fs 1.47.3 (8-Jul-2025) May 22 19:12:02.870596 systemd[1]: Finished nvidia.service - NVIDIA Configure Service. May 22 19:12:03.182160 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 6359552 to 6376955 blocks May 22 19:12:03.182272 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 6376955 May 22 19:12:03.667171 dbus-daemon[2347]: [system] SELinux support is enabled May 22 19:12:03.961320 coreos-metadata[2346]: May 22 19:12:03.925 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 May 22 19:12:03.961320 coreos-metadata[2346]: May 22 19:12:03.930 INFO Fetch successful May 22 19:12:03.961320 coreos-metadata[2346]: May 22 19:12:03.930 INFO Fetching http://168.63.129.16/machine/?comp=goalstate: Attempt #1 May 22 19:12:03.961320 coreos-metadata[2346]: May 22 19:12:03.934 INFO Fetch successful May 22 19:12:03.961320 coreos-metadata[2346]: May 22 19:12:03.934 INFO Fetching http://168.63.129.16/machine/4bb3f5dc-924f-4c2a-892d-6b8430ae30b0/19137283%2D868c%2D4daf%2D8cb8%2D1455692ab38e.%5Fci%2D4694.0.1%2Da%2Df792323a16?comp=config&type=sharedConfig&incarnation=1: Attempt #1 May 22 19:12:03.961320 coreos-metadata[2346]: May 22 19:12:03.935 INFO Fetch successful May 22 19:12:03.961320 coreos-metadata[2346]: May 22 19:12:03.935 INFO Fetching http://169.254.169.254/metadata/instance/compute/vmSize?api-version=2017-08-01&format=text: Attempt #1 May 22 19:12:03.961320 coreos-metadata[2346]: May 22 19:12:03.946 INFO Fetch successful May 22 19:12:03.667486 systemd[1]: Started dbus.service - D-Bus System Message Bus. May 22 19:12:03.961786 update_engine[2366]: I20260522 19:12:03.671378 2366 update_check_scheduler.cc:74] Next update check in 10m48s May 22 19:12:03.679577 dbus-daemon[2347]: [system] Successfully activated service 'org.freedesktop.systemd1' May 22 19:12:03.680147 systemd[1]: Started update-engine.service - Update Engine. May 22 19:12:03.799599 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service - Load cloud-config from /usr/share/oem/cloud-config.yml was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). May 22 19:12:03.799863 systemd[1]: Reached target system-config.target - Load system-provided cloud configs. May 22 19:12:03.802877 systemd[1]: user-cloudinit-proc-cmdline.service - Load cloud-config from url defined in /proc/cmdline was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). May 22 19:12:03.802981 systemd[1]: Reached target user-config.target - Load user-provided cloud configs. May 22 19:12:03.808926 systemd[1]: Started locksmithd.service - Cluster reboot manager. May 22 19:12:03.970010 systemd[1]: Finished coreos-metadata.service - Flatcar Metadata Agent. May 22 19:12:03.972206 systemd[1]: packet-phone-home.service - Report Success to Packet was skipped because no trigger condition checks were met. May 22 19:12:04.585919 locksmithd[2453]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" May 22 19:12:04.813805 extend-filesystems[2434]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required May 22 19:12:04.813805 extend-filesystems[2434]: old_desc_blocks = 4, new_desc_blocks = 4 May 22 19:12:04.813805 extend-filesystems[2434]: The filesystem on /dev/nvme0n1p9 is now 6376955 (4k) blocks long. May 22 19:12:04.821169 sshd_keygen[2412]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 May 22 19:12:04.767665 systemd[1]: extend-filesystems.service: Deactivated successfully. May 22 19:12:04.821346 extend-filesystems[2353]: Resized filesystem in /dev/nvme0n1p9 May 22 19:12:04.767923 systemd[1]: Finished extend-filesystems.service - Extend Filesystems. May 22 19:12:04.836892 systemd[1]: Finished sshd-keygen.service - Generate sshd host keys. May 22 19:12:04.842745 systemd[1]: Starting issuegen.service - Generate /run/issue... May 22 19:12:04.846856 systemd[1]: Starting waagent.service - Microsoft Azure Linux Agent... May 22 19:12:04.860586 systemd[1]: issuegen.service: Deactivated successfully. May 22 19:12:04.860989 systemd[1]: Finished issuegen.service - Generate /run/issue. May 22 19:12:04.865861 systemd[1]: Starting systemd-user-sessions.service - Permit User Sessions... May 22 19:12:04.873315 systemd[1]: Started waagent.service - Microsoft Azure Linux Agent. May 22 19:12:04.905330 bash[2400]: Updated "/home/core/.ssh/authorized_keys" May 22 19:12:04.906347 systemd[1]: Finished update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition. May 22 19:12:04.910900 systemd[1]: sshkeys.service was skipped because no trigger condition checks were met. May 22 19:12:04.911481 systemd[1]: Finished systemd-user-sessions.service - Permit User Sessions. May 22 19:12:04.915313 systemd[1]: Started getty@tty1.service - Getty on tty1. May 22 19:12:04.920930 systemd[1]: Started serial-getty@ttyS0.service - Serial Getty on ttyS0. May 22 19:12:04.925844 systemd[1]: Reached target getty.target - Login Prompts. May 22 19:12:07.694071 containerd[2402]: time="2026-05-22T19:12:07Z" level=warning msg="Ignoring unknown key in TOML" column=1 error="strict mode: fields in the document are missing in the target struct" file=/usr/share/containerd/config.toml key=subreaper row=8 May 22 19:12:07.695161 containerd[2402]: time="2026-05-22T19:12:07.695082172Z" level=info msg="starting containerd" revision=dea7da592f5d1d2b7755e3a161be07f43fad8f75 version=v2.2.1 May 22 19:12:07.705262 containerd[2402]: time="2026-05-22T19:12:07.705221840Z" level=warning msg="Configuration migrated from version 2, use `containerd config migrate` to avoid migration" t="14.043µs" May 22 19:12:07.705262 containerd[2402]: time="2026-05-22T19:12:07.705250608Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1 May 22 19:12:07.705374 containerd[2402]: time="2026-05-22T19:12:07.705288844Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1 May 22 19:12:07.705374 containerd[2402]: time="2026-05-22T19:12:07.705301352Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1 May 22 19:12:07.705471 containerd[2402]: time="2026-05-22T19:12:07.705452702Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1 May 22 19:12:07.705500 containerd[2402]: time="2026-05-22T19:12:07.705470134Z" level=info msg="loading plugin" id=io.containerd.mount-handler.v1.erofs type=io.containerd.mount-handler.v1 May 22 19:12:07.705500 containerd[2402]: time="2026-05-22T19:12:07.705481641Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 May 22 19:12:07.705539 containerd[2402]: time="2026-05-22T19:12:07.705526212Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 May 22 19:12:07.705565 containerd[2402]: time="2026-05-22T19:12:07.705536105Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 May 22 19:12:07.706133 containerd[2402]: time="2026-05-22T19:12:07.705842919Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 May 22 19:12:07.706133 containerd[2402]: time="2026-05-22T19:12:07.705873255Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 May 22 19:12:07.706133 containerd[2402]: time="2026-05-22T19:12:07.705892592Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 May 22 19:12:07.706133 containerd[2402]: time="2026-05-22T19:12:07.705931829Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 May 22 19:12:07.721583 containerd[2402]: time="2026-05-22T19:12:07.721547021Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1 May 22 19:12:07.721877 containerd[2402]: time="2026-05-22T19:12:07.721648009Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1 May 22 19:12:07.721877 containerd[2402]: time="2026-05-22T19:12:07.721837923Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 May 22 19:12:07.721877 containerd[2402]: time="2026-05-22T19:12:07.721864312Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 May 22 19:12:07.721877 containerd[2402]: time="2026-05-22T19:12:07.721874501Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1 May 22 19:12:07.722306 containerd[2402]: time="2026-05-22T19:12:07.722283118Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1 May 22 19:12:07.722542 containerd[2402]: time="2026-05-22T19:12:07.722523709Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1 May 22 19:12:07.722613 containerd[2402]: time="2026-05-22T19:12:07.722599062Z" level=info msg="metadata content store policy set" policy=shared May 22 19:12:08.171427 containerd[2402]: time="2026-05-22T19:12:08.171286105Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1 May 22 19:12:08.171834 containerd[2402]: time="2026-05-22T19:12:08.171800486Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1 May 22 19:12:08.171922 containerd[2402]: time="2026-05-22T19:12:08.171863784Z" level=info msg="built-in NRI default validator is disabled" May 22 19:12:08.171922 containerd[2402]: time="2026-05-22T19:12:08.171871609Z" level=info msg="runtime interface created" May 22 19:12:08.171922 containerd[2402]: time="2026-05-22T19:12:08.171876970Z" level=info msg="created NRI interface" May 22 19:12:08.171922 containerd[2402]: time="2026-05-22T19:12:08.171890031Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 May 22 19:12:08.274475 containerd[2402]: time="2026-05-22T19:12:08.274426909Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1 May 22 19:12:08.274475 containerd[2402]: time="2026-05-22T19:12:08.274475569Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1 May 22 19:12:08.274475 containerd[2402]: time="2026-05-22T19:12:08.274489238Z" level=info msg="loading plugin" id=io.containerd.mount-manager.v1.bolt type=io.containerd.mount-manager.v1 May 22 19:12:08.274675 containerd[2402]: time="2026-05-22T19:12:08.274617600Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1 May 22 19:12:08.274675 containerd[2402]: time="2026-05-22T19:12:08.274652673Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1 May 22 19:12:08.274675 containerd[2402]: time="2026-05-22T19:12:08.274663466Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1 May 22 19:12:08.274733 containerd[2402]: time="2026-05-22T19:12:08.274676418Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1 May 22 19:12:08.274733 containerd[2402]: time="2026-05-22T19:12:08.274690296Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1 May 22 19:12:08.274733 containerd[2402]: time="2026-05-22T19:12:08.274703326Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1 May 22 19:12:08.274733 containerd[2402]: time="2026-05-22T19:12:08.274715821Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1 May 22 19:12:08.274733 containerd[2402]: time="2026-05-22T19:12:08.274727697Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1 May 22 19:12:08.274823 containerd[2402]: time="2026-05-22T19:12:08.274740100Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2 May 22 19:12:08.274876 containerd[2402]: time="2026-05-22T19:12:08.274859987Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1 May 22 19:12:08.274903 containerd[2402]: time="2026-05-22T19:12:08.274888894Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1 May 22 19:12:08.274922 containerd[2402]: time="2026-05-22T19:12:08.274908868Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1 May 22 19:12:08.274941 containerd[2402]: time="2026-05-22T19:12:08.274929168Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1 May 22 19:12:08.274963 containerd[2402]: time="2026-05-22T19:12:08.274941577Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1 May 22 19:12:08.274963 containerd[2402]: time="2026-05-22T19:12:08.274952685Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1 May 22 19:12:08.275000 containerd[2402]: time="2026-05-22T19:12:08.274964952Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1 May 22 19:12:08.275000 containerd[2402]: time="2026-05-22T19:12:08.274983774Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1 May 22 19:12:08.275000 containerd[2402]: time="2026-05-22T19:12:08.274995944Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.mounts type=io.containerd.grpc.v1 May 22 19:12:08.275055 containerd[2402]: time="2026-05-22T19:12:08.275006185Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1 May 22 19:12:08.275055 containerd[2402]: time="2026-05-22T19:12:08.275019082Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1 May 22 19:12:08.275055 containerd[2402]: time="2026-05-22T19:12:08.275029732Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1 May 22 19:12:08.275282 containerd[2402]: time="2026-05-22T19:12:08.275181926Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1 May 22 19:12:08.275347 containerd[2402]: time="2026-05-22T19:12:08.275329851Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\" for snapshotter \"overlayfs\"" May 22 19:12:08.275391 containerd[2402]: time="2026-05-22T19:12:08.275383996Z" level=info msg="Start snapshots syncer" May 22 19:12:08.275468 containerd[2402]: time="2026-05-22T19:12:08.275438191Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1 May 22 19:12:08.275824 containerd[2402]: time="2026-05-22T19:12:08.275770697Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":null,\"ContainerAnnotations\":null,\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":true},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":true,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":null,\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}" May 22 19:12:08.275955 containerd[2402]: time="2026-05-22T19:12:08.275834302Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1 May 22 19:12:08.275955 containerd[2402]: time="2026-05-22T19:12:08.275881932Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1 May 22 19:12:08.276015 containerd[2402]: time="2026-05-22T19:12:08.275993129Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1 May 22 19:12:08.276045 containerd[2402]: time="2026-05-22T19:12:08.276024593Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1 May 22 19:12:08.276045 containerd[2402]: time="2026-05-22T19:12:08.276037994Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276049309Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276063682Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276074943Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276085666Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276099690Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276111156Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276138565Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276153875Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276167761Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276178752Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276188409Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276199981Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276211102Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1 May 22 19:12:08.276371 containerd[2402]: time="2026-05-22T19:12:08.276223858Z" level=info msg="Connect containerd service" May 22 19:12:08.276740 containerd[2402]: time="2026-05-22T19:12:08.276246087Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this" May 22 19:12:08.277071 containerd[2402]: time="2026-05-22T19:12:08.277044461Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" May 22 19:12:09.677518 containerd[2402]: time="2026-05-22T19:12:09.677449166Z" level=info msg="Start subscribing containerd event" May 22 19:12:09.677959 containerd[2402]: time="2026-05-22T19:12:09.677891270Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc May 22 19:12:09.677959 containerd[2402]: time="2026-05-22T19:12:09.677942714Z" level=info msg=serving... address=/run/containerd/containerd.sock May 22 19:12:09.678156 containerd[2402]: time="2026-05-22T19:12:09.678069053Z" level=info msg="Start recovering state" May 22 19:12:09.678363 containerd[2402]: time="2026-05-22T19:12:09.678337476Z" level=info msg="Start event monitor" May 22 19:12:09.678473 containerd[2402]: time="2026-05-22T19:12:09.678354433Z" level=info msg="Start cni network conf syncer for default" May 22 19:12:09.678473 containerd[2402]: time="2026-05-22T19:12:09.678408271Z" level=info msg="Start streaming server" May 22 19:12:09.678473 containerd[2402]: time="2026-05-22T19:12:09.678418312Z" level=info msg="Registered namespace \"k8s.io\" with NRI" May 22 19:12:09.678473 containerd[2402]: time="2026-05-22T19:12:09.678426786Z" level=info msg="runtime interface starting up..." May 22 19:12:09.678473 containerd[2402]: time="2026-05-22T19:12:09.678433093Z" level=info msg="starting plugins..." May 22 19:12:09.678473 containerd[2402]: time="2026-05-22T19:12:09.678445820Z" level=info msg="Synchronizing NRI (plugin) with current runtime state" May 22 19:12:09.679426 systemd[1]: Started containerd.service - containerd container runtime. May 22 19:12:09.682397 systemd[1]: Reached target multi-user.target - Multi-User System. May 22 19:12:09.684817 containerd[2402]: time="2026-05-22T19:12:09.683130857Z" level=info msg="containerd successfully booted in 1.985400s" May 22 19:12:09.686414 systemd[1]: Startup finished in 5.051s (kernel) + 13.659s (initrd) + 32.163s (userspace) = 50.874s. May 22 19:12:11.335157 login[2492]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) May 22 19:12:11.335157 login[2491]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) May 22 19:12:11.341159 systemd[1]: Created slice user-500.slice - User Slice of UID 500. May 22 19:12:11.342141 systemd[1]: Starting user-runtime-dir@500.service - User Runtime Directory /run/user/500... May 22 19:12:11.347673 systemd-logind[2364]: New session '2' of user 'core' with class 'user-light' and type 'tty'. May 22 19:12:11.351065 systemd-logind[2364]: New session '1' of user 'core' with class 'user-light' and type 'tty'. May 22 19:12:11.390478 systemd[1]: Finished user-runtime-dir@500.service - User Runtime Directory /run/user/500. May 22 19:12:11.401012 systemd[1]: Started session-1.scope - Session 1 of User core. May 22 19:12:11.401872 systemd[1]: Started session-2.scope - Session 2 of User core. May 22 19:12:14.212470 waagent[2488]: 2026-05-22T19:12:14.212380Z INFO Daemon Daemon Azure Linux Agent Version: 2.12.0.4 May 22 19:12:14.213999 waagent[2488]: 2026-05-22T19:12:14.213948Z INFO Daemon Daemon OS: flatcar 4694.0.1 May 22 19:12:14.215136 waagent[2488]: 2026-05-22T19:12:14.215066Z INFO Daemon Daemon Python: 3.12.12 May 22 19:12:14.217098 waagent[2488]: 2026-05-22T19:12:14.216315Z INFO Daemon Daemon Run daemon May 22 19:12:14.217901 waagent[2488]: 2026-05-22T19:12:14.217653Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='4694.0.1' May 22 19:12:14.219813 waagent[2488]: 2026-05-22T19:12:14.219770Z INFO Daemon Daemon Using waagent for provisioning May 22 19:12:14.221270 waagent[2488]: 2026-05-22T19:12:14.221226Z INFO Daemon Daemon Activate resource disk May 22 19:12:14.222362 waagent[2488]: 2026-05-22T19:12:14.221955Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb May 22 19:12:14.225389 waagent[2488]: 2026-05-22T19:12:14.225351Z INFO Daemon Daemon Found device: None May 22 19:12:14.226434 waagent[2488]: 2026-05-22T19:12:14.226400Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology May 22 19:12:14.228290 waagent[2488]: 2026-05-22T19:12:14.228260Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 May 22 19:12:14.231011 waagent[2488]: 2026-05-22T19:12:14.230972Z INFO Daemon Daemon Clean protocol and wireserver endpoint May 22 19:12:14.232508 waagent[2488]: 2026-05-22T19:12:14.232480Z INFO Daemon Daemon Running default provisioning handler May 22 19:12:14.239490 waagent[2488]: 2026-05-22T19:12:14.239317Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 4. May 22 19:12:14.242574 waagent[2488]: 2026-05-22T19:12:14.242533Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' May 22 19:12:14.244717 waagent[2488]: 2026-05-22T19:12:14.244683Z INFO Daemon Daemon cloud-init is enabled: False May 22 19:12:14.245893 waagent[2488]: 2026-05-22T19:12:14.245843Z INFO Daemon Daemon Copying ovf-env.xml May 22 19:12:14.487700 waagent[2488]: 2026-05-22T19:12:14.485134Z INFO Daemon Daemon Successfully mounted dvd May 22 19:12:14.591548 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. May 22 19:12:14.593650 waagent[2488]: 2026-05-22T19:12:14.592429Z INFO Daemon Daemon Detect protocol endpoint May 22 19:12:14.594267 waagent[2488]: 2026-05-22T19:12:14.594219Z INFO Daemon Daemon Clean protocol and wireserver endpoint May 22 19:12:14.595757 waagent[2488]: 2026-05-22T19:12:14.595722Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler May 22 19:12:14.596696 waagent[2488]: 2026-05-22T19:12:14.596669Z INFO Daemon Daemon Test for route to 168.63.129.16 May 22 19:12:14.598506 waagent[2488]: 2026-05-22T19:12:14.598471Z INFO Daemon Daemon Route to 168.63.129.16 exists May 22 19:12:14.599683 waagent[2488]: 2026-05-22T19:12:14.599559Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 May 22 19:12:14.726151 waagent[2488]: 2026-05-22T19:12:14.726105Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 May 22 19:12:14.727583 waagent[2488]: 2026-05-22T19:12:14.726501Z INFO Daemon Daemon Wire protocol version:2012-11-30 May 22 19:12:14.727583 waagent[2488]: 2026-05-22T19:12:14.726588Z INFO Daemon Daemon Server preferred version:2015-04-05 May 22 19:12:15.122136 waagent[2488]: 2026-05-22T19:12:15.122040Z INFO Daemon Daemon Initializing goal state during protocol detection May 22 19:12:15.122509 waagent[2488]: 2026-05-22T19:12:15.122366Z INFO Daemon Daemon Forcing an update of the goal state. May 22 19:12:15.128429 waagent[2488]: 2026-05-22T19:12:15.128380Z INFO Daemon Fetched a new incarnation for the WireServer goal state [incarnation 1] May 22 19:12:15.143547 waagent[2488]: 2026-05-22T19:12:15.143504Z INFO Daemon Daemon HostGAPlugin version: 1.0.8.184 May 22 19:12:15.146649 waagent[2488]: 2026-05-22T19:12:15.144063Z INFO Daemon May 22 19:12:15.146649 waagent[2488]: 2026-05-22T19:12:15.144256Z INFO Daemon Fetched new vmSettings [HostGAPlugin correlation ID: 376cc8fd-40ad-4fe5-a968-35a2c1ad6e3a eTag: 14449826591381875744 source: Fabric] May 22 19:12:15.146649 waagent[2488]: 2026-05-22T19:12:15.144973Z INFO Daemon The vmSettings originated via Fabric; will ignore them. May 22 19:12:15.146649 waagent[2488]: 2026-05-22T19:12:15.145539Z INFO Daemon May 22 19:12:15.146649 waagent[2488]: 2026-05-22T19:12:15.145686Z INFO Daemon Fetching full goal state from the WireServer [incarnation 1] May 22 19:12:15.149642 waagent[2488]: 2026-05-22T19:12:15.149051Z INFO Daemon Daemon Downloading artifacts profile blob May 22 19:12:15.214891 waagent[2488]: 2026-05-22T19:12:15.214836Z INFO Daemon Downloaded certificate {'thumbprint': '60259F2E1B560558DFFC9833C709479EC75DB415', 'hasPrivateKey': True} May 22 19:12:15.218689 waagent[2488]: 2026-05-22T19:12:15.215357Z INFO Daemon Fetch goal state completed May 22 19:12:15.222168 waagent[2488]: 2026-05-22T19:12:15.222129Z INFO Daemon Daemon Starting provisioning May 22 19:12:15.222548 waagent[2488]: 2026-05-22T19:12:15.222317Z INFO Daemon Daemon Handle ovf-env.xml. May 22 19:12:15.223253 waagent[2488]: 2026-05-22T19:12:15.222563Z INFO Daemon Daemon Set hostname [ci-4694.0.1-a-f792323a16] May 22 19:12:15.253054 waagent[2488]: 2026-05-22T19:12:15.253012Z INFO Daemon Daemon Publish hostname [ci-4694.0.1-a-f792323a16] May 22 19:12:15.254130 waagent[2488]: 2026-05-22T19:12:15.253333Z INFO Daemon Daemon Examine /proc/net/route for primary interface May 22 19:12:15.254130 waagent[2488]: 2026-05-22T19:12:15.253765Z INFO Daemon Daemon Primary interface is [eth0] May 22 19:12:15.262802 systemd-networkd[2148]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network May 22 19:12:15.262811 systemd-networkd[2148]: eth0: Reconfiguring with /usr/lib/systemd/network/zz-default.network. May 22 19:12:15.262880 systemd-networkd[2148]: eth0: DHCP lease lost May 22 19:12:15.279062 waagent[2488]: 2026-05-22T19:12:15.279011Z INFO Daemon Daemon Create user account if not exists May 22 19:12:15.288136 waagent[2488]: 2026-05-22T19:12:15.279269Z INFO Daemon Daemon User core already exists, skip useradd May 22 19:12:15.288136 waagent[2488]: 2026-05-22T19:12:15.279475Z INFO Daemon Daemon Configure sudoer May 22 19:12:15.288136 waagent[2488]: 2026-05-22T19:12:15.280028Z INFO Daemon Daemon Configure sshd May 22 19:12:15.288136 waagent[2488]: 2026-05-22T19:12:15.280472Z INFO Daemon Daemon Added a configuration snippet disabling SSH password-based authentication methods. It also configures SSH client probing to keep connections alive. May 22 19:12:15.288136 waagent[2488]: 2026-05-22T19:12:15.280928Z INFO Daemon Daemon Deploy ssh public key. May 22 19:12:15.288703 systemd-networkd[2148]: eth0: DHCPv4 address 10.0.0.4/24, gateway 10.0.0.1 acquired from 168.63.129.16 May 22 19:12:16.529269 waagent[2488]: 2026-05-22T19:12:16.529224Z INFO Daemon Daemon Provisioning complete May 22 19:12:16.545236 waagent[2488]: 2026-05-22T19:12:16.545198Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping May 22 19:12:16.550232 waagent[2488]: 2026-05-22T19:12:16.545428Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. May 22 19:12:16.550232 waagent[2488]: 2026-05-22T19:12:16.545642Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.12.0.4 is the most current agent May 22 19:12:16.663072 waagent[2572]: 2026-05-22T19:12:16.662997Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.12.0.4) May 22 19:12:16.663465 waagent[2572]: 2026-05-22T19:12:16.663124Z INFO ExtHandler ExtHandler OS: flatcar 4694.0.1 May 22 19:12:16.663465 waagent[2572]: 2026-05-22T19:12:16.663181Z INFO ExtHandler ExtHandler Python: 3.12.12 May 22 19:12:16.663465 waagent[2572]: 2026-05-22T19:12:16.663224Z INFO ExtHandler ExtHandler CPU Arch: x86_64 May 22 19:12:16.694238 waagent[2572]: 2026-05-22T19:12:16.694181Z INFO ExtHandler ExtHandler Distro: flatcar-4694.0.1; OSUtil: FlatcarUtil; AgentService: waagent; Python: 3.12.12; Arch: x86_64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.22.0; May 22 19:12:16.694405 waagent[2572]: 2026-05-22T19:12:16.694361Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file May 22 19:12:16.694477 waagent[2572]: 2026-05-22T19:12:16.694447Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 May 22 19:12:16.704120 waagent[2572]: 2026-05-22T19:12:16.704057Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] May 22 19:12:16.710907 waagent[2572]: 2026-05-22T19:12:16.710876Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.184 May 22 19:12:16.711277 waagent[2572]: 2026-05-22T19:12:16.711246Z INFO ExtHandler May 22 19:12:16.711338 waagent[2572]: 2026-05-22T19:12:16.711315Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 0f5a8c97-5a79-4a23-a094-f254d2a76ba6 eTag: 14449826591381875744 source: Fabric] May 22 19:12:16.711553 waagent[2572]: 2026-05-22T19:12:16.711529Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. May 22 19:12:16.711969 waagent[2572]: 2026-05-22T19:12:16.711937Z INFO ExtHandler May 22 19:12:16.712011 waagent[2572]: 2026-05-22T19:12:16.711994Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] May 22 19:12:16.716642 waagent[2572]: 2026-05-22T19:12:16.716604Z INFO ExtHandler ExtHandler Downloading artifacts profile blob May 22 19:12:16.786437 waagent[2572]: 2026-05-22T19:12:16.786348Z INFO ExtHandler Downloaded certificate {'thumbprint': '60259F2E1B560558DFFC9833C709479EC75DB415', 'hasPrivateKey': True} May 22 19:12:16.786802 waagent[2572]: 2026-05-22T19:12:16.786771Z INFO ExtHandler Fetch goal state completed May 22 19:12:16.800486 waagent[2572]: 2026-05-22T19:12:16.800437Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.5.5 27 Jan 2026 (Library: OpenSSL 3.5.5 27 Jan 2026) May 22 19:12:16.803744 waagent[2572]: 2026-05-22T19:12:16.803701Z INFO ExtHandler ExtHandler WALinuxAgent-2.12.0.4 running as process 2572 May 22 19:12:16.803871 waagent[2572]: 2026-05-22T19:12:16.803846Z INFO ExtHandler ExtHandler ******** AutoUpdate.Enabled is set to False, not processing the operation ******** May 22 19:12:16.804119 waagent[2572]: 2026-05-22T19:12:16.804095Z INFO ExtHandler ExtHandler ******** AutoUpdate.UpdateToLatestVersion is set to False, not processing the operation ******** May 22 19:12:16.805262 waagent[2572]: 2026-05-22T19:12:16.805224Z INFO ExtHandler ExtHandler [CGI] Cgroup monitoring is not supported on ['flatcar', '4694.0.1', '', 'Flatcar Container Linux by Kinvolk'] May 22 19:12:16.805564 waagent[2572]: 2026-05-22T19:12:16.805535Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case distro: ['flatcar', '4694.0.1', '', 'Flatcar Container Linux by Kinvolk'] went from supported to unsupported May 22 19:12:16.805693 waagent[2572]: 2026-05-22T19:12:16.805669Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False May 22 19:12:16.806124 waagent[2572]: 2026-05-22T19:12:16.806097Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules May 22 19:12:17.027417 waagent[2572]: 2026-05-22T19:12:17.027378Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service May 22 19:12:17.027604 waagent[2572]: 2026-05-22T19:12:17.027579Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup May 22 19:12:17.033653 waagent[2572]: 2026-05-22T19:12:17.033422Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now May 22 19:12:17.039248 systemd[1]: Reload requested from client PID 2587 ('systemctl') (unit waagent.service)... May 22 19:12:17.039263 systemd[1]: Reloading... May 22 19:12:17.115667 zram_generator::config[2635]: No configuration found. May 22 19:12:17.121661 systemd-ssh-generator[2631]: Failed to query local AF_VSOCK CID: Cannot assign requested address May 22 19:12:17.173655 (sd-exec-[2612]: /usr/lib/systemd/system-generators/systemd-ssh-generator failed with exit status 1. May 22 19:12:17.349260 systemd[1]: Reloading finished in 309 ms. May 22 19:12:17.373638 waagent[2572]: 2026-05-22T19:12:17.372749Z INFO ExtHandler ExtHandler Successfully added and enabled the waagent-network-setup.service May 22 19:12:17.373638 waagent[2572]: 2026-05-22T19:12:17.372908Z INFO ExtHandler ExtHandler Persistent firewall rules setup successfully May 22 19:12:17.694752 waagent[2572]: 2026-05-22T19:12:17.694606Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. May 22 19:12:17.695121 waagent[2572]: 2026-05-22T19:12:17.694992Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] May 22 19:12:17.695805 waagent[2572]: 2026-05-22T19:12:17.695687Z INFO ExtHandler ExtHandler Starting env monitor service. May 22 19:12:17.696127 waagent[2572]: 2026-05-22T19:12:17.696094Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. May 22 19:12:17.696322 waagent[2572]: 2026-05-22T19:12:17.696296Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file May 22 19:12:17.696391 waagent[2572]: 2026-05-22T19:12:17.696371Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 May 22 19:12:17.696599 waagent[2572]: 2026-05-22T19:12:17.696576Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. May 22 19:12:17.696753 waagent[2572]: 2026-05-22T19:12:17.696721Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread May 22 19:12:17.696968 waagent[2572]: 2026-05-22T19:12:17.696943Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file May 22 19:12:17.697028 waagent[2572]: 2026-05-22T19:12:17.697006Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 May 22 19:12:17.697147 waagent[2572]: 2026-05-22T19:12:17.697125Z INFO EnvHandler ExtHandler Configure routes May 22 19:12:17.697213 waagent[2572]: 2026-05-22T19:12:17.697180Z INFO EnvHandler ExtHandler Gateway:None May 22 19:12:17.697265 waagent[2572]: 2026-05-22T19:12:17.697245Z INFO EnvHandler ExtHandler Routes:None May 22 19:12:17.697465 waagent[2572]: 2026-05-22T19:12:17.697434Z INFO ExtHandler ExtHandler Start Extension Telemetry service. May 22 19:12:17.697707 waagent[2572]: 2026-05-22T19:12:17.697676Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True May 22 19:12:17.697898 waagent[2572]: 2026-05-22T19:12:17.697877Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. May 22 19:12:17.698130 waagent[2572]: 2026-05-22T19:12:17.698103Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: May 22 19:12:17.698130 waagent[2572]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT May 22 19:12:17.698130 waagent[2572]: eth0 00000000 0100000A 0003 0 0 1024 00000000 0 0 0 May 22 19:12:17.698130 waagent[2572]: eth0 0000000A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 May 22 19:12:17.698130 waagent[2572]: eth0 0100000A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 May 22 19:12:17.698130 waagent[2572]: eth0 10813FA8 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 May 22 19:12:17.698130 waagent[2572]: eth0 FEA9FEA9 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 May 22 19:12:17.699660 waagent[2572]: 2026-05-22T19:12:17.698760Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread May 22 19:12:17.709247 waagent[2572]: 2026-05-22T19:12:17.709211Z INFO ExtHandler ExtHandler May 22 19:12:17.709323 waagent[2572]: 2026-05-22T19:12:17.709291Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 3f002b07-a07c-431b-9a8a-8d32461c9758 correlation 4b6d7393-29d8-4b4f-bb96-7aeaa82cba9d created: 2026-05-22T19:10:58.185898Z] May 22 19:12:17.710647 waagent[2572]: 2026-05-22T19:12:17.709722Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. May 22 19:12:17.712255 waagent[2572]: 2026-05-22T19:12:17.711359Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 2 ms] May 22 19:12:17.735908 waagent[2572]: 2026-05-22T19:12:17.735868Z WARNING ExtHandler ExtHandler Failed to get firewall packets: 'iptables -w -t security -L OUTPUT --zero OUTPUT -nxv' failed: 2 (iptables v1.8.11 (nf_tables): Illegal option `--numeric' with this command May 22 19:12:17.735908 waagent[2572]: Try `iptables -h' or 'iptables --help' for more information.) May 22 19:12:17.736378 waagent[2572]: 2026-05-22T19:12:17.736355Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.12.0.4 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: F834E8F9-B11D-45DE-8D51-983CBAA67DE0;DroppedPackets: -1;UpdateGSErrors: 0;AutoUpdate: 0;UpdateMode: SelfUpdate;] May 22 19:12:17.775496 waagent[2572]: 2026-05-22T19:12:17.775447Z INFO MonitorHandler ExtHandler Network interfaces: May 22 19:12:17.775496 waagent[2572]: Executing ['ip', '-a', '-o', 'link']: May 22 19:12:17.775496 waagent[2572]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 May 22 19:12:17.775496 waagent[2572]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:b7:dc:71 brd ff:ff:ff:ff:ff:ff\ alias Network Device\ altname enx7ced8db7dc71 May 22 19:12:17.775496 waagent[2572]: 3: enP30832s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 7c:ed:8d:b7:dc:71 brd ff:ff:ff:ff:ff:ff\ altname enP30832p0s0\ altname enp0s0\ altname ens1 May 22 19:12:17.775496 waagent[2572]: Executing ['ip', '-4', '-a', '-o', 'address']: May 22 19:12:17.775496 waagent[2572]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever May 22 19:12:17.775496 waagent[2572]: 2: eth0 inet 10.0.0.4/24 metric 1024 brd 10.0.0.255 scope global eth0\ valid_lft forever preferred_lft forever May 22 19:12:17.775496 waagent[2572]: Executing ['ip', '-6', '-a', '-o', 'address']: May 22 19:12:17.775496 waagent[2572]: 1: lo inet6 ::1/128 scope host noprefixroute \ valid_lft forever preferred_lft forever May 22 19:12:17.775496 waagent[2572]: 2: eth0 inet6 fe80::7eed:8dff:feb7:dc71/64 scope link proto kernel_ll \ valid_lft forever preferred_lft forever May 22 19:12:17.850458 waagent[2572]: 2026-05-22T19:12:17.850405Z INFO EnvHandler ExtHandler Created firewall rules for the Azure Fabric: May 22 19:12:17.850458 waagent[2572]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) May 22 19:12:17.850458 waagent[2572]: pkts bytes target prot opt in out source destination May 22 19:12:17.850458 waagent[2572]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) May 22 19:12:17.850458 waagent[2572]: pkts bytes target prot opt in out source destination May 22 19:12:17.850458 waagent[2572]: Chain OUTPUT (policy ACCEPT 3 packets, 535 bytes) May 22 19:12:17.850458 waagent[2572]: pkts bytes target prot opt in out source destination May 22 19:12:17.850458 waagent[2572]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 May 22 19:12:17.850458 waagent[2572]: 1 52 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 May 22 19:12:17.850458 waagent[2572]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW May 22 19:12:17.853272 waagent[2572]: 2026-05-22T19:12:17.853223Z INFO EnvHandler ExtHandler Current Firewall rules: May 22 19:12:17.853272 waagent[2572]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) May 22 19:12:17.853272 waagent[2572]: pkts bytes target prot opt in out source destination May 22 19:12:17.853272 waagent[2572]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) May 22 19:12:17.853272 waagent[2572]: pkts bytes target prot opt in out source destination May 22 19:12:17.853272 waagent[2572]: Chain OUTPUT (policy ACCEPT 3 packets, 535 bytes) May 22 19:12:17.853272 waagent[2572]: pkts bytes target prot opt in out source destination May 22 19:12:17.853272 waagent[2572]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 May 22 19:12:17.853272 waagent[2572]: 1 52 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 May 22 19:12:17.853272 waagent[2572]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW May 22 19:12:26.501803 chronyd[2344]: Selected source PHC0 May 22 19:12:37.143807 kernel: hv_balloon: Max. dynamic memory size: 8192 MB May 22 19:12:45.248850 systemd[1]: Created slice system-sshd.slice - Slice /system/sshd. May 22 19:12:45.250211 systemd[1]: Started sshd@0-1-10.0.0.4:22-4.175.71.9:45740.service - OpenSSH per-connection server daemon (4.175.71.9:45740). May 22 19:12:45.720225 sshd[2729]: Accepted publickey for core from 4.175.71.9 port 45740 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:12:45.721380 sshd-session[2729]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:12:45.732050 systemd[1]: Starting user@500.service - User Manager for UID 500... May 22 19:12:45.736364 systemd-logind[2364]: New session '3' of user 'core' with class 'user' and type 'tty'. May 22 19:12:45.742318 (systemd)[2733]: pam_unix(systemd-user:session): session opened for user core(uid=500) by core(uid=0) May 22 19:12:45.744088 systemd-logind[2364]: New session '4' of user 'core' with class 'manager-early' and type 'unspecified'. May 22 19:12:45.944402 systemd[2733]: Queued start job for default target default.target. May 22 19:12:45.955409 systemd[2733]: Created slice app.slice - User Application Slice. May 22 19:12:45.955445 systemd[2733]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. May 22 19:12:45.955461 systemd[2733]: Reached target machines.target - Virtual Machines and Containers. May 22 19:12:45.955506 systemd[2733]: Reached target paths.target - Paths. May 22 19:12:45.955527 systemd[2733]: Reached target timers.target - Timers. May 22 19:12:45.956637 systemd[2733]: Starting dbus.socket - D-Bus User Message Bus Socket... May 22 19:12:45.958032 systemd[2733]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. May 22 19:12:45.961873 systemd[2733]: Starting systemd-tmpfiles-setup.service - Create User Files and Directories... May 22 19:12:45.969730 systemd[2733]: Listening on dbus.socket - D-Bus User Message Bus Socket. May 22 19:12:45.969906 systemd[2733]: Reached target sockets.target - Sockets. May 22 19:12:45.971983 systemd[2733]: Finished systemd-tmpfiles-setup.service - Create User Files and Directories. May 22 19:12:45.972080 systemd[2733]: Reached target basic.target - Basic System. May 22 19:12:45.972130 systemd[2733]: Reached target default.target - Main User Target. May 22 19:12:45.972154 systemd[2733]: Startup finished in 223ms. May 22 19:12:45.972817 systemd[1]: Started user@500.service - User Manager for UID 500. May 22 19:12:45.976836 systemd[1]: Started session-3.scope - Session 3 of User core. May 22 19:12:46.021312 systemd[1]: Started sshd@1-4097-10.0.0.4:22-4.175.71.9:45750.service - OpenSSH per-connection server daemon (4.175.71.9:45750). May 22 19:12:46.096438 sshd[2747]: Accepted publickey for core from 4.175.71.9 port 45750 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:12:46.097517 sshd-session[2747]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:12:46.101655 systemd-logind[2364]: New session '5' of user 'core' with class 'user' and type 'tty'. May 22 19:12:46.105785 systemd[1]: Started session-5.scope - Session 5 of User core. May 22 19:12:46.129389 sshd[2751]: Connection closed by 4.175.71.9 port 45750 May 22 19:12:46.130865 sshd-session[2747]: pam_unix(sshd:session): session closed for user core May 22 19:12:46.133256 systemd[1]: sshd@1-4097-10.0.0.4:22-4.175.71.9:45750.service: Deactivated successfully. May 22 19:12:46.134900 systemd[1]: session-5.scope: Deactivated successfully. May 22 19:12:46.135590 systemd-logind[2364]: Session 5 logged out. Waiting for processes to exit. May 22 19:12:46.136857 systemd-logind[2364]: Removed session 5. May 22 19:12:46.147062 systemd[1]: Started sshd@2-4098-10.0.0.4:22-4.175.71.9:45766.service - OpenSSH per-connection server daemon (4.175.71.9:45766). May 22 19:12:46.232152 sshd[2757]: Accepted publickey for core from 4.175.71.9 port 45766 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:12:46.232651 sshd-session[2757]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:12:46.236925 systemd-logind[2364]: New session '6' of user 'core' with class 'user' and type 'tty'. May 22 19:12:46.246792 systemd[1]: Started session-6.scope - Session 6 of User core. May 22 19:12:46.269112 sshd[2761]: Connection closed by 4.175.71.9 port 45766 May 22 19:12:46.269762 sshd-session[2757]: pam_unix(sshd:session): session closed for user core May 22 19:12:46.272219 systemd[1]: sshd@2-4098-10.0.0.4:22-4.175.71.9:45766.service: Deactivated successfully. May 22 19:12:46.273832 systemd[1]: session-6.scope: Deactivated successfully. May 22 19:12:46.274562 systemd-logind[2364]: Session 6 logged out. Waiting for processes to exit. May 22 19:12:46.275805 systemd-logind[2364]: Removed session 6. May 22 19:12:46.283041 systemd[1]: Started sshd@3-4099-10.0.0.4:22-4.175.71.9:45778.service - OpenSSH per-connection server daemon (4.175.71.9:45778). May 22 19:12:46.357145 sshd[2767]: Accepted publickey for core from 4.175.71.9 port 45778 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:12:46.357650 sshd-session[2767]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:12:46.361825 systemd-logind[2364]: New session '7' of user 'core' with class 'user' and type 'tty'. May 22 19:12:46.374785 systemd[1]: Started session-7.scope - Session 7 of User core. May 22 19:12:46.398929 sshd[2771]: Connection closed by 4.175.71.9 port 45778 May 22 19:12:46.400346 sshd-session[2767]: pam_unix(sshd:session): session closed for user core May 22 19:12:46.402593 systemd[1]: sshd@3-4099-10.0.0.4:22-4.175.71.9:45778.service: Deactivated successfully. May 22 19:12:46.404056 systemd[1]: session-7.scope: Deactivated successfully. May 22 19:12:46.404750 systemd-logind[2364]: Session 7 logged out. Waiting for processes to exit. May 22 19:12:46.406028 systemd-logind[2364]: Removed session 7. May 22 19:12:46.417010 systemd[1]: Started sshd@4-2-10.0.0.4:22-4.175.71.9:45792.service - OpenSSH per-connection server daemon (4.175.71.9:45792). May 22 19:12:46.502037 sshd[2778]: Accepted publickey for core from 4.175.71.9 port 45792 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:12:46.503413 sshd-session[2778]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:12:46.507527 systemd-logind[2364]: New session '8' of user 'core' with class 'user' and type 'tty'. May 22 19:12:46.514796 systemd[1]: Started session-8.scope - Session 8 of User core. May 22 19:12:46.745583 sudo[2783]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 May 22 19:12:46.745854 sudo[2783]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:12:46.755481 sudo[2783]: pam_unix(sudo:session): session closed for user root May 22 19:12:46.765834 sshd[2782]: Connection closed by 4.175.71.9 port 45792 May 22 19:12:46.766466 sshd-session[2778]: pam_unix(sshd:session): session closed for user core May 22 19:12:46.769296 systemd[1]: sshd@4-2-10.0.0.4:22-4.175.71.9:45792.service: Deactivated successfully. May 22 19:12:46.770821 systemd[1]: session-8.scope: Deactivated successfully. May 22 19:12:46.771561 systemd-logind[2364]: Session 8 logged out. Waiting for processes to exit. May 22 19:12:46.772938 systemd-logind[2364]: Removed session 8. May 22 19:12:46.782139 systemd[1]: Started sshd@5-4100-10.0.0.4:22-4.175.71.9:45806.service - OpenSSH per-connection server daemon (4.175.71.9:45806). May 22 19:12:46.863711 sshd[2790]: Accepted publickey for core from 4.175.71.9 port 45806 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:12:46.864804 sshd-session[2790]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:12:46.869041 systemd-logind[2364]: New session '9' of user 'core' with class 'user' and type 'tty'. May 22 19:12:46.874786 systemd[1]: Started session-9.scope - Session 9 of User core. May 22 19:12:46.894136 sudo[2796]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules May 22 19:12:46.894310 sudo[2796]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:12:46.895667 sudo[2796]: pam_unix(sudo:session): session closed for user root May 22 19:12:46.901527 sudo[2795]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/systemctl restart audit-rules May 22 19:12:46.901839 sudo[2795]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:12:46.908078 systemd[1]: Starting audit-rules.service - Load Audit Rules... May 22 19:12:46.940000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 May 22 19:12:46.942232 kernel: kauditd_printk_skb: 6 callbacks suppressed May 22 19:12:46.942390 kernel: audit: type=1305 audit(1779477166.940:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 May 22 19:12:46.940000 audit[2820]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffef38fedd0 a2=420 a3=0 items=0 ppid=2801 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:12:46.944020 augenrules[2820]: No rules May 22 19:12:46.940000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 May 22 19:12:46.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:12:46.949084 kernel: audit: type=1300 audit(1779477166.940:169): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffef38fedd0 a2=420 a3=0 items=0 ppid=2801 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:12:46.947278 systemd[1]: audit-rules.service: Deactivated successfully. May 22 19:12:46.949468 kernel: audit: type=1327 audit(1779477166.940:169): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 May 22 19:12:46.947461 systemd[1]: Finished audit-rules.service - Load Audit Rules. May 22 19:12:46.949841 kernel: audit: type=1130 audit(1779477166.947:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:12:46.951077 sudo[2795]: pam_unix(sudo:session): session closed for user root May 22 19:12:46.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:12:46.950000 audit[2795]: AUDIT1106 pid=2795 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:12:46.956301 kernel: audit: type=1131 audit(1779477166.947:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:12:46.950000 audit[2795]: AUDIT1104 pid=2795 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:12:46.956450 kernel: audit: type=1106 audit(1779477166.950:172): pid=2795 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:12:46.956584 kernel: audit: type=1104 audit(1779477166.950:173): pid=2795 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:12:46.960362 sshd[2794]: Connection closed by 4.175.71.9 port 45806 May 22 19:12:46.961767 sshd-session[2790]: pam_unix(sshd:session): session closed for user core May 22 19:12:46.961000 audit[2790]: AUDIT1106 pid=2790 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:12:46.965712 kernel: audit: type=1106 audit(1779477166.961:174): pid=2790 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:12:46.961000 audit[2790]: AUDIT1104 pid=2790 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:12:46.968806 systemd[1]: sshd@5-4100-10.0.0.4:22-4.175.71.9:45806.service: Deactivated successfully. May 22 19:12:46.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-10.0.0.4:22-4.175.71.9:45806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:12:46.972614 systemd[1]: session-9.scope: Deactivated successfully. May 22 19:12:46.973840 kernel: audit: type=1104 audit(1779477166.961:175): pid=2790 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:12:46.973874 kernel: audit: type=1131 audit(1779477166.968:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-10.0.0.4:22-4.175.71.9:45806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:12:46.974250 systemd-logind[2364]: Session 9 logged out. Waiting for processes to exit. May 22 19:12:46.975207 systemd-logind[2364]: Removed session 9. May 22 19:12:48.814171 update_engine[2366]: I20260522 19:12:48.814090 2366 update_attempter.cc:509] Updating boot flags... May 22 19:13:02.683152 systemd[1]: Started sshd@6-4101-10.0.0.4:22-4.175.71.9:49878.service - OpenSSH per-connection server daemon (4.175.71.9:49878). May 22 19:13:02.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4101-10.0.0.4:22-4.175.71.9:49878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:02.688752 kernel: audit: type=1130 audit(1779477182.682:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4101-10.0.0.4:22-4.175.71.9:49878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:02.757000 audit[2877]: AUDIT1101 pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:02.761795 sshd[2877]: Accepted publickey for core from 4.175.71.9 port 49878 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:02.763288 sshd-session[2877]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:02.761000 audit[2877]: AUDIT1103 pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:02.764730 kernel: audit: type=1101 audit(1779477182.757:178): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:02.764765 kernel: audit: type=1103 audit(1779477182.761:179): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:02.771688 systemd-logind[2364]: New session '10' of user 'core' with class 'user' and type 'tty'. May 22 19:13:02.772446 kernel: audit: type=1006 audit(1779477182.761:180): pid=2877 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 May 22 19:13:02.761000 audit[2877]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff209dc590 a2=3 a3=0 items=0 ppid=1 pid=2877 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:02.777554 kernel: audit: type=1300 audit(1779477182.761:180): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff209dc590 a2=3 a3=0 items=0 ppid=1 pid=2877 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:02.761000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:02.780480 kernel: audit: type=1327 audit(1779477182.761:180): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:02.782824 systemd[1]: Started session-10.scope - Session 10 of User core. May 22 19:13:02.783000 audit[2877]: AUDIT1105 pid=2877 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:02.790714 kernel: audit: type=1105 audit(1779477182.783:181): pid=2877 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:02.789000 audit[2881]: AUDIT1103 pid=2881 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:02.795678 kernel: audit: type=1103 audit(1779477182.789:182): pid=2881 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:02.812000 audit[2886]: AUDIT1101 pid=2886 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.814366 sudo[2886]: core : PWD=/tmp/tmp.W66h5QyWEh ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/nc /usr/bin/timeout May 22 19:13:02.814607 sudo[2886]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:02.812000 audit[2886]: AUDIT1110 pid=2886 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.822533 kernel: audit: type=1101 audit(1779477182.812:183): pid=2886 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.822569 kernel: audit: type=1110 audit(1779477182.812:184): pid=2886 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.812000 audit[2886]: AUDIT1105 pid=2886 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.857485 sudo[2886]: pam_unix(sudo:session): session closed for user root May 22 19:13:02.855000 audit[2886]: AUDIT1106 pid=2886 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.855000 audit[2886]: AUDIT1104 pid=2886 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.876000 audit[2899]: AUDIT1101 pid=2899 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.878312 sudo[2899]: core : PWD=/tmp/tmp.W66h5QyWEh ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/nc /usr/bin/timeout /lib64/ld-linux-x86-64.so.2 /lib64/libbsd.so.0 /lib64/libc.so.6 /lib64/libmd.so.0 /lib64/libresolv.so.2 ./ May 22 19:13:02.878564 sudo[2899]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:02.876000 audit[2899]: AUDIT1110 pid=2899 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.876000 audit[2899]: AUDIT1105 pid=2899 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.979000 audit[2899]: AUDIT1106 pid=2899 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.979000 audit[2899]: AUDIT1104 pid=2899 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.980844 sudo[2899]: pam_unix(sudo:session): session closed for user root May 22 19:13:02.985000 audit[2882]: AUDIT1101 pid=2882 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.987550 sudo[2882]: core : PWD=/tmp/tmp.W66h5QyWEh ; USER=root ; COMMAND=/usr/sbin/docker build -t netcat . May 22 19:13:02.986000 audit[2882]: AUDIT1110 pid=2882 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:02.987937 sudo[2882]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:02.986000 audit[2882]: AUDIT1105 pid=2882 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:06.323501 systemd[1]: Starting docker.service - Docker Application Container Engine... May 22 19:13:06.333889 (dockerd)[2912]: docker.service: Referenced but unset environment variable evaluates to an empty string: DOCKER_CGROUPS, DOCKER_OPTS, DOCKER_OPT_BIP, DOCKER_OPT_IPMASQ, DOCKER_OPT_MTU May 22 19:13:16.335952 dockerd[2912]: time="2026-05-22T19:13:16.335835947Z" level=info msg="Starting up" May 22 19:13:16.372110 dockerd[2912]: time="2026-05-22T19:13:16.372052918Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider" May 22 19:13:16.406566 dockerd[2912]: time="2026-05-22T19:13:16.406520632Z" level=info msg="Creating a containerd client" address=/var/run/docker/libcontainerd/docker-containerd.sock timeout=1m0s May 22 19:13:16.574569 systemd[1]: var-lib-docker-metacopy\x2dcheck3760392534-merged.mount: Deactivated successfully. May 22 19:13:16.598024 dockerd[2912]: time="2026-05-22T19:13:16.597982587Z" level=info msg="Loading containers: start." May 22 19:13:16.658646 kernel: Initializing XFRM netlink socket May 22 19:13:16.814000 audit[2977]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=2977 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.815891 kernel: kauditd_printk_skb: 11 callbacks suppressed May 22 19:13:16.815933 kernel: audit: type=1325 audit(1779477196.814:196): table=nat:5 family=2 entries=2 op=nft_register_chain pid=2977 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.814000 audit[2977]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd850e4c80 a2=0 a3=0 items=0 ppid=2912 pid=2977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.822251 kernel: audit: type=1300 audit(1779477196.814:196): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd850e4c80 a2=0 a3=0 items=0 ppid=2912 pid=2977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.814000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 May 22 19:13:16.820000 audit[2979]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=2979 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.827773 kernel: audit: type=1327 audit(1779477196.814:196): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 May 22 19:13:16.827806 kernel: audit: type=1325 audit(1779477196.820:197): table=filter:6 family=2 entries=2 op=nft_register_chain pid=2979 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.820000 audit[2979]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc14ec7f10 a2=0 a3=0 items=0 ppid=2912 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.831634 kernel: audit: type=1300 audit(1779477196.820:197): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc14ec7f10 a2=0 a3=0 items=0 ppid=2912 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.820000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 May 22 19:13:16.834795 kernel: audit: type=1327 audit(1779477196.820:197): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 May 22 19:13:16.826000 audit[2981]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=2981 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.837643 kernel: audit: type=1325 audit(1779477196.826:198): table=filter:7 family=2 entries=1 op=nft_register_chain pid=2981 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.826000 audit[2981]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9630f430 a2=0 a3=0 items=0 ppid=2912 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.841896 kernel: audit: type=1300 audit(1779477196.826:198): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9630f430 a2=0 a3=0 items=0 ppid=2912 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.826000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 May 22 19:13:16.845315 kernel: audit: type=1327 audit(1779477196.826:198): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 May 22 19:13:16.832000 audit[2983]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2983 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.848083 kernel: audit: type=1325 audit(1779477196.832:199): table=filter:8 family=2 entries=1 op=nft_register_chain pid=2983 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.832000 audit[2983]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffe059b1e0 a2=0 a3=0 items=0 ppid=2912 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.832000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 May 22 19:13:16.835000 audit[2985]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=2985 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.835000 audit[2985]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffee303bc0 a2=0 a3=0 items=0 ppid=2912 pid=2985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.835000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 May 22 19:13:16.839000 audit[2987]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_chain pid=2987 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.839000 audit[2987]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffff5ed5c10 a2=0 a3=0 items=0 ppid=2912 pid=2987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.839000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 May 22 19:13:16.842000 audit[2989]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=2989 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.842000 audit[2989]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd593afa30 a2=0 a3=0 items=0 ppid=2912 pid=2989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.842000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 May 22 19:13:16.848000 audit[2991]: NETFILTER_CFG table=nat:12 family=2 entries=2 op=nft_register_chain pid=2991 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.848000 audit[2991]: SYSCALL arch=c000003e syscall=46 success=yes exit=384 a0=3 a1=7ffc497dbca0 a2=0 a3=0 items=0 ppid=2912 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.848000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 May 22 19:13:16.909000 audit[2994]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2994 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.909000 audit[2994]: SYSCALL arch=c000003e syscall=46 success=yes exit=472 a0=3 a1=7ffc84628540 a2=0 a3=0 items=0 ppid=2912 pid=2994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.909000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 May 22 19:13:16.911000 audit[2996]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=2996 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.911000 audit[2996]: SYSCALL arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7ffea1ac51a0 a2=0 a3=0 items=0 ppid=2912 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.911000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D464F5257415244 May 22 19:13:16.912000 audit[2998]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2998 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.912000 audit[2998]: SYSCALL arch=c000003e syscall=46 success=yes exit=236 a0=3 a1=7ffc4fe30f00 a2=0 a3=0 items=0 ppid=2912 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.912000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 May 22 19:13:16.914000 audit[3000]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=3000 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.914000 audit[3000]: SYSCALL arch=c000003e syscall=46 success=yes exit=248 a0=3 a1=7ffccd628f80 a2=0 a3=0 items=0 ppid=2912 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.914000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 May 22 19:13:16.916000 audit[3002]: NETFILTER_CFG table=filter:17 family=2 entries=1 op=nft_register_rule pid=3002 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:16.916000 audit[3002]: SYSCALL arch=c000003e syscall=46 success=yes exit=232 a0=3 a1=7ffe178abe30 a2=0 a3=0 items=0 ppid=2912 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:16.916000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 May 22 19:13:17.012000 audit[3032]: NETFILTER_CFG table=nat:18 family=10 entries=2 op=nft_register_chain pid=3032 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.012000 audit[3032]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffdc4e19370 a2=0 a3=0 items=0 ppid=2912 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.012000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 May 22 19:13:17.013000 audit[3034]: NETFILTER_CFG table=filter:19 family=10 entries=2 op=nft_register_chain pid=3034 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.013000 audit[3034]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc3b91bca0 a2=0 a3=0 items=0 ppid=2912 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.013000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 May 22 19:13:17.015000 audit[3036]: NETFILTER_CFG table=filter:20 family=10 entries=1 op=nft_register_chain pid=3036 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.015000 audit[3036]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdda7390e0 a2=0 a3=0 items=0 ppid=2912 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.015000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 May 22 19:13:17.017000 audit[3038]: NETFILTER_CFG table=filter:21 family=10 entries=1 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.017000 audit[3038]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca5c83810 a2=0 a3=0 items=0 ppid=2912 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.017000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 May 22 19:13:17.018000 audit[3040]: NETFILTER_CFG table=filter:22 family=10 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.018000 audit[3040]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcba530740 a2=0 a3=0 items=0 ppid=2912 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.018000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 May 22 19:13:17.020000 audit[3042]: NETFILTER_CFG table=filter:23 family=10 entries=1 op=nft_register_chain pid=3042 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.020000 audit[3042]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffb76518f0 a2=0 a3=0 items=0 ppid=2912 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.020000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 May 22 19:13:17.022000 audit[3044]: NETFILTER_CFG table=filter:24 family=10 entries=1 op=nft_register_chain pid=3044 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.022000 audit[3044]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd84281080 a2=0 a3=0 items=0 ppid=2912 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.022000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 May 22 19:13:17.024000 audit[3046]: NETFILTER_CFG table=nat:25 family=10 entries=2 op=nft_register_chain pid=3046 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.024000 audit[3046]: SYSCALL arch=c000003e syscall=46 success=yes exit=384 a0=3 a1=7ffd069e4720 a2=0 a3=0 items=0 ppid=2912 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.024000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 May 22 19:13:17.026000 audit[3048]: NETFILTER_CFG table=nat:26 family=10 entries=2 op=nft_register_chain pid=3048 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.026000 audit[3048]: SYSCALL arch=c000003e syscall=46 success=yes exit=484 a0=3 a1=7ffc753eefe0 a2=0 a3=0 items=0 ppid=2912 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.026000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003A3A312F313238 May 22 19:13:17.027000 audit[3050]: NETFILTER_CFG table=filter:27 family=10 entries=2 op=nft_register_chain pid=3050 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.027000 audit[3050]: SYSCALL arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7fff43b01300 a2=0 a3=0 items=0 ppid=2912 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.027000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D464F5257415244 May 22 19:13:17.029000 audit[3052]: NETFILTER_CFG table=filter:28 family=10 entries=1 op=nft_register_rule pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.029000 audit[3052]: SYSCALL arch=c000003e syscall=46 success=yes exit=236 a0=3 a1=7ffdec856760 a2=0 a3=0 items=0 ppid=2912 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.029000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 May 22 19:13:17.031000 audit[3054]: NETFILTER_CFG table=filter:29 family=10 entries=1 op=nft_register_rule pid=3054 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.031000 audit[3054]: SYSCALL arch=c000003e syscall=46 success=yes exit=248 a0=3 a1=7ffca73ce3f0 a2=0 a3=0 items=0 ppid=2912 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.031000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 May 22 19:13:17.032000 audit[3056]: NETFILTER_CFG table=filter:30 family=10 entries=1 op=nft_register_rule pid=3056 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.032000 audit[3056]: SYSCALL arch=c000003e syscall=46 success=yes exit=232 a0=3 a1=7ffd6d0bb9c0 a2=0 a3=0 items=0 ppid=2912 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.032000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 May 22 19:13:17.037000 audit[3061]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=3061 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.037000 audit[3061]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcc8049be0 a2=0 a3=0 items=0 ppid=2912 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.037000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 May 22 19:13:17.039000 audit[3063]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_rule pid=3063 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.039000 audit[3063]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe359a1f70 a2=0 a3=0 items=0 ppid=2912 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.039000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 May 22 19:13:17.041000 audit[3065]: NETFILTER_CFG table=filter:33 family=10 entries=1 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.041000 audit[3065]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffaebf8f80 a2=0 a3=0 items=0 ppid=2912 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.041000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 May 22 19:13:17.042000 audit[3067]: NETFILTER_CFG table=filter:34 family=10 entries=1 op=nft_register_rule pid=3067 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 22 19:13:17.042000 audit[3067]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff11de9c60 a2=0 a3=0 items=0 ppid=2912 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.042000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 May 22 19:13:17.146000 audit[3072]: NETFILTER_CFG table=nat:35 family=2 entries=2 op=nft_register_chain pid=3072 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.146000 audit[3072]: SYSCALL arch=c000003e syscall=46 success=yes exit=520 a0=3 a1=7ffddf70d090 a2=0 a3=0 items=0 ppid=2912 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.146000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 May 22 19:13:17.149000 audit[3074]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=3074 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.149000 audit[3074]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe10fb0750 a2=0 a3=0 items=0 ppid=2912 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.149000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E May 22 19:13:17.156000 audit[3082]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.156000 audit[3082]: SYSCALL arch=c000003e syscall=46 success=yes exit=300 a0=3 a1=7ffd6d2c7e80 a2=0 a3=0 items=0 ppid=2912 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.156000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D464F5257415244002D6900646F636B657230002D6A00414343455054 May 22 19:13:17.161000 audit[3087]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_rule pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.161000 audit[3087]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffd8964980 a2=0 a3=0 items=0 ppid=2912 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.161000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D6A0044524F50 May 22 19:13:17.163000 audit[3089]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.163000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=512 a0=3 a1=7ffc3aac0350 a2=0 a3=0 items=0 ppid=2912 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.163000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D4354002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 May 22 19:13:17.164000 audit[3091]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_rule pid=3091 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.164000 audit[3091]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdc30875f0 a2=0 a3=0 items=0 ppid=2912 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.164000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D425249444745002D6F00646F636B657230002D6A00444F434B4552 May 22 19:13:17.166000 audit[3093]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_rule pid=3093 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.166000 audit[3093]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffce70f2d60 a2=0 a3=0 items=0 ppid=2912 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.166000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 May 22 19:13:17.168000 audit[3095]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_rule pid=3095 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:17.168000 audit[3095]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc8fd30b20 a2=0 a3=0 items=0 ppid=2912 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:17.168000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 May 22 19:13:17.170961 systemd-networkd[2148]: docker0: Link UP May 22 19:13:17.184488 dockerd[2912]: time="2026-05-22T19:13:17.184454333Z" level=info msg="Loading containers: done." May 22 19:13:17.328182 dockerd[2912]: time="2026-05-22T19:13:17.328132955Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 May 22 19:13:17.328336 dockerd[2912]: time="2026-05-22T19:13:17.328247850Z" level=info msg="Docker daemon" commit=45873be4ae3f5488c9498b3d9f17deaddaf609f4 containerd-snapshotter=false storage-driver=overlay2 version=28.2.2 May 22 19:13:17.328428 dockerd[2912]: time="2026-05-22T19:13:17.328387774Z" level=info msg="Initializing buildkit" May 22 19:13:17.395928 dockerd[2912]: time="2026-05-22T19:13:17.395887900Z" level=warning msg="CDI setup error /var/run/cdi: failed to monitor for changes: no such file or directory" May 22 19:13:17.395928 dockerd[2912]: time="2026-05-22T19:13:17.395916931Z" level=warning msg="CDI setup error /etc/cdi: failed to monitor for changes: no such file or directory" May 22 19:13:17.461398 dockerd[2912]: time="2026-05-22T19:13:17.461299177Z" level=info msg="Completed buildkit initialization" May 22 19:13:17.492138 dockerd[2912]: time="2026-05-22T19:13:17.492101449Z" level=info msg="Daemon has completed initialization" May 22 19:13:17.492291 dockerd[2912]: time="2026-05-22T19:13:17.492252950Z" level=info msg="API listen on /run/docker.sock" May 22 19:13:17.493522 systemd[1]: Started docker.service - Docker Application Container Engine. May 22 19:13:17.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:17.834315 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount1596111033.mount: Deactivated successfully. May 22 19:13:18.364550 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount2040212661.mount: Deactivated successfully. May 22 19:13:20.211813 sudo[2882]: pam_unix(sudo:session): session closed for user root May 22 19:13:20.210000 audit[2882]: AUDIT1106 pid=2882 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.210000 audit[2882]: AUDIT1104 pid=2882 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.220531 sshd[2881]: Connection closed by 4.175.71.9 port 49878 May 22 19:13:20.221779 sshd-session[2877]: pam_unix(sshd:session): session closed for user core May 22 19:13:20.220000 audit[2877]: AUDIT1106 pid=2877 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.220000 audit[2877]: AUDIT1104 pid=2877 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.224779 systemd[1]: sshd@6-4101-10.0.0.4:22-4.175.71.9:49878.service: Deactivated successfully. May 22 19:13:20.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4101-10.0.0.4:22-4.175.71.9:49878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:20.226384 systemd[1]: session-10.scope: Deactivated successfully. May 22 19:13:20.226638 systemd[1]: session-10.scope: Consumed 226ms CPU time, 119.6M memory peak. May 22 19:13:20.227239 systemd-logind[2364]: Session 10 logged out. Waiting for processes to exit. May 22 19:13:20.228476 systemd-logind[2364]: Removed session 10. May 22 19:13:20.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-3-10.0.0.4:22-4.175.71.9:43736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:20.237761 systemd[1]: Started sshd@7-3-10.0.0.4:22-4.175.71.9:43736.service - OpenSSH per-connection server daemon (4.175.71.9:43736). May 22 19:13:20.240887 systemd[1]: Started sshd@8-4-10.0.0.4:22-4.175.71.9:43734.service - OpenSSH per-connection server daemon (4.175.71.9:43734). May 22 19:13:20.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4-10.0.0.4:22-4.175.71.9:43734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:20.321000 audit[3141]: AUDIT1101 pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.322841 sshd[3141]: Accepted publickey for core from 4.175.71.9 port 43736 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:20.321000 audit[3141]: AUDIT1103 pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.321000 audit[3141]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd82f2e080 a2=3 a3=0 items=0 ppid=1 pid=3141 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:20.321000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:20.323955 sshd-session[3141]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:20.325000 audit[3142]: AUDIT1101 pid=3142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.327951 sshd[3142]: Accepted publickey for core from 4.175.71.9 port 43734 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:20.327912 systemd-logind[2364]: New session '11' of user 'core' with class 'user' and type 'tty'. May 22 19:13:20.327000 audit[3142]: AUDIT1103 pid=3142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.327000 audit[3142]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc942cc400 a2=3 a3=0 items=0 ppid=1 pid=3142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:20.327000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:20.329411 sshd-session[3142]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:20.334802 systemd[1]: Started session-11.scope - Session 11 of User core. May 22 19:13:20.338906 systemd-logind[2364]: New session '12' of user 'core' with class 'user' and type 'tty'. May 22 19:13:20.339320 systemd[1]: Started session-12.scope - Session 12 of User core. May 22 19:13:20.339000 audit[3141]: AUDIT1105 pid=3141 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.342000 audit[3142]: AUDIT1105 pid=3142 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.343000 audit[3149]: AUDIT1103 pid=3149 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.346000 audit[3152]: AUDIT1103 pid=3152 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.365000 audit[3157]: AUDIT1101 pid=3157 uid=500 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.365000 audit[3157]: AUDIT1110 pid=3157 uid=500 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.365000 audit[3157]: AUDIT1105 pid=3157 uid=500 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.366858 sudo[3157]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:20.367126 sudo[3157]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:20.491000 audit[3157]: AUDIT1106 pid=3157 uid=500 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.491000 audit[3157]: AUDIT1104 pid=3157 uid=500 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.492616 sudo[3157]: pam_unix(sudo:session): session closed for user root May 22 19:13:20.502245 sshd[3152]: Connection closed by 4.175.71.9 port 43734 May 22 19:13:20.502718 sshd-session[3142]: pam_unix(sshd:session): session closed for user core May 22 19:13:20.501000 audit[3142]: AUDIT1106 pid=3142 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.501000 audit[3142]: AUDIT1104 pid=3142 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.505526 systemd[1]: sshd@8-4-10.0.0.4:22-4.175.71.9:43734.service: Deactivated successfully. May 22 19:13:20.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4-10.0.0.4:22-4.175.71.9:43734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:20.507249 systemd[1]: session-12.scope: Deactivated successfully. May 22 19:13:20.508029 systemd-logind[2364]: Session 12 logged out. Waiting for processes to exit. May 22 19:13:20.509190 systemd-logind[2364]: Removed session 12. May 22 19:13:20.522042 systemd[1]: var-lib-docker-overlay2-8956a96e17a3d1e917b4896cc83082d0fe9ecb65c18f3b5e33ad76395fb808ef\x2dinit-merged.mount: Deactivated successfully. May 22 19:13:20.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4102-10.0.0.4:22-4.175.71.9:43738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:20.627081 systemd[1]: Started sshd@9-4102-10.0.0.4:22-4.175.71.9:43738.service - OpenSSH per-connection server daemon (4.175.71.9:43738). May 22 19:13:20.707000 audit[3171]: AUDIT1101 pid=3171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.709564 sshd[3171]: Accepted publickey for core from 4.175.71.9 port 43738 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:20.708000 audit[3171]: AUDIT1103 pid=3171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.708000 audit[3171]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffecbf95250 a2=3 a3=0 items=0 ppid=1 pid=3171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:20.708000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:20.710617 sshd-session[3171]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:20.714736 systemd-logind[2364]: New session '13' of user 'core' with class 'user' and type 'tty'. May 22 19:13:20.723789 systemd[1]: Started session-13.scope - Session 13 of User core. May 22 19:13:20.724000 audit[3171]: AUDIT1105 pid=3171 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.725000 audit[3175]: AUDIT1103 pid=3175 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.741000 audit[3177]: AUDIT1101 pid=3177 uid=500 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.743481 sudo[3177]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:20.741000 audit[3177]: AUDIT1110 pid=3177 uid=500 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.744174 sudo[3177]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:20.742000 audit[3177]: AUDIT1105 pid=3177 uid=500 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.764023 sudo[3177]: pam_unix(sudo:session): session closed for user root May 22 19:13:20.762000 audit[3177]: AUDIT1106 pid=3177 uid=500 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.762000 audit[3177]: AUDIT1104 pid=3177 uid=500 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:20.773174 sshd[3175]: Connection closed by 4.175.71.9 port 43738 May 22 19:13:20.773587 sshd-session[3171]: pam_unix(sshd:session): session closed for user core May 22 19:13:20.772000 audit[3171]: AUDIT1106 pid=3171 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.772000 audit[3171]: AUDIT1104 pid=3171 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.775799 systemd[1]: sshd@9-4102-10.0.0.4:22-4.175.71.9:43738.service: Deactivated successfully. May 22 19:13:20.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4102-10.0.0.4:22-4.175.71.9:43738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:20.777248 systemd[1]: session-13.scope: Deactivated successfully. May 22 19:13:20.779261 systemd-logind[2364]: Session 13 logged out. Waiting for processes to exit. May 22 19:13:20.780153 systemd-logind[2364]: Removed session 13. May 22 19:13:20.893290 systemd[1]: Started sshd@10-5-10.0.0.4:22-4.175.71.9:43750.service - OpenSSH per-connection server daemon (4.175.71.9:43750). May 22 19:13:20.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-5-10.0.0.4:22-4.175.71.9:43750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:20.978000 audit[3185]: AUDIT1101 pid=3185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.980791 sshd[3185]: Accepted publickey for core from 4.175.71.9 port 43750 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:20.979000 audit[3185]: AUDIT1103 pid=3185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:20.979000 audit[3185]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc99f1b630 a2=3 a3=0 items=0 ppid=1 pid=3185 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:20.979000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:20.981952 sshd-session[3185]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:20.986162 systemd-logind[2364]: New session '14' of user 'core' with class 'user' and type 'tty'. May 22 19:13:21.000794 systemd[1]: Started session-14.scope - Session 14 of User core. May 22 19:13:21.001000 audit[3185]: AUDIT1105 pid=3185 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.003000 audit[3189]: AUDIT1103 pid=3189 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.020000 audit[3191]: AUDIT1101 pid=3191 uid=500 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.021947 sudo[3191]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:21.022196 sudo[3191]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:21.020000 audit[3191]: AUDIT1110 pid=3191 uid=500 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.020000 audit[3191]: AUDIT1105 pid=3191 uid=500 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.040000 audit[3191]: AUDIT1106 pid=3191 uid=500 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.042161 sudo[3191]: pam_unix(sudo:session): session closed for user root May 22 19:13:21.040000 audit[3191]: AUDIT1104 pid=3191 uid=500 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.052323 sshd[3189]: Connection closed by 4.175.71.9 port 43750 May 22 19:13:21.053737 sshd-session[3185]: pam_unix(sshd:session): session closed for user core May 22 19:13:21.052000 audit[3185]: AUDIT1106 pid=3185 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.052000 audit[3185]: AUDIT1104 pid=3185 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.056151 systemd[1]: sshd@10-5-10.0.0.4:22-4.175.71.9:43750.service: Deactivated successfully. May 22 19:13:21.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-5-10.0.0.4:22-4.175.71.9:43750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:21.057744 systemd[1]: session-14.scope: Deactivated successfully. May 22 19:13:21.058471 systemd-logind[2364]: Session 14 logged out. Waiting for processes to exit. May 22 19:13:21.059559 systemd-logind[2364]: Removed session 14. May 22 19:13:21.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-4103-10.0.0.4:22-4.175.71.9:43756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:21.171114 systemd[1]: Started sshd@11-4103-10.0.0.4:22-4.175.71.9:43756.service - OpenSSH per-connection server daemon (4.175.71.9:43756). May 22 19:13:21.249000 audit[3199]: AUDIT1101 pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.250784 sshd[3199]: Accepted publickey for core from 4.175.71.9 port 43756 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:21.249000 audit[3199]: AUDIT1103 pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.249000 audit[3199]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff77e281d0 a2=3 a3=0 items=0 ppid=1 pid=3199 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:21.249000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:21.251935 sshd-session[3199]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:21.255476 systemd-logind[2364]: New session '15' of user 'core' with class 'user' and type 'tty'. May 22 19:13:21.265781 systemd[1]: Started session-15.scope - Session 15 of User core. May 22 19:13:21.266000 audit[3199]: AUDIT1105 pid=3199 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.267000 audit[3203]: AUDIT1103 pid=3203 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.283000 audit[3205]: AUDIT1101 pid=3205 uid=500 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.285435 sudo[3205]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:21.283000 audit[3205]: AUDIT1110 pid=3205 uid=500 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.285790 sudo[3205]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:21.284000 audit[3205]: AUDIT1105 pid=3205 uid=500 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.305011 sudo[3205]: pam_unix(sudo:session): session closed for user root May 22 19:13:21.303000 audit[3205]: AUDIT1106 pid=3205 uid=500 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.303000 audit[3205]: AUDIT1104 pid=3205 uid=500 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.314169 sshd[3203]: Connection closed by 4.175.71.9 port 43756 May 22 19:13:21.314811 sshd-session[3199]: pam_unix(sshd:session): session closed for user core May 22 19:13:21.313000 audit[3199]: AUDIT1106 pid=3199 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.313000 audit[3199]: AUDIT1104 pid=3199 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.316847 systemd[1]: sshd@11-4103-10.0.0.4:22-4.175.71.9:43756.service: Deactivated successfully. May 22 19:13:21.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-4103-10.0.0.4:22-4.175.71.9:43756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:21.318200 systemd[1]: session-15.scope: Deactivated successfully. May 22 19:13:21.320080 systemd-logind[2364]: Session 15 logged out. Waiting for processes to exit. May 22 19:13:21.320822 systemd-logind[2364]: Removed session 15. May 22 19:13:21.434134 systemd[1]: Started sshd@12-4104-10.0.0.4:22-4.175.71.9:43772.service - OpenSSH per-connection server daemon (4.175.71.9:43772). May 22 19:13:21.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4104-10.0.0.4:22-4.175.71.9:43772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:21.512000 audit[3213]: AUDIT1101 pid=3213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.513969 sshd[3213]: Accepted publickey for core from 4.175.71.9 port 43772 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:21.513000 audit[3213]: AUDIT1103 pid=3213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.513000 audit[3213]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd1c972880 a2=3 a3=0 items=0 ppid=1 pid=3213 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:21.513000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:21.515480 sshd-session[3213]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:21.519521 systemd-logind[2364]: New session '16' of user 'core' with class 'user' and type 'tty'. May 22 19:13:21.522810 systemd[1]: Started session-16.scope - Session 16 of User core. May 22 19:13:21.523000 audit[3213]: AUDIT1105 pid=3213 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.524000 audit[3217]: AUDIT1103 pid=3217 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.540000 audit[3219]: AUDIT1101 pid=3219 uid=500 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.542047 sudo[3219]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:21.542313 sudo[3219]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:21.540000 audit[3219]: AUDIT1110 pid=3219 uid=500 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.540000 audit[3219]: AUDIT1105 pid=3219 uid=500 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.561966 sudo[3219]: pam_unix(sudo:session): session closed for user root May 22 19:13:21.560000 audit[3219]: AUDIT1106 pid=3219 uid=500 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.560000 audit[3219]: AUDIT1104 pid=3219 uid=500 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.570984 sshd[3217]: Connection closed by 4.175.71.9 port 43772 May 22 19:13:21.571764 sshd-session[3213]: pam_unix(sshd:session): session closed for user core May 22 19:13:21.571000 audit[3213]: AUDIT1106 pid=3213 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.571000 audit[3213]: AUDIT1104 pid=3213 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4104-10.0.0.4:22-4.175.71.9:43772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:21.574782 systemd[1]: sshd@12-4104-10.0.0.4:22-4.175.71.9:43772.service: Deactivated successfully. May 22 19:13:21.576226 systemd[1]: session-16.scope: Deactivated successfully. May 22 19:13:21.577181 systemd-logind[2364]: Session 16 logged out. Waiting for processes to exit. May 22 19:13:21.578255 systemd-logind[2364]: Removed session 16. May 22 19:13:21.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4105-10.0.0.4:22-4.175.71.9:43778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:21.692342 systemd[1]: Started sshd@13-4105-10.0.0.4:22-4.175.71.9:43778.service - OpenSSH per-connection server daemon (4.175.71.9:43778). May 22 19:13:21.776000 audit[3227]: AUDIT1101 pid=3227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.777961 sshd[3227]: Accepted publickey for core from 4.175.71.9 port 43778 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:21.777000 audit[3227]: AUDIT1103 pid=3227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.777000 audit[3227]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffee9dea220 a2=3 a3=0 items=0 ppid=1 pid=3227 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:21.777000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:21.779435 sshd-session[3227]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:21.783607 systemd-logind[2364]: New session '17' of user 'core' with class 'user' and type 'tty'. May 22 19:13:21.789800 systemd[1]: Started session-17.scope - Session 17 of User core. May 22 19:13:21.790000 audit[3227]: AUDIT1105 pid=3227 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.791000 audit[3231]: AUDIT1103 pid=3231 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.809000 audit[3233]: AUDIT1101 pid=3233 uid=500 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.809000 audit[3233]: AUDIT1110 pid=3233 uid=500 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.809000 audit[3233]: AUDIT1105 pid=3233 uid=500 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.825000 audit[3233]: AUDIT1106 pid=3233 uid=500 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.825000 audit[3233]: AUDIT1104 pid=3233 uid=500 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-6-10.0.0.4:22-4.175.71.9:43790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:22.047000 audit[3238]: AUDIT1101 pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.048000 audit[3238]: AUDIT1103 pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.048000 audit[3238]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffec3f28210 a2=3 a3=0 items=0 ppid=1 pid=3238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:22.048000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:22.463000 audit[3227]: AUDIT1106 pid=3227 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:21.962421 systemd[1]: Started sshd@14-6-10.0.0.4:22-4.175.71.9:43790.service - OpenSSH per-connection server daemon (4.175.71.9:43790). May 22 19:13:21.810808 sudo[3233]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:22.466882 sshd[3231]: Connection closed by 4.175.71.9 port 43778 May 22 19:13:22.466959 kernel: kauditd_printk_skb: 209 callbacks suppressed May 22 19:13:22.466998 sshd[3238]: Accepted publickey for core from 4.175.71.9 port 43790 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:22.056839 systemd-logind[2364]: New session '18' of user 'core' with class 'user' and type 'tty'. May 22 19:13:21.810997 sudo[3233]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:22.467553 kernel: audit: type=1106 audit(1779477201.825:325): pid=3233 uid=500 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.072822 systemd[1]: Started session-18.scope - Session 18 of User core. May 22 19:13:21.827022 sudo[3233]: pam_unix(sudo:session): session closed for user root May 22 19:13:22.469288 kernel: audit: type=1104 audit(1779477201.825:326): pid=3233 uid=500 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:21.842707 sshd-session[3227]: pam_unix(sshd:session): session closed for user core May 22 19:13:22.469364 kernel: audit: type=1130 audit(1779477201.960:327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-6-10.0.0.4:22-4.175.71.9:43790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:22.050136 sshd-session[3238]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:22.469588 kernel: audit: type=1101 audit(1779477202.047:328): pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.469615 kernel: audit: type=1103 audit(1779477202.048:329): pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.469653 kernel: audit: type=1006 audit(1779477202.048:330): pid=3238 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 May 22 19:13:22.469673 kernel: audit: type=1300 audit(1779477202.048:330): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffec3f28210 a2=3 a3=0 items=0 ppid=1 pid=3238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:22.469695 kernel: audit: type=1327 audit(1779477202.048:330): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:22.469712 kernel: audit: type=1106 audit(1779477202.463:331): pid=3227 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.473214 systemd[1]: sshd@13-4105-10.0.0.4:22-4.175.71.9:43778.service: Deactivated successfully. May 22 19:13:22.463000 audit[3227]: AUDIT1104 pid=3227 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.475987 systemd[1]: session-17.scope: Deactivated successfully. May 22 19:13:22.479528 systemd-logind[2364]: Session 17 logged out. Waiting for processes to exit. May 22 19:13:22.481066 systemd-logind[2364]: Removed session 17. May 22 19:13:22.466000 audit[3238]: AUDIT1105 pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4105-10.0.0.4:22-4.175.71.9:43778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:22.473000 audit[3242]: AUDIT1103 pid=3242 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.481731 kernel: audit: type=1104 audit(1779477202.463:332): pid=3227 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.490000 audit[3247]: AUDIT1101 pid=3247 uid=500 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.492424 sudo[3247]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:22.492693 sudo[3247]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:22.490000 audit[3247]: AUDIT1110 pid=3247 uid=500 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.491000 audit[3247]: AUDIT1105 pid=3247 uid=500 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.510000 audit[3247]: AUDIT1106 pid=3247 uid=500 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.510000 audit[3247]: AUDIT1104 pid=3247 uid=500 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.512347 sudo[3247]: pam_unix(sudo:session): session closed for user root May 22 19:13:22.522063 sshd[3242]: Connection closed by 4.175.71.9 port 43790 May 22 19:13:22.522456 sshd-session[3238]: pam_unix(sshd:session): session closed for user core May 22 19:13:22.521000 audit[3238]: AUDIT1106 pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.521000 audit[3238]: AUDIT1104 pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.524815 systemd[1]: sshd@14-6-10.0.0.4:22-4.175.71.9:43790.service: Deactivated successfully. May 22 19:13:22.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-6-10.0.0.4:22-4.175.71.9:43790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:22.526210 systemd[1]: session-18.scope: Deactivated successfully. May 22 19:13:22.528030 systemd-logind[2364]: Session 18 logged out. Waiting for processes to exit. May 22 19:13:22.528760 systemd-logind[2364]: Removed session 18. May 22 19:13:22.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4106-10.0.0.4:22-4.175.71.9:43806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:22.645261 systemd[1]: Started sshd@15-4106-10.0.0.4:22-4.175.71.9:43806.service - OpenSSH per-connection server daemon (4.175.71.9:43806). May 22 19:13:22.722000 audit[3255]: AUDIT1101 pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.724671 sshd[3255]: Accepted publickey for core from 4.175.71.9 port 43806 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:22.723000 audit[3255]: AUDIT1103 pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.723000 audit[3255]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffca2ba4760 a2=3 a3=0 items=0 ppid=1 pid=3255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:22.723000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:22.725455 sshd-session[3255]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:22.728969 systemd-logind[2364]: New session '19' of user 'core' with class 'user' and type 'tty'. May 22 19:13:22.737803 systemd[1]: Started session-19.scope - Session 19 of User core. May 22 19:13:22.738000 audit[3255]: AUDIT1105 pid=3255 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.739000 audit[3259]: AUDIT1103 pid=3259 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.755000 audit[3261]: AUDIT1101 pid=3261 uid=500 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.757524 sudo[3261]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:22.756000 audit[3261]: AUDIT1110 pid=3261 uid=500 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.756000 audit[3261]: AUDIT1105 pid=3261 uid=500 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.757897 sudo[3261]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:22.777105 sudo[3261]: pam_unix(sudo:session): session closed for user root May 22 19:13:22.775000 audit[3261]: AUDIT1106 pid=3261 uid=500 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.775000 audit[3261]: AUDIT1104 pid=3261 uid=500 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:22.786352 sshd[3259]: Connection closed by 4.175.71.9 port 43806 May 22 19:13:22.787759 sshd-session[3255]: pam_unix(sshd:session): session closed for user core May 22 19:13:22.786000 audit[3255]: AUDIT1106 pid=3255 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.786000 audit[3255]: AUDIT1104 pid=3255 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.790119 systemd[1]: sshd@15-4106-10.0.0.4:22-4.175.71.9:43806.service: Deactivated successfully. May 22 19:13:22.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4106-10.0.0.4:22-4.175.71.9:43806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:22.791693 systemd[1]: session-19.scope: Deactivated successfully. May 22 19:13:22.792370 systemd-logind[2364]: Session 19 logged out. Waiting for processes to exit. May 22 19:13:22.793554 systemd-logind[2364]: Removed session 19. May 22 19:13:22.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-7-10.0.0.4:22-4.175.71.9:38328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:22.905328 systemd[1]: Started sshd@16-7-10.0.0.4:22-4.175.71.9:38328.service - OpenSSH per-connection server daemon (4.175.71.9:38328). May 22 19:13:22.985000 audit[3269]: AUDIT1101 pid=3269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.987043 sshd[3269]: Accepted publickey for core from 4.175.71.9 port 38328 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:22.986000 audit[3269]: AUDIT1103 pid=3269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:22.986000 audit[3269]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc32c196f0 a2=3 a3=0 items=0 ppid=1 pid=3269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:22.986000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:22.988495 sshd-session[3269]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:22.991954 systemd-logind[2364]: New session '20' of user 'core' with class 'user' and type 'tty'. May 22 19:13:23.002772 systemd[1]: Started session-20.scope - Session 20 of User core. May 22 19:13:23.003000 audit[3269]: AUDIT1105 pid=3269 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.004000 audit[3273]: AUDIT1103 pid=3273 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.021000 audit[3275]: AUDIT1101 pid=3275 uid=500 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.023262 sudo[3275]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:23.023510 sudo[3275]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:23.021000 audit[3275]: AUDIT1110 pid=3275 uid=500 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.021000 audit[3275]: AUDIT1105 pid=3275 uid=500 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.043971 sudo[3275]: pam_unix(sudo:session): session closed for user root May 22 19:13:23.042000 audit[3275]: AUDIT1106 pid=3275 uid=500 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.042000 audit[3275]: AUDIT1104 pid=3275 uid=500 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.053788 sshd[3273]: Connection closed by 4.175.71.9 port 38328 May 22 19:13:23.054768 sshd-session[3269]: pam_unix(sshd:session): session closed for user core May 22 19:13:23.053000 audit[3269]: AUDIT1106 pid=3269 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.053000 audit[3269]: AUDIT1104 pid=3269 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.057514 systemd[1]: sshd@16-7-10.0.0.4:22-4.175.71.9:38328.service: Deactivated successfully. May 22 19:13:23.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-7-10.0.0.4:22-4.175.71.9:38328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:23.058963 systemd[1]: session-20.scope: Deactivated successfully. May 22 19:13:23.059979 systemd-logind[2364]: Session 20 logged out. Waiting for processes to exit. May 22 19:13:23.061203 systemd-logind[2364]: Removed session 20. May 22 19:13:23.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-10.0.0.4:22-4.175.71.9:38334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:23.174268 systemd[1]: Started sshd@17-4107-10.0.0.4:22-4.175.71.9:38334.service - OpenSSH per-connection server daemon (4.175.71.9:38334). May 22 19:13:23.255000 audit[3283]: AUDIT1101 pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.257419 sshd[3283]: Accepted publickey for core from 4.175.71.9 port 38334 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:23.256000 audit[3283]: AUDIT1103 pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.256000 audit[3283]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd4563b330 a2=3 a3=0 items=0 ppid=1 pid=3283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:23.256000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:23.258615 sshd-session[3283]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:23.262784 systemd-logind[2364]: New session '21' of user 'core' with class 'user' and type 'tty'. May 22 19:13:23.271800 systemd[1]: Started session-21.scope - Session 21 of User core. May 22 19:13:23.272000 audit[3283]: AUDIT1105 pid=3283 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.273000 audit[3287]: AUDIT1103 pid=3287 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.289000 audit[3289]: AUDIT1101 pid=3289 uid=500 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.290867 sudo[3289]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:23.291116 sudo[3289]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:23.289000 audit[3289]: AUDIT1110 pid=3289 uid=500 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.289000 audit[3289]: AUDIT1105 pid=3289 uid=500 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.305000 audit[3289]: AUDIT1106 pid=3289 uid=500 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.307094 sudo[3289]: pam_unix(sudo:session): session closed for user root May 22 19:13:23.305000 audit[3289]: AUDIT1104 pid=3289 uid=500 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.315698 sshd[3287]: Connection closed by 4.175.71.9 port 38334 May 22 19:13:23.317143 sshd-session[3283]: pam_unix(sshd:session): session closed for user core May 22 19:13:23.315000 audit[3283]: AUDIT1106 pid=3283 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.315000 audit[3283]: AUDIT1104 pid=3283 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.319529 systemd[1]: sshd@17-4107-10.0.0.4:22-4.175.71.9:38334.service: Deactivated successfully. May 22 19:13:23.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-10.0.0.4:22-4.175.71.9:38334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:23.321001 systemd[1]: session-21.scope: Deactivated successfully. May 22 19:13:23.321694 systemd-logind[2364]: Session 21 logged out. Waiting for processes to exit. May 22 19:13:23.322765 systemd-logind[2364]: Removed session 21. May 22 19:13:23.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4108-10.0.0.4:22-4.175.71.9:38350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:23.437276 systemd[1]: Started sshd@18-4108-10.0.0.4:22-4.175.71.9:38350.service - OpenSSH per-connection server daemon (4.175.71.9:38350). May 22 19:13:23.516000 audit[3297]: AUDIT1101 pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.518188 sshd[3297]: Accepted publickey for core from 4.175.71.9 port 38350 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:23.517000 audit[3297]: AUDIT1103 pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.517000 audit[3297]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe8cca03d0 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:23.517000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:23.519412 sshd-session[3297]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:23.523590 systemd-logind[2364]: New session '22' of user 'core' with class 'user' and type 'tty'. May 22 19:13:23.529780 systemd[1]: Started session-22.scope - Session 22 of User core. May 22 19:13:23.530000 audit[3297]: AUDIT1105 pid=3297 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.531000 audit[3301]: AUDIT1103 pid=3301 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.547000 audit[3303]: AUDIT1101 pid=3303 uid=500 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.549469 sudo[3303]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:23.547000 audit[3303]: AUDIT1110 pid=3303 uid=500 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.549848 sudo[3303]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:23.548000 audit[3303]: AUDIT1105 pid=3303 uid=500 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.566285 sudo[3303]: pam_unix(sudo:session): session closed for user root May 22 19:13:23.564000 audit[3303]: AUDIT1106 pid=3303 uid=500 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.564000 audit[3303]: AUDIT1104 pid=3303 uid=500 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.575316 sshd[3301]: Connection closed by 4.175.71.9 port 38350 May 22 19:13:23.576787 sshd-session[3297]: pam_unix(sshd:session): session closed for user core May 22 19:13:23.575000 audit[3297]: AUDIT1106 pid=3297 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.575000 audit[3297]: AUDIT1104 pid=3297 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.579260 systemd[1]: sshd@18-4108-10.0.0.4:22-4.175.71.9:38350.service: Deactivated successfully. May 22 19:13:23.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4108-10.0.0.4:22-4.175.71.9:38350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:23.580742 systemd[1]: session-22.scope: Deactivated successfully. May 22 19:13:23.582045 systemd-logind[2364]: Session 22 logged out. Waiting for processes to exit. May 22 19:13:23.582818 systemd-logind[2364]: Removed session 22. May 22 19:13:23.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-8-10.0.0.4:22-4.175.71.9:38354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:23.694300 systemd[1]: Started sshd@19-8-10.0.0.4:22-4.175.71.9:38354.service - OpenSSH per-connection server daemon (4.175.71.9:38354). May 22 19:13:23.772000 audit[3311]: AUDIT1101 pid=3311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.773000 audit[3311]: AUDIT1103 pid=3311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.773000 audit[3311]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff22e6fdc0 a2=3 a3=0 items=0 ppid=1 pid=3311 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:23.773000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:23.789000 audit[3311]: AUDIT1105 pid=3311 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.790000 audit[3315]: AUDIT1103 pid=3315 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.775605 sshd-session[3311]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:23.807344 sshd[3311]: Accepted publickey for core from 4.175.71.9 port 38354 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:23.779729 systemd-logind[2364]: New session '23' of user 'core' with class 'user' and type 'tty'. May 22 19:13:23.788790 systemd[1]: Started session-23.scope - Session 23 of User core. May 22 19:13:23.808882 sudo[3317]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:23.809125 sudo[3317]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:23.807000 audit[3317]: AUDIT1101 pid=3317 uid=500 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.807000 audit[3317]: AUDIT1110 pid=3317 uid=500 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.807000 audit[3317]: AUDIT1105 pid=3317 uid=500 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.831053 sudo[3317]: pam_unix(sudo:session): session closed for user root May 22 19:13:23.829000 audit[3317]: AUDIT1106 pid=3317 uid=500 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.829000 audit[3317]: AUDIT1104 pid=3317 uid=500 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:23.839920 sshd[3315]: Connection closed by 4.175.71.9 port 38354 May 22 19:13:23.841390 sshd-session[3311]: pam_unix(sshd:session): session closed for user core May 22 19:13:23.840000 audit[3311]: AUDIT1106 pid=3311 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.840000 audit[3311]: AUDIT1104 pid=3311 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:23.843981 systemd[1]: sshd@19-8-10.0.0.4:22-4.175.71.9:38354.service: Deactivated successfully. May 22 19:13:23.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-8-10.0.0.4:22-4.175.71.9:38354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:23.845597 systemd[1]: session-23.scope: Deactivated successfully. May 22 19:13:23.846920 systemd-logind[2364]: Session 23 logged out. Waiting for processes to exit. May 22 19:13:23.847699 systemd-logind[2364]: Removed session 23. May 22 19:13:23.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-9-10.0.0.4:22-4.175.71.9:38370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:23.959240 systemd[1]: Started sshd@20-9-10.0.0.4:22-4.175.71.9:38370.service - OpenSSH per-connection server daemon (4.175.71.9:38370). May 22 19:13:24.036000 audit[3325]: AUDIT1101 pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.038218 sshd[3325]: Accepted publickey for core from 4.175.71.9 port 38370 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:24.037000 audit[3325]: AUDIT1103 pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.037000 audit[3325]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffde69f2890 a2=3 a3=0 items=0 ppid=1 pid=3325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:24.037000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:24.039323 sshd-session[3325]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:24.043447 systemd-logind[2364]: New session '24' of user 'core' with class 'user' and type 'tty'. May 22 19:13:24.050782 systemd[1]: Started session-24.scope - Session 24 of User core. May 22 19:13:24.051000 audit[3325]: AUDIT1105 pid=3325 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.052000 audit[3329]: AUDIT1103 pid=3329 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.069000 audit[3331]: AUDIT1101 pid=3331 uid=500 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.070943 sudo[3331]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:24.069000 audit[3331]: AUDIT1110 pid=3331 uid=500 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.071553 sudo[3331]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:24.069000 audit[3331]: AUDIT1105 pid=3331 uid=500 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.086913 sudo[3331]: pam_unix(sudo:session): session closed for user root May 22 19:13:24.085000 audit[3331]: AUDIT1106 pid=3331 uid=500 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.085000 audit[3331]: AUDIT1104 pid=3331 uid=500 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.096023 sshd[3329]: Connection closed by 4.175.71.9 port 38370 May 22 19:13:24.096765 sshd-session[3325]: pam_unix(sshd:session): session closed for user core May 22 19:13:24.096000 audit[3325]: AUDIT1106 pid=3325 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.096000 audit[3325]: AUDIT1104 pid=3325 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-9-10.0.0.4:22-4.175.71.9:38370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:24.099743 systemd[1]: sshd@20-9-10.0.0.4:22-4.175.71.9:38370.service: Deactivated successfully. May 22 19:13:24.101262 systemd[1]: session-24.scope: Deactivated successfully. May 22 19:13:24.101964 systemd-logind[2364]: Session 24 logged out. Waiting for processes to exit. May 22 19:13:24.103101 systemd-logind[2364]: Removed session 24. May 22 19:13:24.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10-10.0.0.4:22-4.175.71.9:38386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:24.217285 systemd[1]: Started sshd@21-10-10.0.0.4:22-4.175.71.9:38386.service - OpenSSH per-connection server daemon (4.175.71.9:38386). May 22 19:13:24.297000 audit[3339]: AUDIT1101 pid=3339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.299724 sshd[3339]: Accepted publickey for core from 4.175.71.9 port 38386 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:24.298000 audit[3339]: AUDIT1103 pid=3339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.298000 audit[3339]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe124ffc00 a2=3 a3=0 items=0 ppid=1 pid=3339 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:24.298000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:24.300777 sshd-session[3339]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:24.304891 systemd-logind[2364]: New session '25' of user 'core' with class 'user' and type 'tty'. May 22 19:13:24.316772 systemd[1]: Started session-25.scope - Session 25 of User core. May 22 19:13:24.317000 audit[3339]: AUDIT1105 pid=3339 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.318000 audit[3343]: AUDIT1103 pid=3343 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.335000 audit[3345]: AUDIT1101 pid=3345 uid=500 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.337172 sudo[3345]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:24.335000 audit[3345]: AUDIT1110 pid=3345 uid=500 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.336000 audit[3345]: AUDIT1105 pid=3345 uid=500 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.337863 sudo[3345]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:24.362929 sudo[3345]: pam_unix(sudo:session): session closed for user root May 22 19:13:24.361000 audit[3345]: AUDIT1106 pid=3345 uid=500 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.361000 audit[3345]: AUDIT1104 pid=3345 uid=500 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.372768 sshd[3343]: Connection closed by 4.175.71.9 port 38386 May 22 19:13:24.374227 sshd-session[3339]: pam_unix(sshd:session): session closed for user core May 22 19:13:24.409000 audit[3339]: AUDIT1106 pid=3339 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.409000 audit[3339]: AUDIT1104 pid=3339 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10-10.0.0.4:22-4.175.71.9:38386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:24.412406 systemd[1]: sshd@21-10-10.0.0.4:22-4.175.71.9:38386.service: Deactivated successfully. May 22 19:13:24.414294 systemd[1]: session-25.scope: Deactivated successfully. May 22 19:13:24.415902 systemd-logind[2364]: Session 25 logged out. Waiting for processes to exit. May 22 19:13:24.417224 systemd-logind[2364]: Removed session 25. May 22 19:13:24.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4109-10.0.0.4:22-4.175.71.9:38400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:24.492189 systemd[1]: Started sshd@22-4109-10.0.0.4:22-4.175.71.9:38400.service - OpenSSH per-connection server daemon (4.175.71.9:38400). May 22 19:13:24.573000 audit[3353]: AUDIT1101 pid=3353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.575019 sshd[3353]: Accepted publickey for core from 4.175.71.9 port 38400 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:24.574000 audit[3353]: AUDIT1103 pid=3353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.574000 audit[3353]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe74235b50 a2=3 a3=0 items=0 ppid=1 pid=3353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:24.574000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:24.576124 sshd-session[3353]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:24.580138 systemd-logind[2364]: New session '26' of user 'core' with class 'user' and type 'tty'. May 22 19:13:24.588804 systemd[1]: Started session-26.scope - Session 26 of User core. May 22 19:13:24.589000 audit[3353]: AUDIT1105 pid=3353 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.590000 audit[3357]: AUDIT1103 pid=3357 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.607000 audit[3359]: AUDIT1101 pid=3359 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.607000 audit[3359]: AUDIT1110 pid=3359 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.608000 audit[3359]: AUDIT1105 pid=3359 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.625000 audit[3359]: AUDIT1106 pid=3359 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.625000 audit[3359]: AUDIT1104 pid=3359 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.665826 sshd[3357]: Connection closed by 4.175.71.9 port 38400 May 22 19:13:24.609419 sudo[3359]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:24.609617 sudo[3359]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:24.626827 sudo[3359]: pam_unix(sudo:session): session closed for user root May 22 19:13:24.636176 sshd-session[3353]: pam_unix(sshd:session): session closed for user core May 22 19:13:24.664000 audit[3353]: AUDIT1106 pid=3353 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.664000 audit[3353]: AUDIT1104 pid=3353 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.668316 systemd[1]: sshd@22-4109-10.0.0.4:22-4.175.71.9:38400.service: Deactivated successfully. May 22 19:13:24.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4109-10.0.0.4:22-4.175.71.9:38400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:24.670033 systemd[1]: session-26.scope: Deactivated successfully. May 22 19:13:24.670870 systemd-logind[2364]: Session 26 logged out. Waiting for processes to exit. May 22 19:13:24.672122 systemd-logind[2364]: Removed session 26. May 22 19:13:24.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4110-10.0.0.4:22-4.175.71.9:38414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:24.756043 systemd[1]: Started sshd@23-4110-10.0.0.4:22-4.175.71.9:38414.service - OpenSSH per-connection server daemon (4.175.71.9:38414). May 22 19:13:24.831000 audit[3367]: AUDIT1101 pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.833454 sshd[3367]: Accepted publickey for core from 4.175.71.9 port 38414 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:24.832000 audit[3367]: AUDIT1103 pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.832000 audit[3367]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd2bac2c60 a2=3 a3=0 items=0 ppid=1 pid=3367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:24.832000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:24.834554 sshd-session[3367]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:24.838689 systemd-logind[2364]: New session '27' of user 'core' with class 'user' and type 'tty'. May 22 19:13:24.848794 systemd[1]: Started session-27.scope - Session 27 of User core. May 22 19:13:24.849000 audit[3367]: AUDIT1105 pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.851000 audit[3371]: AUDIT1103 pid=3371 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.866000 audit[3373]: AUDIT1101 pid=3373 uid=500 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.868491 sudo[3373]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:24.868769 sudo[3373]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:24.866000 audit[3373]: AUDIT1110 pid=3373 uid=500 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.867000 audit[3373]: AUDIT1105 pid=3373 uid=500 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.884085 sudo[3373]: pam_unix(sudo:session): session closed for user root May 22 19:13:24.882000 audit[3373]: AUDIT1106 pid=3373 uid=500 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.882000 audit[3373]: AUDIT1104 pid=3373 uid=500 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:24.892841 sshd[3371]: Connection closed by 4.175.71.9 port 38414 May 22 19:13:24.893814 sshd-session[3367]: pam_unix(sshd:session): session closed for user core May 22 19:13:24.892000 audit[3367]: AUDIT1106 pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.892000 audit[3367]: AUDIT1104 pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:24.896420 systemd[1]: sshd@23-4110-10.0.0.4:22-4.175.71.9:38414.service: Deactivated successfully. May 22 19:13:24.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4110-10.0.0.4:22-4.175.71.9:38414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:24.897919 systemd[1]: session-27.scope: Deactivated successfully. May 22 19:13:24.898595 systemd-logind[2364]: Session 27 logged out. Waiting for processes to exit. May 22 19:13:24.899695 systemd-logind[2364]: Removed session 27. May 22 19:13:25.011228 systemd[1]: Started sshd@24-11-10.0.0.4:22-4.175.71.9:38416.service - OpenSSH per-connection server daemon (4.175.71.9:38416). May 22 19:13:25.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-11-10.0.0.4:22-4.175.71.9:38416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:25.091000 audit[3381]: AUDIT1101 pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.093530 sshd[3381]: Accepted publickey for core from 4.175.71.9 port 38416 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:25.092000 audit[3381]: AUDIT1103 pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.092000 audit[3381]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffff61ae0b0 a2=3 a3=0 items=0 ppid=1 pid=3381 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:25.092000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:25.094671 sshd-session[3381]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:25.098777 systemd-logind[2364]: New session '28' of user 'core' with class 'user' and type 'tty'. May 22 19:13:25.107817 systemd[1]: Started session-28.scope - Session 28 of User core. May 22 19:13:25.108000 audit[3381]: AUDIT1105 pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.109000 audit[3385]: AUDIT1103 pid=3385 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.125000 audit[3387]: AUDIT1101 pid=3387 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.127499 sudo[3387]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:25.126000 audit[3387]: AUDIT1110 pid=3387 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.127879 sudo[3387]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:25.126000 audit[3387]: AUDIT1105 pid=3387 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.146984 sudo[3387]: pam_unix(sudo:session): session closed for user root May 22 19:13:25.145000 audit[3387]: AUDIT1106 pid=3387 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.145000 audit[3387]: AUDIT1104 pid=3387 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.156070 sshd[3385]: Connection closed by 4.175.71.9 port 38416 May 22 19:13:25.156954 sshd-session[3381]: pam_unix(sshd:session): session closed for user core May 22 19:13:25.155000 audit[3381]: AUDIT1106 pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.155000 audit[3381]: AUDIT1104 pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.159443 systemd[1]: sshd@24-11-10.0.0.4:22-4.175.71.9:38416.service: Deactivated successfully. May 22 19:13:25.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-11-10.0.0.4:22-4.175.71.9:38416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:25.160893 systemd[1]: session-28.scope: Deactivated successfully. May 22 19:13:25.161565 systemd-logind[2364]: Session 28 logged out. Waiting for processes to exit. May 22 19:13:25.162704 systemd-logind[2364]: Removed session 28. May 22 19:13:25.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-4111-10.0.0.4:22-4.175.71.9:38428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:25.276347 systemd[1]: Started sshd@25-4111-10.0.0.4:22-4.175.71.9:38428.service - OpenSSH per-connection server daemon (4.175.71.9:38428). May 22 19:13:25.354000 audit[3395]: AUDIT1101 pid=3395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.356210 sshd[3395]: Accepted publickey for core from 4.175.71.9 port 38428 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:25.355000 audit[3395]: AUDIT1103 pid=3395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.355000 audit[3395]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd5a75c360 a2=3 a3=0 items=0 ppid=1 pid=3395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:25.355000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:25.357376 sshd-session[3395]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:25.361548 systemd-logind[2364]: New session '29' of user 'core' with class 'user' and type 'tty'. May 22 19:13:25.370795 systemd[1]: Started session-29.scope - Session 29 of User core. May 22 19:13:25.371000 audit[3395]: AUDIT1105 pid=3395 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.372000 audit[3399]: AUDIT1103 pid=3399 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.389000 audit[3401]: AUDIT1101 pid=3401 uid=500 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.390913 sudo[3401]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:25.391157 sudo[3401]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:25.389000 audit[3401]: AUDIT1110 pid=3401 uid=500 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.389000 audit[3401]: AUDIT1105 pid=3401 uid=500 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.412255 sudo[3401]: pam_unix(sudo:session): session closed for user root May 22 19:13:25.410000 audit[3401]: AUDIT1106 pid=3401 uid=500 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.410000 audit[3401]: AUDIT1104 pid=3401 uid=500 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.421571 sshd[3399]: Connection closed by 4.175.71.9 port 38428 May 22 19:13:25.421991 sshd-session[3395]: pam_unix(sshd:session): session closed for user core May 22 19:13:25.420000 audit[3395]: AUDIT1106 pid=3395 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.420000 audit[3395]: AUDIT1104 pid=3395 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.424242 systemd[1]: sshd@25-4111-10.0.0.4:22-4.175.71.9:38428.service: Deactivated successfully. May 22 19:13:25.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-4111-10.0.0.4:22-4.175.71.9:38428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:25.425768 systemd[1]: session-29.scope: Deactivated successfully. May 22 19:13:25.427316 systemd-logind[2364]: Session 29 logged out. Waiting for processes to exit. May 22 19:13:25.428072 systemd-logind[2364]: Removed session 29. May 22 19:13:25.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-12-10.0.0.4:22-4.175.71.9:38436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:25.546089 systemd[1]: Started sshd@26-12-10.0.0.4:22-4.175.71.9:38436.service - OpenSSH per-connection server daemon (4.175.71.9:38436). May 22 19:13:25.628000 audit[3409]: AUDIT1101 pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.630274 sshd[3409]: Accepted publickey for core from 4.175.71.9 port 38436 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:25.629000 audit[3409]: AUDIT1103 pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.629000 audit[3409]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd84adcf50 a2=3 a3=0 items=0 ppid=1 pid=3409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:25.629000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:25.631531 sshd-session[3409]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:25.635734 systemd-logind[2364]: New session '30' of user 'core' with class 'user' and type 'tty'. May 22 19:13:25.644801 systemd[1]: Started session-30.scope - Session 30 of User core. May 22 19:13:25.645000 audit[3409]: AUDIT1105 pid=3409 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.646000 audit[3413]: AUDIT1103 pid=3413 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.663000 audit[3415]: AUDIT1101 pid=3415 uid=500 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.665408 sudo[3415]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:25.663000 audit[3415]: AUDIT1110 pid=3415 uid=500 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.665761 sudo[3415]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:25.664000 audit[3415]: AUDIT1105 pid=3415 uid=500 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.684877 sudo[3415]: pam_unix(sudo:session): session closed for user root May 22 19:13:25.683000 audit[3415]: AUDIT1106 pid=3415 uid=500 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.683000 audit[3415]: AUDIT1104 pid=3415 uid=500 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.694987 sshd[3413]: Connection closed by 4.175.71.9 port 38436 May 22 19:13:25.696394 sshd-session[3409]: pam_unix(sshd:session): session closed for user core May 22 19:13:25.695000 audit[3409]: AUDIT1106 pid=3409 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.695000 audit[3409]: AUDIT1104 pid=3409 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.698797 systemd[1]: sshd@26-12-10.0.0.4:22-4.175.71.9:38436.service: Deactivated successfully. May 22 19:13:25.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-12-10.0.0.4:22-4.175.71.9:38436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:25.700235 systemd[1]: session-30.scope: Deactivated successfully. May 22 19:13:25.700973 systemd-logind[2364]: Session 30 logged out. Waiting for processes to exit. May 22 19:13:25.702194 systemd-logind[2364]: Removed session 30. May 22 19:13:25.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-13-10.0.0.4:22-4.175.71.9:38442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:25.814195 systemd[1]: Started sshd@27-13-10.0.0.4:22-4.175.71.9:38442.service - OpenSSH per-connection server daemon (4.175.71.9:38442). May 22 19:13:25.895000 audit[3423]: AUDIT1101 pid=3423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.897150 sshd[3423]: Accepted publickey for core from 4.175.71.9 port 38442 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:25.896000 audit[3423]: AUDIT1103 pid=3423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.896000 audit[3423]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffddc5a0150 a2=3 a3=0 items=0 ppid=1 pid=3423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:25.896000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:25.898383 sshd-session[3423]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:25.902152 systemd-logind[2364]: New session '31' of user 'core' with class 'user' and type 'tty'. May 22 19:13:25.905783 systemd[1]: Started session-31.scope - Session 31 of User core. May 22 19:13:25.906000 audit[3423]: AUDIT1105 pid=3423 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.908000 audit[3427]: AUDIT1103 pid=3427 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.924000 audit[3429]: AUDIT1101 pid=3429 uid=500 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.925812 sudo[3429]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:25.926071 sudo[3429]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:25.924000 audit[3429]: AUDIT1110 pid=3429 uid=500 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.924000 audit[3429]: AUDIT1105 pid=3429 uid=500 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.951248 sudo[3429]: pam_unix(sudo:session): session closed for user root May 22 19:13:25.949000 audit[3429]: AUDIT1106 pid=3429 uid=500 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.949000 audit[3429]: AUDIT1104 pid=3429 uid=500 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:25.960502 sshd[3427]: Connection closed by 4.175.71.9 port 38442 May 22 19:13:25.961757 sshd-session[3423]: pam_unix(sshd:session): session closed for user core May 22 19:13:25.960000 audit[3423]: AUDIT1106 pid=3423 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.960000 audit[3423]: AUDIT1104 pid=3423 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:25.964313 systemd[1]: sshd@27-13-10.0.0.4:22-4.175.71.9:38442.service: Deactivated successfully. May 22 19:13:25.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-13-10.0.0.4:22-4.175.71.9:38442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:25.965816 systemd[1]: session-31.scope: Deactivated successfully. May 22 19:13:25.966475 systemd-logind[2364]: Session 31 logged out. Waiting for processes to exit. May 22 19:13:25.967659 systemd-logind[2364]: Removed session 31. May 22 19:13:26.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-14-10.0.0.4:22-4.175.71.9:38456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:26.080344 systemd[1]: Started sshd@28-14-10.0.0.4:22-4.175.71.9:38456.service - OpenSSH per-connection server daemon (4.175.71.9:38456). May 22 19:13:26.162000 audit[3437]: AUDIT1101 pid=3437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.164330 sshd[3437]: Accepted publickey for core from 4.175.71.9 port 38456 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:26.163000 audit[3437]: AUDIT1103 pid=3437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.163000 audit[3437]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc22c8fd40 a2=3 a3=0 items=0 ppid=1 pid=3437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:26.163000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:26.165952 sshd-session[3437]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:26.170203 systemd-logind[2364]: New session '32' of user 'core' with class 'user' and type 'tty'. May 22 19:13:26.178796 systemd[1]: Started session-32.scope - Session 32 of User core. May 22 19:13:26.179000 audit[3437]: AUDIT1105 pid=3437 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.180000 audit[3441]: AUDIT1103 pid=3441 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.197000 audit[3443]: AUDIT1101 pid=3443 uid=500 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.199570 sudo[3443]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:26.198000 audit[3443]: AUDIT1110 pid=3443 uid=500 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.199926 sudo[3443]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:26.198000 audit[3443]: AUDIT1105 pid=3443 uid=500 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.219033 sudo[3443]: pam_unix(sudo:session): session closed for user root May 22 19:13:26.217000 audit[3443]: AUDIT1106 pid=3443 uid=500 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.217000 audit[3443]: AUDIT1104 pid=3443 uid=500 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.229119 sshd[3441]: Connection closed by 4.175.71.9 port 38456 May 22 19:13:26.230577 sshd-session[3437]: pam_unix(sshd:session): session closed for user core May 22 19:13:26.229000 audit[3437]: AUDIT1106 pid=3437 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.229000 audit[3437]: AUDIT1104 pid=3437 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.232399 systemd[1]: sshd@28-14-10.0.0.4:22-4.175.71.9:38456.service: Deactivated successfully. May 22 19:13:26.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-14-10.0.0.4:22-4.175.71.9:38456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:26.233971 systemd[1]: session-32.scope: Deactivated successfully. May 22 19:13:26.235568 systemd-logind[2364]: Session 32 logged out. Waiting for processes to exit. May 22 19:13:26.236353 systemd-logind[2364]: Removed session 32. May 22 19:13:26.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-4112-10.0.0.4:22-4.175.71.9:38470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:26.351146 systemd[1]: Started sshd@29-4112-10.0.0.4:22-4.175.71.9:38470.service - OpenSSH per-connection server daemon (4.175.71.9:38470). May 22 19:13:26.431000 audit[3451]: AUDIT1101 pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.433130 sshd[3451]: Accepted publickey for core from 4.175.71.9 port 38470 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:26.432000 audit[3451]: AUDIT1103 pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.432000 audit[3451]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffea4e25670 a2=3 a3=0 items=0 ppid=1 pid=3451 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:26.432000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:26.434683 sshd-session[3451]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:26.438829 systemd-logind[2364]: New session '33' of user 'core' with class 'user' and type 'tty'. May 22 19:13:26.444789 systemd[1]: Started session-33.scope - Session 33 of User core. May 22 19:13:26.445000 audit[3451]: AUDIT1105 pid=3451 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.446000 audit[3455]: AUDIT1103 pid=3455 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.462000 audit[3457]: AUDIT1101 pid=3457 uid=500 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.464166 sudo[3457]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:26.464417 sudo[3457]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:26.462000 audit[3457]: AUDIT1110 pid=3457 uid=500 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.462000 audit[3457]: AUDIT1105 pid=3457 uid=500 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.489116 sudo[3457]: pam_unix(sudo:session): session closed for user root May 22 19:13:26.487000 audit[3457]: AUDIT1106 pid=3457 uid=500 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.487000 audit[3457]: AUDIT1104 pid=3457 uid=500 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:26.498236 sshd[3455]: Connection closed by 4.175.71.9 port 38470 May 22 19:13:26.498808 sshd-session[3451]: pam_unix(sshd:session): session closed for user core May 22 19:13:26.497000 audit[3451]: AUDIT1106 pid=3451 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.497000 audit[3451]: AUDIT1104 pid=3451 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.501047 systemd[1]: sshd@29-4112-10.0.0.4:22-4.175.71.9:38470.service: Deactivated successfully. May 22 19:13:26.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-4112-10.0.0.4:22-4.175.71.9:38470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:26.502552 systemd[1]: session-33.scope: Deactivated successfully. May 22 19:13:26.504452 systemd-logind[2364]: Session 33 logged out. Waiting for processes to exit. May 22 19:13:26.505280 systemd-logind[2364]: Removed session 33. May 22 19:13:26.619581 systemd[1]: Started sshd@30-4113-10.0.0.4:22-4.175.71.9:38484.service - OpenSSH per-connection server daemon (4.175.71.9:38484). May 22 19:13:26.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-4113-10.0.0.4:22-4.175.71.9:38484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:26.705000 audit[3465]: AUDIT1101 pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.706985 sshd[3465]: Accepted publickey for core from 4.175.71.9 port 38484 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:26.706000 audit[3465]: AUDIT1103 pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:26.706000 audit[3465]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffd4517610 a2=3 a3=0 items=0 ppid=1 pid=3465 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:26.706000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:26.708163 sshd-session[3465]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:26.712911 systemd-logind[2364]: New session '34' of user 'core' with class 'user' and type 'tty'. May 22 19:13:26.714847 systemd[1]: Started session-34.scope - Session 34 of User core. May 22 19:13:27.608000 audit[3465]: AUDIT1105 pid=3465 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.614014 kernel: kauditd_printk_skb: 257 callbacks suppressed May 22 19:13:27.614237 kernel: audit: type=1105 audit(1779477207.608:558): pid=3465 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.613000 audit[3469]: AUDIT1103 pid=3469 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.618933 kernel: audit: type=1103 audit(1779477207.613:559): pid=3469 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.632000 audit[3471]: AUDIT1101 pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.634349 sudo[3471]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:27.632000 audit[3471]: AUDIT1110 pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.635608 sudo[3471]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:27.640275 kernel: audit: type=1101 audit(1779477207.632:560): pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.640315 kernel: audit: type=1110 audit(1779477207.632:561): pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.632000 audit[3471]: AUDIT1105 pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.645826 kernel: audit: type=1105 audit(1779477207.632:562): pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.657134 sudo[3471]: pam_unix(sudo:session): session closed for user root May 22 19:13:27.655000 audit[3471]: AUDIT1106 pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.661642 kernel: audit: type=1106 audit(1779477207.655:563): pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.655000 audit[3471]: AUDIT1104 pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.666670 kernel: audit: type=1104 audit(1779477207.655:564): pid=3471 uid=500 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.671021 sshd[3469]: Connection closed by 4.175.71.9 port 38484 May 22 19:13:27.672557 sshd-session[3465]: pam_unix(sshd:session): session closed for user core May 22 19:13:27.671000 audit[3465]: AUDIT1106 pid=3465 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.676044 systemd[1]: sshd@30-4113-10.0.0.4:22-4.175.71.9:38484.service: Deactivated successfully. May 22 19:13:27.678575 systemd[1]: session-34.scope: Deactivated successfully. May 22 19:13:27.679819 systemd-logind[2364]: Session 34 logged out. Waiting for processes to exit. May 22 19:13:27.671000 audit[3465]: AUDIT1104 pid=3465 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.682001 systemd-logind[2364]: Removed session 34. May 22 19:13:27.684972 kernel: audit: type=1106 audit(1779477207.671:565): pid=3465 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.685029 kernel: audit: type=1104 audit(1779477207.671:566): pid=3465 uid=0 auid=500 ses=34 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-4113-10.0.0.4:22-4.175.71.9:38484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:27.689442 kernel: audit: type=1131 audit(1779477207.671:567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-4113-10.0.0.4:22-4.175.71.9:38484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:27.794212 systemd[1]: Started sshd@31-4114-10.0.0.4:22-4.175.71.9:38488.service - OpenSSH per-connection server daemon (4.175.71.9:38488). May 22 19:13:27.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-4114-10.0.0.4:22-4.175.71.9:38488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:27.871000 audit[3479]: AUDIT1101 pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.873350 sshd[3479]: Accepted publickey for core from 4.175.71.9 port 38488 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:27.872000 audit[3479]: AUDIT1103 pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.872000 audit[3479]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe5f549940 a2=3 a3=0 items=0 ppid=1 pid=3479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=35 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:27.872000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:27.874782 sshd-session[3479]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:27.878236 systemd-logind[2364]: New session '35' of user 'core' with class 'user' and type 'tty'. May 22 19:13:27.887781 systemd[1]: Started session-35.scope - Session 35 of User core. May 22 19:13:27.888000 audit[3479]: AUDIT1105 pid=3479 uid=0 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.889000 audit[3483]: AUDIT1103 pid=3483 uid=0 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.905000 audit[3485]: AUDIT1101 pid=3485 uid=500 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.907481 sudo[3485]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:27.905000 audit[3485]: AUDIT1110 pid=3485 uid=500 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.907845 sudo[3485]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:27.906000 audit[3485]: AUDIT1105 pid=3485 uid=500 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.926998 sudo[3485]: pam_unix(sudo:session): session closed for user root May 22 19:13:27.925000 audit[3485]: AUDIT1106 pid=3485 uid=500 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.925000 audit[3485]: AUDIT1104 pid=3485 uid=500 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:27.936140 sshd[3483]: Connection closed by 4.175.71.9 port 38488 May 22 19:13:27.936843 sshd-session[3479]: pam_unix(sshd:session): session closed for user core May 22 19:13:27.935000 audit[3479]: AUDIT1106 pid=3479 uid=0 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.935000 audit[3479]: AUDIT1104 pid=3479 uid=0 auid=500 ses=35 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:27.938951 systemd[1]: sshd@31-4114-10.0.0.4:22-4.175.71.9:38488.service: Deactivated successfully. May 22 19:13:27.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-4114-10.0.0.4:22-4.175.71.9:38488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:27.940410 systemd[1]: session-35.scope: Deactivated successfully. May 22 19:13:27.942052 systemd-logind[2364]: Session 35 logged out. Waiting for processes to exit. May 22 19:13:27.942854 systemd-logind[2364]: Removed session 35. May 22 19:13:28.060277 systemd[1]: Started sshd@32-4115-10.0.0.4:22-4.175.71.9:38504.service - OpenSSH per-connection server daemon (4.175.71.9:38504). May 22 19:13:28.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-4115-10.0.0.4:22-4.175.71.9:38504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:28.137000 audit[3493]: AUDIT1101 pid=3493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.139643 sshd[3493]: Accepted publickey for core from 4.175.71.9 port 38504 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:28.138000 audit[3493]: AUDIT1103 pid=3493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.138000 audit[3493]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd2b789270 a2=3 a3=0 items=0 ppid=1 pid=3493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=36 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:28.138000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:28.140812 sshd-session[3493]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:28.145006 systemd-logind[2364]: New session '36' of user 'core' with class 'user' and type 'tty'. May 22 19:13:28.153803 systemd[1]: Started session-36.scope - Session 36 of User core. May 22 19:13:28.154000 audit[3493]: AUDIT1105 pid=3493 uid=0 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.155000 audit[3497]: AUDIT1103 pid=3497 uid=0 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.171000 audit[3499]: AUDIT1101 pid=3499 uid=500 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.173819 sudo[3499]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:28.174067 sudo[3499]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:28.172000 audit[3499]: AUDIT1110 pid=3499 uid=500 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.172000 audit[3499]: AUDIT1105 pid=3499 uid=500 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.189972 sudo[3499]: pam_unix(sudo:session): session closed for user root May 22 19:13:28.188000 audit[3499]: AUDIT1106 pid=3499 uid=500 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.188000 audit[3499]: AUDIT1104 pid=3499 uid=500 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.199173 sshd[3497]: Connection closed by 4.175.71.9 port 38504 May 22 19:13:28.199854 sshd-session[3493]: pam_unix(sshd:session): session closed for user core May 22 19:13:28.200000 audit[3493]: AUDIT1106 pid=3493 uid=0 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.200000 audit[3493]: AUDIT1104 pid=3493 uid=0 auid=500 ses=36 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.203108 systemd[1]: sshd@32-4115-10.0.0.4:22-4.175.71.9:38504.service: Deactivated successfully. May 22 19:13:28.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-4115-10.0.0.4:22-4.175.71.9:38504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:28.204537 systemd[1]: session-36.scope: Deactivated successfully. May 22 19:13:28.206066 systemd-logind[2364]: Session 36 logged out. Waiting for processes to exit. May 22 19:13:28.206894 systemd-logind[2364]: Removed session 36. May 22 19:13:28.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-15-10.0.0.4:22-4.175.71.9:38518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:28.320332 systemd[1]: Started sshd@33-15-10.0.0.4:22-4.175.71.9:38518.service - OpenSSH per-connection server daemon (4.175.71.9:38518). May 22 19:13:28.399000 audit[3507]: AUDIT1101 pid=3507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.401050 sshd[3507]: Accepted publickey for core from 4.175.71.9 port 38518 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:28.400000 audit[3507]: AUDIT1103 pid=3507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.400000 audit[3507]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff91ffb780 a2=3 a3=0 items=0 ppid=1 pid=3507 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=37 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:28.400000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:28.402261 sshd-session[3507]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:28.406427 systemd-logind[2364]: New session '37' of user 'core' with class 'user' and type 'tty'. May 22 19:13:28.412789 systemd[1]: Started session-37.scope - Session 37 of User core. May 22 19:13:28.413000 audit[3507]: AUDIT1105 pid=3507 uid=0 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.414000 audit[3511]: AUDIT1103 pid=3511 uid=0 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.431000 audit[3513]: AUDIT1101 pid=3513 uid=500 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.433122 sudo[3513]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:28.431000 audit[3513]: AUDIT1110 pid=3513 uid=500 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.433546 sudo[3513]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:28.432000 audit[3513]: AUDIT1105 pid=3513 uid=500 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.452837 sudo[3513]: pam_unix(sudo:session): session closed for user root May 22 19:13:28.451000 audit[3513]: AUDIT1106 pid=3513 uid=500 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.451000 audit[3513]: AUDIT1104 pid=3513 uid=500 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.462364 sshd[3511]: Connection closed by 4.175.71.9 port 38518 May 22 19:13:28.463751 sshd-session[3507]: pam_unix(sshd:session): session closed for user core May 22 19:13:28.462000 audit[3507]: AUDIT1106 pid=3507 uid=0 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.462000 audit[3507]: AUDIT1104 pid=3507 uid=0 auid=500 ses=37 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.466028 systemd[1]: sshd@33-15-10.0.0.4:22-4.175.71.9:38518.service: Deactivated successfully. May 22 19:13:28.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-15-10.0.0.4:22-4.175.71.9:38518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:28.467452 systemd[1]: session-37.scope: Deactivated successfully. May 22 19:13:28.468193 systemd-logind[2364]: Session 37 logged out. Waiting for processes to exit. May 22 19:13:28.469297 systemd-logind[2364]: Removed session 37. May 22 19:13:28.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-16-10.0.0.4:22-4.175.71.9:38530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:28.581286 systemd[1]: Started sshd@34-16-10.0.0.4:22-4.175.71.9:38530.service - OpenSSH per-connection server daemon (4.175.71.9:38530). May 22 19:13:28.656000 audit[3521]: AUDIT1101 pid=3521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.657666 sshd[3521]: Accepted publickey for core from 4.175.71.9 port 38530 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:28.658000 audit[3521]: AUDIT1103 pid=3521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.658000 audit[3521]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffda48b1f50 a2=3 a3=0 items=0 ppid=1 pid=3521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=38 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:28.658000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:28.659102 sshd-session[3521]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:28.663197 systemd-logind[2364]: New session '38' of user 'core' with class 'user' and type 'tty'. May 22 19:13:28.673786 systemd[1]: Started session-38.scope - Session 38 of User core. May 22 19:13:28.675000 audit[3521]: AUDIT1105 pid=3521 uid=0 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.677000 audit[3526]: AUDIT1103 pid=3526 uid=0 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.693000 audit[3528]: AUDIT1101 pid=3528 uid=500 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.694522 sudo[3528]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:28.694786 sudo[3528]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:28.694000 audit[3528]: AUDIT1110 pid=3528 uid=500 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.694000 audit[3528]: AUDIT1105 pid=3528 uid=500 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.716094 sudo[3528]: pam_unix(sudo:session): session closed for user root May 22 19:13:28.715000 audit[3528]: AUDIT1106 pid=3528 uid=500 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.715000 audit[3528]: AUDIT1104 pid=3528 uid=500 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.724836 sshd[3526]: Connection closed by 4.175.71.9 port 38530 May 22 19:13:28.725077 sshd-session[3521]: pam_unix(sshd:session): session closed for user core May 22 19:13:28.724000 audit[3521]: AUDIT1106 pid=3521 uid=0 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.724000 audit[3521]: AUDIT1104 pid=3521 uid=0 auid=500 ses=38 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.727797 systemd[1]: sshd@34-16-10.0.0.4:22-4.175.71.9:38530.service: Deactivated successfully. May 22 19:13:28.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-16-10.0.0.4:22-4.175.71.9:38530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:28.729231 systemd[1]: session-38.scope: Deactivated successfully. May 22 19:13:28.730964 systemd-logind[2364]: Session 38 logged out. Waiting for processes to exit. May 22 19:13:28.731795 systemd-logind[2364]: Removed session 38. May 22 19:13:28.843106 systemd[1]: Started sshd@35-17-10.0.0.4:22-4.175.71.9:38536.service - OpenSSH per-connection server daemon (4.175.71.9:38536). May 22 19:13:28.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-17-10.0.0.4:22-4.175.71.9:38536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:28.919000 audit[3536]: AUDIT1101 pid=3536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.920187 sshd[3536]: Accepted publickey for core from 4.175.71.9 port 38536 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:28.920000 audit[3536]: AUDIT1103 pid=3536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.920000 audit[3536]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffffa9f54d0 a2=3 a3=0 items=0 ppid=1 pid=3536 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=39 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:28.920000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:28.921389 sshd-session[3536]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:28.925846 systemd-logind[2364]: New session '39' of user 'core' with class 'user' and type 'tty'. May 22 19:13:28.930777 systemd[1]: Started session-39.scope - Session 39 of User core. May 22 19:13:28.932000 audit[3536]: AUDIT1105 pid=3536 uid=0 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.933000 audit[3541]: AUDIT1103 pid=3541 uid=0 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.949000 audit[3543]: AUDIT1101 pid=3543 uid=500 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.949771 sudo[3543]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:28.950020 sudo[3543]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:28.949000 audit[3543]: AUDIT1110 pid=3543 uid=500 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.949000 audit[3543]: AUDIT1105 pid=3543 uid=500 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.966000 audit[3543]: AUDIT1106 pid=3543 uid=500 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.966946 sudo[3543]: pam_unix(sudo:session): session closed for user root May 22 19:13:28.966000 audit[3543]: AUDIT1104 pid=3543 uid=500 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:28.975876 sshd[3541]: Connection closed by 4.175.71.9 port 38536 May 22 19:13:28.976783 sshd-session[3536]: pam_unix(sshd:session): session closed for user core May 22 19:13:28.976000 audit[3536]: AUDIT1106 pid=3536 uid=0 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.976000 audit[3536]: AUDIT1104 pid=3536 uid=0 auid=500 ses=39 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:28.978583 systemd[1]: sshd@35-17-10.0.0.4:22-4.175.71.9:38536.service: Deactivated successfully. May 22 19:13:28.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-17-10.0.0.4:22-4.175.71.9:38536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:28.980072 systemd[1]: session-39.scope: Deactivated successfully. May 22 19:13:28.981834 systemd-logind[2364]: Session 39 logged out. Waiting for processes to exit. May 22 19:13:28.982700 systemd-logind[2364]: Removed session 39. May 22 19:13:29.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-4116-10.0.0.4:22-4.175.71.9:38546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:29.095271 systemd[1]: Started sshd@36-4116-10.0.0.4:22-4.175.71.9:38546.service - OpenSSH per-connection server daemon (4.175.71.9:38546). May 22 19:13:29.173000 audit[3551]: AUDIT1101 pid=3551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.174741 sshd[3551]: Accepted publickey for core from 4.175.71.9 port 38546 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:29.174000 audit[3551]: AUDIT1103 pid=3551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.175000 audit[3551]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff19b9aa20 a2=3 a3=0 items=0 ppid=1 pid=3551 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:29.175000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:29.176111 sshd-session[3551]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:29.180510 systemd-logind[2364]: New session '40' of user 'core' with class 'user' and type 'tty'. May 22 19:13:29.190811 systemd[1]: Started session-40.scope - Session 40 of User core. May 22 19:13:29.192000 audit[3551]: AUDIT1105 pid=3551 uid=0 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.193000 audit[3556]: AUDIT1103 pid=3556 uid=0 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.209000 audit[3558]: AUDIT1101 pid=3558 uid=500 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.209952 sudo[3558]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:29.210198 sudo[3558]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:29.209000 audit[3558]: AUDIT1110 pid=3558 uid=500 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.209000 audit[3558]: AUDIT1105 pid=3558 uid=500 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.227836 sudo[3558]: pam_unix(sudo:session): session closed for user root May 22 19:13:29.227000 audit[3558]: AUDIT1106 pid=3558 uid=500 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.227000 audit[3558]: AUDIT1104 pid=3558 uid=500 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.236304 sshd[3556]: Connection closed by 4.175.71.9 port 38546 May 22 19:13:29.237733 sshd-session[3551]: pam_unix(sshd:session): session closed for user core May 22 19:13:29.237000 audit[3551]: AUDIT1106 pid=3551 uid=0 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.237000 audit[3551]: AUDIT1104 pid=3551 uid=0 auid=500 ses=40 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.240073 systemd[1]: sshd@36-4116-10.0.0.4:22-4.175.71.9:38546.service: Deactivated successfully. May 22 19:13:29.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-4116-10.0.0.4:22-4.175.71.9:38546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:29.241475 systemd[1]: session-40.scope: Deactivated successfully. May 22 19:13:29.242187 systemd-logind[2364]: Session 40 logged out. Waiting for processes to exit. May 22 19:13:29.243342 systemd-logind[2364]: Removed session 40. May 22 19:13:29.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-4117-10.0.0.4:22-4.175.71.9:38550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:29.366279 systemd[1]: Started sshd@37-4117-10.0.0.4:22-4.175.71.9:38550.service - OpenSSH per-connection server daemon (4.175.71.9:38550). May 22 19:13:29.447000 audit[3566]: AUDIT1101 pid=3566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.447881 sshd[3566]: Accepted publickey for core from 4.175.71.9 port 38550 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:29.447000 audit[3566]: AUDIT1103 pid=3566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.448000 audit[3566]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffa97b05b0 a2=3 a3=0 items=0 ppid=1 pid=3566 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=41 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:29.448000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:29.449078 sshd-session[3566]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:29.453163 systemd-logind[2364]: New session '41' of user 'core' with class 'user' and type 'tty'. May 22 19:13:29.457796 systemd[1]: Started session-41.scope - Session 41 of User core. May 22 19:13:29.459000 audit[3566]: AUDIT1105 pid=3566 uid=0 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.460000 audit[3570]: AUDIT1103 pid=3570 uid=0 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.476000 audit[3572]: AUDIT1101 pid=3572 uid=500 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.476000 audit[3572]: AUDIT1110 pid=3572 uid=500 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.477000 audit[3572]: AUDIT1105 pid=3572 uid=500 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.497000 audit[3572]: AUDIT1106 pid=3572 uid=500 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.497000 audit[3572]: AUDIT1104 pid=3572 uid=500 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.477464 sudo[3572]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:29.477749 sudo[3572]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:29.497790 sudo[3572]: pam_unix(sudo:session): session closed for user root May 22 19:13:29.506991 sshd[3570]: Connection closed by 4.175.71.9 port 38550 May 22 19:13:29.507658 sshd-session[3566]: pam_unix(sshd:session): session closed for user core May 22 19:13:29.551000 audit[3566]: AUDIT1106 pid=3566 uid=0 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.551000 audit[3566]: AUDIT1104 pid=3566 uid=0 auid=500 ses=41 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.554110 systemd[1]: sshd@37-4117-10.0.0.4:22-4.175.71.9:38550.service: Deactivated successfully. May 22 19:13:29.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-4117-10.0.0.4:22-4.175.71.9:38550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:29.555615 systemd[1]: session-41.scope: Deactivated successfully. May 22 19:13:29.556419 systemd-logind[2364]: Session 41 logged out. Waiting for processes to exit. May 22 19:13:29.557728 systemd-logind[2364]: Removed session 41. May 22 19:13:29.629067 systemd[1]: Started sshd@38-4118-10.0.0.4:22-4.175.71.9:38552.service - OpenSSH per-connection server daemon (4.175.71.9:38552). May 22 19:13:29.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-4118-10.0.0.4:22-4.175.71.9:38552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:29.710000 audit[3580]: AUDIT1101 pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.711755 sshd[3580]: Accepted publickey for core from 4.175.71.9 port 38552 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:29.711000 audit[3580]: AUDIT1103 pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.712000 audit[3580]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe97220aa0 a2=3 a3=0 items=0 ppid=1 pid=3580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=42 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:29.712000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:29.716692 systemd-logind[2364]: New session '42' of user 'core' with class 'user' and type 'tty'. May 22 19:13:29.713141 sshd-session[3580]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:29.720790 systemd[1]: Started session-42.scope - Session 42 of User core. May 22 19:13:29.757000 audit[3580]: AUDIT1105 pid=3580 uid=0 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.759000 audit[3584]: AUDIT1103 pid=3584 uid=0 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.775000 audit[3586]: AUDIT1101 pid=3586 uid=500 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.775000 audit[3586]: AUDIT1110 pid=3586 uid=500 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.775000 audit[3586]: AUDIT1105 pid=3586 uid=500 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.792000 audit[3586]: AUDIT1106 pid=3586 uid=500 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.792000 audit[3586]: AUDIT1104 pid=3586 uid=500 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:29.805169 sshd[3584]: Connection closed by 4.175.71.9 port 38552 May 22 19:13:29.776157 sudo[3586]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:29.776340 sudo[3586]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:29.793078 sudo[3586]: pam_unix(sudo:session): session closed for user root May 22 19:13:29.802358 sshd-session[3580]: pam_unix(sshd:session): session closed for user core May 22 19:13:29.804000 audit[3580]: AUDIT1106 pid=3580 uid=0 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.804000 audit[3580]: AUDIT1104 pid=3580 uid=0 auid=500 ses=42 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:29.808186 systemd[1]: sshd@38-4118-10.0.0.4:22-4.175.71.9:38552.service: Deactivated successfully. May 22 19:13:29.807000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-4118-10.0.0.4:22-4.175.71.9:38552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:29.814324 systemd[1]: session-42.scope: Deactivated successfully. May 22 19:13:29.815414 systemd-logind[2364]: Session 42 logged out. Waiting for processes to exit. May 22 19:13:29.816563 systemd-logind[2364]: Removed session 42. May 22 19:13:29.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-18-10.0.0.4:22-4.175.71.9:38560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:29.920640 systemd[1]: Started sshd@39-18-10.0.0.4:22-4.175.71.9:38560.service - OpenSSH per-connection server daemon (4.175.71.9:38560). May 22 19:13:30.005000 audit[3595]: AUDIT1101 pid=3595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.006000 audit[3595]: AUDIT1103 pid=3595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.006000 audit[3595]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd4c464600 a2=3 a3=0 items=0 ppid=1 pid=3595 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=43 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.006000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:30.009377 sshd[3595]: Accepted publickey for core from 4.175.71.9 port 38560 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:30.007030 sshd-session[3595]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:30.011765 systemd-logind[2364]: New session '43' of user 'core' with class 'user' and type 'tty'. May 22 19:13:30.015901 systemd[1]: Started session-43.scope - Session 43 of User core. May 22 19:13:30.018000 audit[3595]: AUDIT1105 pid=3595 uid=0 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.020000 audit[3599]: AUDIT1103 pid=3599 uid=0 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.037000 audit[3601]: AUDIT1101 pid=3601 uid=500 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.038023 sudo[3601]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:30.038273 sudo[3601]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:30.037000 audit[3601]: AUDIT1110 pid=3601 uid=500 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.037000 audit[3601]: AUDIT1105 pid=3601 uid=500 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.055000 audit[3601]: AUDIT1106 pid=3601 uid=500 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.055889 sudo[3601]: pam_unix(sudo:session): session closed for user root May 22 19:13:30.055000 audit[3601]: AUDIT1104 pid=3601 uid=500 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.065775 sshd[3599]: Connection closed by 4.175.71.9 port 38560 May 22 19:13:30.066170 sshd-session[3595]: pam_unix(sshd:session): session closed for user core May 22 19:13:30.065000 audit[3595]: AUDIT1106 pid=3595 uid=0 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.066000 audit[3595]: AUDIT1104 pid=3595 uid=0 auid=500 ses=43 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.068960 systemd[1]: sshd@39-18-10.0.0.4:22-4.175.71.9:38560.service: Deactivated successfully. May 22 19:13:30.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-18-10.0.0.4:22-4.175.71.9:38560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:30.070400 systemd[1]: session-43.scope: Deactivated successfully. May 22 19:13:30.071099 systemd-logind[2364]: Session 43 logged out. Waiting for processes to exit. May 22 19:13:30.072197 systemd-logind[2364]: Removed session 43. May 22 19:13:30.113650 containerd[2402]: time="2026-05-22T19:13:30.113196319Z" level=info msg="connecting to shim 3891aa168d60adcfcd6134e9f48e4e5fe7fbc08e86bed22ff3823a9bdc6cc9fb" address="unix:///run/containerd/s/3162bc81c1bd4aba04e2951e00a2f6905be7ed207245097c4f75b3149f6889d2" namespace=moby protocol=ttrpc version=3 May 22 19:13:30.144849 systemd[1]: Started docker-3891aa168d60adcfcd6134e9f48e4e5fe7fbc08e86bed22ff3823a9bdc6cc9fb.scope - libcontainer container 3891aa168d60adcfcd6134e9f48e4e5fe7fbc08e86bed22ff3823a9bdc6cc9fb. May 22 19:13:30.155000 audit: BPF prog-id=53 op=LOAD May 22 19:13:30.155000 audit: BPF prog-id=54 op=LOAD May 22 19:13:30.155000 audit[3629]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000138240 a2=98 a3=0 items=0 ppid=3617 pid=3629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383931616131363864363061646366636436313334653966 May 22 19:13:30.155000 audit: BPF prog-id=54 op=UNLOAD May 22 19:13:30.155000 audit[3629]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3617 pid=3629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383931616131363864363061646366636436313334653966 May 22 19:13:30.155000 audit: BPF prog-id=55 op=LOAD May 22 19:13:30.155000 audit[3629]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000138490 a2=98 a3=0 items=0 ppid=3617 pid=3629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383931616131363864363061646366636436313334653966 May 22 19:13:30.156000 audit: BPF prog-id=56 op=LOAD May 22 19:13:30.156000 audit[3629]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c000138220 a2=98 a3=0 items=0 ppid=3617 pid=3629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383931616131363864363061646366636436313334653966 May 22 19:13:30.156000 audit: BPF prog-id=56 op=UNLOAD May 22 19:13:30.156000 audit[3629]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3617 pid=3629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383931616131363864363061646366636436313334653966 May 22 19:13:30.156000 audit: BPF prog-id=55 op=UNLOAD May 22 19:13:30.156000 audit[3629]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3617 pid=3629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383931616131363864363061646366636436313334653966 May 22 19:13:30.156000 audit: BPF prog-id=57 op=LOAD May 22 19:13:30.156000 audit[3629]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001386f0 a2=98 a3=0 items=0 ppid=3617 pid=3629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383931616131363864363061646366636436313334653966 May 22 19:13:30.188761 systemd[1]: Started sshd@40-4119-10.0.0.4:22-4.175.71.9:38574.service - OpenSSH per-connection server daemon (4.175.71.9:38574). May 22 19:13:30.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-4119-10.0.0.4:22-4.175.71.9:38574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:30.236926 kernel: docker0: port 1(vethd34bef5) entered blocking state May 22 19:13:30.236991 kernel: docker0: port 1(vethd34bef5) entered disabled state May 22 19:13:30.231000 audit: ANOM_PROMISCUOUS dev=vethd34bef5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 May 22 19:13:30.240400 kernel: vethd34bef5: entered allmulticast mode May 22 19:13:30.240424 kernel: vethd34bef5: entered promiscuous mode May 22 19:13:30.231000 audit[2912]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=d a1=c000afa0f0 a2=28 a3=0 items=0 ppid=1 pid=2912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.231000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 May 22 19:13:30.242000 audit[3658]: NETFILTER_CFG table=raw:43 family=2 entries=3 op=nft_register_chain pid=3658 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:30.242000 audit[3658]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe06823890 a2=0 a3=0 items=0 ppid=2912 pid=3658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.242000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 May 22 19:13:30.243428 systemd-networkd[2148]: vethd34bef5: Link UP May 22 19:13:30.270000 audit[3651]: AUDIT1101 pid=3651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.271645 sshd[3651]: Accepted publickey for core from 4.175.71.9 port 38574 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:30.272000 audit[3651]: AUDIT1103 pid=3651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.272000 audit[3651]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff8f301a20 a2=3 a3=0 items=0 ppid=1 pid=3651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=44 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.272000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:30.273403 sshd-session[3651]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:30.277591 systemd-logind[2364]: New session '44' of user 'core' with class 'user' and type 'tty'. May 22 19:13:30.283858 systemd[1]: Started session-44.scope - Session 44 of User core. May 22 19:13:30.285000 audit[3651]: AUDIT1105 pid=3651 uid=0 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.287000 audit[3662]: AUDIT1103 pid=3662 uid=0 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.302000 audit[3664]: AUDIT1101 pid=3664 uid=500 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.303509 sudo[3664]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:30.303000 audit[3664]: AUDIT1110 pid=3664 uid=500 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.303947 sudo[3664]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:30.303000 audit[3664]: AUDIT1105 pid=3664 uid=500 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.313650 kernel: eth0: renamed from veth64be7d8 May 22 19:13:30.318438 kernel: docker0: port 1(vethd34bef5) entered blocking state May 22 19:13:30.318491 kernel: docker0: port 1(vethd34bef5) entered forwarding state May 22 19:13:30.318527 systemd-networkd[2148]: vethd34bef5: Gained carrier May 22 19:13:30.318934 systemd-networkd[2148]: docker0: Gained carrier May 22 19:13:30.324833 sudo[3664]: pam_unix(sudo:session): session closed for user root May 22 19:13:30.324000 audit[3664]: AUDIT1106 pid=3664 uid=500 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.324000 audit[3664]: AUDIT1104 pid=3664 uid=500 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.333588 sshd[3662]: Connection closed by 4.175.71.9 port 38574 May 22 19:13:30.334772 sshd-session[3651]: pam_unix(sshd:session): session closed for user core May 22 19:13:30.334000 audit[3651]: AUDIT1106 pid=3651 uid=0 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.334000 audit[3651]: AUDIT1104 pid=3651 uid=0 auid=500 ses=44 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.337144 systemd[1]: sshd@40-4119-10.0.0.4:22-4.175.71.9:38574.service: Deactivated successfully. May 22 19:13:30.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-4119-10.0.0.4:22-4.175.71.9:38574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:30.338570 systemd[1]: session-44.scope: Deactivated successfully. May 22 19:13:30.339279 systemd-logind[2364]: Session 44 logged out. Waiting for processes to exit. May 22 19:13:30.340404 systemd-logind[2364]: Removed session 44. May 22 19:13:30.416000 audit[3674]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_rule pid=3674 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:30.416000 audit[3674]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe6f245a90 a2=0 a3=0 items=0 ppid=2912 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.416000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4100444F434B4552002D7000746370002D6400302F30002D2D64706F72740039393838002D6A00444E4154002D2D746F2D64657374696E6174696F6E003137322E31372E302E323A393938380000002D6900646F636B657230 May 22 19:13:30.419000 audit[3677]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3677 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:30.419000 audit[3677]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc4d4accd0 a2=0 a3=0 items=0 ppid=2912 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.419000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D7000746370002D64003137322E31372E302E32002D2D64706F72740039393838002D6A00414343455054 May 22 19:13:30.471188 systemd[1]: Started sshd@41-19-10.0.0.4:22-4.175.71.9:38576.service - OpenSSH per-connection server daemon (4.175.71.9:38576). May 22 19:13:30.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-19-10.0.0.4:22-4.175.71.9:38576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:30.553000 audit[3681]: AUDIT1101 pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.554552 sshd[3681]: Accepted publickey for core from 4.175.71.9 port 38576 ssh2: RSA SHA256:lccD2UBU1eba20DpRRQklBXvNq3vcWcpP6tx7GjXxOM May 22 19:13:30.554000 audit[3681]: AUDIT1103 pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.555000 audit[3681]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc171862e0 a2=3 a3=0 items=0 ppid=1 pid=3681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=45 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:30.555000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D May 22 19:13:30.556041 sshd-session[3681]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) May 22 19:13:30.560355 systemd-logind[2364]: New session '45' of user 'core' with class 'user' and type 'tty'. May 22 19:13:30.562817 systemd[1]: Started session-45.scope - Session 45 of User core. May 22 19:13:30.564000 audit[3681]: AUDIT1105 pid=3681 uid=0 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.566000 audit[3685]: AUDIT1103 pid=3685 uid=0 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.582000 audit[3687]: AUDIT1101 pid=3687 uid=500 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.583722 sudo[3687]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/lsof -i TCP:9988 -s TCP:LISTEN May 22 19:13:30.583966 sudo[3687]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) May 22 19:13:30.583000 audit[3687]: AUDIT1110 pid=3687 uid=500 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.583000 audit[3687]: AUDIT1105 pid=3687 uid=500 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.606087 sudo[3687]: pam_unix(sudo:session): session closed for user root May 22 19:13:30.605000 audit[3687]: AUDIT1106 pid=3687 uid=500 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.605000 audit[3687]: AUDIT1104 pid=3687 uid=500 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 22 19:13:30.616104 sshd[3685]: Connection closed by 4.175.71.9 port 38576 May 22 19:13:30.616792 sshd-session[3681]: pam_unix(sshd:session): session closed for user core May 22 19:13:30.616000 audit[3681]: AUDIT1106 pid=3681 uid=0 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.616000 audit[3681]: AUDIT1104 pid=3681 uid=0 auid=500 ses=45 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:30.619038 systemd[1]: sshd@41-19-10.0.0.4:22-4.175.71.9:38576.service: Deactivated successfully. May 22 19:13:30.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-19-10.0.0.4:22-4.175.71.9:38576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:30.620485 systemd[1]: session-45.scope: Deactivated successfully. May 22 19:13:30.622324 systemd-logind[2364]: Session 45 logged out. Waiting for processes to exit. May 22 19:13:30.623131 systemd-logind[2364]: Removed session 45. May 22 19:13:31.133587 systemd[1]: docker-3891aa168d60adcfcd6134e9f48e4e5fe7fbc08e86bed22ff3823a9bdc6cc9fb.scope: Deactivated successfully. May 22 19:13:31.147478 dockerd[2912]: time="2026-05-22T19:13:31.146863887Z" level=info msg="ignoring event" container=3891aa168d60adcfcd6134e9f48e4e5fe7fbc08e86bed22ff3823a9bdc6cc9fb module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" May 22 19:13:31.148061 containerd[2402]: time="2026-05-22T19:13:31.148025608Z" level=info msg="shim disconnected" id=3891aa168d60adcfcd6134e9f48e4e5fe7fbc08e86bed22ff3823a9bdc6cc9fb namespace=moby May 22 19:13:31.148061 containerd[2402]: time="2026-05-22T19:13:31.148058337Z" level=info msg="cleaning up after shim disconnected" id=3891aa168d60adcfcd6134e9f48e4e5fe7fbc08e86bed22ff3823a9bdc6cc9fb namespace=moby May 22 19:13:31.148352 containerd[2402]: time="2026-05-22T19:13:31.148066366Z" level=info msg="cleaning up dead shim" id=3891aa168d60adcfcd6134e9f48e4e5fe7fbc08e86bed22ff3823a9bdc6cc9fb namespace=moby May 22 19:13:31.169000 audit[3741]: NETFILTER_CFG table=nat:46 family=2 entries=1 op=nft_unregister_rule pid=3741 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:31.169000 audit[3741]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffee7848530 a2=0 a3=0 items=0 ppid=2912 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:31.169000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4400444F434B4552002D7000746370002D6400302F30002D2D64706F72740039393838002D6A00444E4154002D2D746F2D64657374696E6174696F6E003137322E31372E302E323A393938380000002D6900646F636B657230 May 22 19:13:31.174000 audit[3744]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_unregister_rule pid=3744 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:31.174000 audit[3744]: SYSCALL arch=c000003e syscall=46 success=yes exit=656 a0=3 a1=7ffc30cce270 a2=0 a3=0 items=0 ppid=2912 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:31.174000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4400444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D7000746370002D64003137322E31372E302E32002D2D64706F72740039393838002D6A00414343455054 May 22 19:13:31.196962 systemd-networkd[2148]: vethd34bef5: Lost carrier May 22 19:13:31.197647 kernel: docker0: port 1(vethd34bef5) entered disabled state May 22 19:13:31.197843 kernel: veth64be7d8: renamed from eth0 May 22 19:13:31.232803 systemd-networkd[2148]: docker0: Lost carrier May 22 19:13:31.264000 audit[3748]: NETFILTER_CFG table=raw:48 family=2 entries=1 op=nft_unregister_rule pid=3748 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 22 19:13:31.264000 audit[3748]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff6a2b1690 a2=0 a3=0 items=0 ppid=2912 pid=3748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:31.264000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 May 22 19:13:31.268414 systemd-networkd[2148]: vethd34bef5: Link DOWN May 22 19:13:31.270641 kernel: docker0: port 1(vethd34bef5) entered disabled state May 22 19:13:31.274095 kernel: vethd34bef5 (unregistering): left allmulticast mode May 22 19:13:31.274149 kernel: vethd34bef5 (unregistering): left promiscuous mode May 22 19:13:31.274176 kernel: docker0: port 1(vethd34bef5) entered disabled state May 22 19:13:31.267000 audit: ANOM_PROMISCUOUS dev=vethd34bef5 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 May 22 19:13:31.267000 audit[2912]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=d a1=c000747e60 a2=20 a3=0 items=0 ppid=1 pid=2912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) May 22 19:13:31.267000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 May 22 19:13:31.312334 systemd[1]: run-docker-netns-7e6460ff3436.mount: Deactivated successfully. May 22 19:13:31.315743 systemd[1]: var-lib-docker-overlay2-8956a96e17a3d1e917b4896cc83082d0fe9ecb65c18f3b5e33ad76395fb808ef-merged.mount: Deactivated successfully. May 22 19:13:31.330000 audit: BPF prog-id=53 op=UNLOAD May 22 19:13:31.330000 audit: BPF prog-id=57 op=UNLOAD May 22 19:13:32.004877 systemd-networkd[2148]: docker0: Gained IPv6LL May 22 19:13:34.225536 sshd[3149]: Connection closed by 4.175.71.9 port 43736 May 22 19:13:34.226786 sshd-session[3141]: pam_unix(sshd:session): session closed for user core May 22 19:13:34.227000 audit[3141]: AUDIT1106 pid=3141 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:34.229668 kernel: kauditd_printk_skb: 224 callbacks suppressed May 22 19:13:34.229710 kernel: audit: type=1106 audit(1779477214.227:740): pid=3141 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:34.231180 systemd[1]: sshd@7-3-10.0.0.4:22-4.175.71.9:43736.service: Deactivated successfully. May 22 19:13:34.233904 systemd[1]: session-11.scope: Deactivated successfully. May 22 19:13:34.235560 systemd-logind[2364]: Session 11 logged out. Waiting for processes to exit. May 22 19:13:34.237189 systemd-logind[2364]: Removed session 11. May 22 19:13:34.227000 audit[3141]: AUDIT1104 pid=3141 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:34.241363 kernel: audit: type=1104 audit(1779477214.227:741): pid=3141 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.175.71.9 addr=4.175.71.9 terminal=ssh res=success' May 22 19:13:34.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-3-10.0.0.4:22-4.175.71.9:43736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 22 19:13:34.245935 kernel: audit: type=1131 audit(1779477214.228:742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-3-10.0.0.4:22-4.175.71.9:43736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'