.path - Dispatch Password Requests to Console Directory Watch. [ 18.928788] systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. [ 18.932397] systemd[1]: Set up automount boot.automount - Boot partition Automount Point. [ 18.934537] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. [ 18.937205] systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... [ 18.939378] systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... [ 18.940929] systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). [ 18.942675] systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. [ 18.944277] systemd[1]: Reached target imports.target - Image Downloads. [ 18.945749] systemd[1]: Stopped target initrd-switch-root.target - Switch Root. [ 18.947298] systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. [ 18.948851] systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. [ 18.950524] systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. [ 18.952319] systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. [ 18.954001] systemd[1]: Reached target remote-fs.target - Remote File Systems. [ 18.955515] systemd[1]: Reached target remote-integritysetup.target - Remote Integrity Protected Volumes. [ 18.957666] systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. [ 18.959716] systemd[1]: Reached target slices.target - Slice Units. [ 18.961142] systemd[1]: Reached target swap.target - Swaps. [ 18.962420] systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. [ 18.965385] systemd[1]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. [ 18.969157] systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. [ 18.971694] systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. [ 18.975343] systemd[1]: Listening on systemd-factory-reset.socket - Factory Reset Management. [ 18.978307] systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. [ 18.981020] systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. [ 18.983940] systemd[1]: Listening on systemd-mute-console.socket - Console Output Muting Service Socket. [ 18.987200] systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. [ 18.989844] systemd[1]: Listening on systemd-networkd-varlink.socket - Network Management Varlink Socket. [ 18.992235] systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. [ 18.994353] systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. [ 18.997421] systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. [ 19.000466] systemd[1]: Listening on systemd-repart.socket - Disk Repartitioning Service Socket. [ 19.003291] systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. [ 19.005770] systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. [ 19.080477] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 19.082809] systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. [ 19.085564] systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. [ 19.089997] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 19.093558] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 19.102990] systemd[1]: Mounting media.mount - External Media Directory... [ 19.105459] systemd[1]: proc-xen.mount - /proc/xen skipped, unmet condition check ConditionVirtualization=xen [ 19.111415] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 19.115231] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 19.118458] systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. [ 19.132449] systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... [ 19.134261] systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) skipped, unmet condition check ConditionPathExists=/var/lib/machines.raw [ 19.137078] systemd[1]: Reached target machines.target - Virtual Machines and Containers. [ 19.148357] systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... [ 19.151111] systemd[1]: ignition-delete-config.service - Ignition (delete config) skipped, no trigger condition checks were met. [ 19.166519] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 19.182658] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 19.186110] systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm [ 19.188789] systemd[1]: modprobe@efi_pstore.service - Load Kernel Module efi_pstore skipped, unmet condition check ConditionKernelModuleLoaded=!efi_pstore [ 19.192873] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 19.195225] systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf skipped, unmet condition check ConditionPathExists=!/etc/nsswitch.conf [ 19.198128] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 19.199588] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 19.203943] systemd[1]: systemd-fsck-usr.service: Deactivated successfully. [ 19.205417] systemd[1]: Stopped systemd-fsck-usr.service. [ 19.207432] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 [ 19.213652] systemd[1]: Starting systemd-journald.service - Journal Service... [ 19.218516] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 19.225484] systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... [ 19.228489] systemd[1]: Reached target time-set.target - System Time Set. [ 19.234264] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 19.239870] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 19.250599] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 19.255109] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer skipped, unmet condition check ConditionVirtualization=xen [ 19.266420] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 19.269592] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 19.273226] systemd[1]: Mounted media.mount - External Media Directory. [ 19.279892] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 19.285409] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. [ 19.287923] systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. [ 19.290413] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. [ 19.293261] systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. [ 19.296680] systemd[1]: modprobe@configfs.service: Deactivated successfully. [ 19.298495] systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. [ 19.300968] systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. [ 19.304808] systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... [ 19.306869] systemd-journald[1908]: Collecting audit messages is enabled. [ 19.310375] systemd[1]: remount-root.service - Remount Root File System skipped, unmet condition check ConditionPathIsReadWrite=!/ [ 19.315381] systemd[1]: Reached target local-fs.target - Local File Systems. [ 19.318230] systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. [ 19.320794] systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats skipped, no trigger condition checks were met. [ 19.327447] systemd[1]: Starting systemd-confext.service - Merge System Configuration Images into /etc/... [ 19.337477] systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... [ 19.342463] systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore [ 19.356067] systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... [ 19.363423] systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... [ 19.373050] systemd[1]: Starting systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials... [ 19.383485] systemd[1]: Started systemd-journald.service - Journal Service. [ 19.405088] fuse: init (API version 7.41) [ 19.542472] set_capacity_and_notify: 2 callbacks suppressed [ 19.542476] loop6: detected capacity change from 0 to 43776 [ 19.548625] loop6: p1 p2 p3 [ 19.552813] systemd-journald[1908]: Received client request to flush runtime journal. [ 19.653801] device-mapper: verity: sha256 using shash "sha256-avx2" [ 19.655143] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 19.664114] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 19.678335] device-mapper: ioctl: error adding target to table [ 19.694365] device-mapper: verity: sha256 using shash "sha256-avx2" [ 20.000231] tun: Universal TUN/TAP device driver, 1.6 [ 20.751324] erofs: (device dm-5): mounted with root inode @ nid 40. [ 21.006038] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 [ 21.010099] mousedev: PS/2 mouse device common for all mice [ 21.013401] ACPI: button: Power Button [PWRF] [ 21.018054] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 21.024366] ACPI: button: Sleep Button [SLPF] [ 21.053841] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 21.365624] loop6: detected capacity change from 0 to 43776 [ 21.373564] loop6: p1 p2 p3 [ 21.377828] kauditd_printk_skb: 66 callbacks suppressed [ 21.377832] audit: type=1130 audit(1780980269.290:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.393631] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.395212] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.397930] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.399587] device-mapper: ioctl: error adding target to table [ 21.404386] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.439545] audit: type=1130 audit(1780980269.352:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.444841] audit: type=1131 audit(1780980269.354:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.483165] erofs: (device dm-5): mounted with root inode @ nid 40. [ 21.502738] audit: type=1130 audit(1780980269.415:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.536193] loop6: detected capacity change from 0 to 292080 [ 21.540093] loop6: p1 p2 p3 [ 21.550934] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.552097] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.553740] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.555222] device-mapper: ioctl: error adding target to table [ 21.559379] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.583913] erofs: (device dm-5): mounted with root inode @ nid 39. [ 21.604630] loop6: detected capacity change from 0 to 219840 [ 21.638371] loop6: detected capacity change from 0 to 178208 [ 21.640556] loop6: p1 p2 p3 [ 21.651411] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.652784] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.654644] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.656419] device-mapper: ioctl: error adding target to table [ 21.658981] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.707528] erofs: (device dm-5): mounted with root inode @ nid 39. [ 21.723288] audit: type=1130 audit(1780980269.635:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 21.732925] loop6: detected capacity change from 0 to 383264 [ 21.736944] loop6: p1 p2 p3 [ 21.746972] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.748132] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.749546] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.750900] device-mapper: ioctl: error adding target to table [ 21.753117] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.789859] erofs: (device dm-5): mounted with root inode @ nid 39. [ 21.815115] loop6: detected capacity change from 0 to 292080 [ 21.819510] loop6: p1 p2 p3 [ 21.834710] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.836053] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.837654] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 21.839170] device-mapper: ioctl: error adding target to table [ 21.841808] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.876605] erofs: (device dm-5): mounted with root inode @ nid 39. [ 21.881248] loop7: detected capacity change from 0 to 219840 [ 21.905988] loop8: detected capacity change from 0 to 178208 [ 21.910368] loop8: p1 p2 p3 [ 21.917990] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.919157] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.920627] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 21.922231] device-mapper: ioctl: error adding target to table [ 21.924392] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.974508] erofs: (device dm-6): mounted with root inode @ nid 39. [ 21.978048] loop9: detected capacity change from 0 to 383264 [ 21.982392] loop9: p1 p2 p3 [ 21.992672] device-mapper: verity: sha256 using shash "sha256-avx2" [ 21.993825] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 21.995178] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 21.996560] device-mapper: ioctl: error adding target to table [ 21.998686] device-mapper: verity: sha256 using shash "sha256-avx2" [ 22.038190] erofs: (device dm-7): mounted with root inode @ nid 39. [ 22.048993] audit: type=1130 audit(1780980269.961:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.134800] audit: type=1130 audit(1780980270.047:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.182886] audit: type=1127 audit(1780980270.095:165): pid=2221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' [ 22.188243] audit: type=1130 audit(1780980270.100:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 22.251999] audit: type=1305 audit(1780980270.160:167): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 [ 26.396685] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 26.447047] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/06/09 04:44:37Z: Amazon SSM Agent v3.3.0.0 is running 2026/06/09 04:44:37Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/06/09 04:44:37Z: OsVersion: 4725.0.0 [!p]104\[?7hP+q6E616D65\ This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:44:40 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:44:40 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 ip-172-31-16-205 login: [ 42.005701] kauditd_printk_skb: 2 callbacks suppressed [ 42.005705] audit: type=1305 audit(1780980290.659:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 42.008640] audit: type=1300 audit(1780980290.659:168): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc9d5e3300 a2=420 a3=0 items=0 ppid=2645 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 42.013526] audit: type=1327 audit(1780980290.659:168): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 42.015254] audit: type=1106 audit(1780980290.664:169): pid=2639 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.018512] audit: type=1104 audit(1780980290.664:170): pid=2639 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 42.021551] audit: type=1130 audit(1780980290.665:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.024464] audit: type=1131 audit(1780980290.665:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.172844] audit: type=1106 audit(1780980290.826:173): pid=2634 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 42.179362] audit: type=1104 audit(1780980290.826:174): pid=2634 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 42.184319] audit: type=1131 audit(1780980290.834:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-6-172.31.16.205:22-20.229.252.112:44562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 48.183857] Initializing XFRM netlink socket [ 48.287230] kauditd_printk_skb: 13 callbacks suppressed [ 48.287233] audit: type=1325 audit(1780980296.940:187): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2760 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.291285] audit: type=1300 audit(1780980296.940:187): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcfc19e820 a2=0 a3=0 items=0 ppid=2711 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.297336] audit: type=1327 audit(1780980296.940:187): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 48.300266] audit: type=1325 audit(1780980296.950:188): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.303252] audit: type=1300 audit(1780980296.950:188): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fffb6914630 a2=0 a3=0 items=0 ppid=2711 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.309554] audit: type=1327 audit(1780980296.950:188): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 48.312638] audit: type=1325 audit(1780980296.954:189): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2764 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 48.316036] audit: type=1300 audit(1780980296.954:189): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5c14e760 a2=0 a3=0 items=0 ppid=2711 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 48.322440] audit: type=1327 audit(1780980296.954:189): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 48.325156] audit: type=1325 audit(1780980296.959:190): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2766 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:44:58 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:44:58 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 ip-172-31-16-205 login: [ 53.943189] kauditd_printk_skb: 105 callbacks suppressed [ 53.943194] audit: type=1130 audit(1780980302.596:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.076786] audit: type=1131 audit(1780980302.730:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 57.502061] audit: type=1131 audit(1780980306.155:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.518341] audit: type=1334 audit(1780980306.172:229): prog-id=35 op=UNLOAD [ 63.853831] audit: type=1130 audit(1780980312.506:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 63.857627] audit: type=1131 audit(1780980312.506:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 64.058805] zram_generator::config[3186]: No configuration found. [ 64.453565] audit: type=1334 audit(1780980313.107:232): prog-id=39 op=LOAD [ 64.454937] audit: type=1334 audit(1780980313.107:233): prog-id=22 op=UNLOAD [ 64.456722] audit: type=1334 audit(1780980313.108:234): prog-id=40 op=LOAD [ 64.458311] audit: type=1334 audit(1780980313.109:235): prog-id=31 op=UNLOAD [ 64.459790] audit: type=1334 audit(1780980313.111:236): prog-id=41 op=LOAD [ 64.461317] audit: type=1334 audit(1780980313.111:237): prog-id=32 op=UNLOAD [ 64.462783] audit: type=1334 audit(1780980313.111:238): prog-id=42 op=LOAD [ 64.464305] audit: type=1334 audit(1780980313.111:239): prog-id=43 op=LOAD [ 76.340189] zram_generator::config[3857]: No configuration found. [ 76.730148] kauditd_printk_skb: 202 callbacks suppressed [ 76.730152] audit: type=1334 audit(1780980325.383:334): prog-id=89 op=LOAD [ 76.733069] audit: type=1334 audit(1780980325.383:335): prog-id=64 op=UNLOAD [ 76.734801] audit: type=1334 audit(1780980325.384:336): prog-id=90 op=LOAD [ 76.736549] audit: type=1334 audit(1780980325.384:337): prog-id=39 op=UNLOAD [ 76.738023] audit: type=1334 audit(1780980325.386:338): prog-id=91 op=LOAD [ 76.739611] audit: type=1334 audit(1780980325.386:339): prog-id=40 op=UNLOAD [ 76.741138] audit: type=1334 audit(1780980325.387:340): prog-id=92 op=LOAD [ 76.742640] audit: type=1334 audit(1780980325.387:341): prog-id=74 op=UNLOAD [ 76.744117] audit: type=1334 audit(1780980325.389:342): prog-id=93 op=LOAD [ 76.746110] audit: type=1334 audit(1780980325.389:343): prog-id=41 op=UNLOAD [ 84.623282] kauditd_printk_skb: 54 callbacks suppressed [ 84.623286] audit: type=1334 audit(1780980333.277:398): prog-id=115 op=LOAD [ 84.626449] audit: type=1334 audit(1780980333.277:399): prog-id=116 op=LOAD [ 84.627948] audit: type=1300 audit(1780980333.277:399): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a0240 a2=98 a3=0 items=0 ppid=4026 pid=4050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.633725] audit: type=1327 audit(1780980333.277:399): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565363131393232366661643034353838393437303038373961616238 [ 84.638833] audit: type=1334 audit(1780980333.277:400): prog-id=116 op=UNLOAD [ 84.640507] audit: type=1300 audit(1780980333.277:400): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4026 pid=4050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.647137] audit: type=1327 audit(1780980333.277:400): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565363131393232366661643034353838393437303038373961616238 [ 84.652620] audit: type=1334 audit(1780980333.277:401): prog-id=117 op=LOAD [ 84.654651] audit: type=1300 audit(1780980333.277:401): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a0490 a2=98 a3=0 items=0 ppid=4026 pid=4050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.660544] audit: type=1327 audit(1780980333.277:401): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565363131393232366661643034353838393437303038373961616238 [ 96.709388] kauditd_printk_skb: 224 callbacks suppressed [ 96.709392] audit: type=1334 audit(1780980345.363:478): prog-id=133 op=LOAD [ 96.712322] audit: type=1334 audit(1780980345.365:479): prog-id=134 op=LOAD [ 96.713855] audit: type=1300 audit(1780980345.365:479): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0240 a2=98 a3=0 items=0 ppid=4048 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.719269] audit: type=1327 audit(1780980345.365:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730383032303163373963323963306463643162336661376637343964 [ 96.725435] audit: type=1334 audit(1780980345.365:480): prog-id=134 op=UNLOAD [ 96.727056] audit: type=1300 audit(1780980345.365:480): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4048 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.741280] audit: type=1327 audit(1780980345.365:480): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730383032303163373963323963306463643162336661376637343964 [ 96.746977] audit: type=1334 audit(1780980345.366:481): prog-id=135 op=LOAD [ 96.748568] audit: type=1300 audit(1780980345.366:481): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001b0490 a2=98 a3=0 items=0 ppid=4048 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.756496] audit: type=1327 audit(1780980345.366:481): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730383032303163373963323963306463643162336661376637343964 [ 101.712348] kauditd_printk_skb: 2618 callbacks suppressed [ 101.712353] audit: type=1334 audit(1780980350.365:1362): prog-id=577 op=LOAD [ 101.715113] audit: type=1300 audit(1780980350.365:1362): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc2a5a4dd0 a2=90 a3=2 items=0 ppid=4556 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.721688] audit: type=1327 audit(1780980350.365:1362): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 101.724300] audit: type=1334 audit(1780980350.365:1363): prog-id=577 op=UNLOAD [ 101.725796] audit: type=1300 audit(1780980350.365:1363): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffc2a5a4dd0 a2=90 a3=2 items=0 ppid=4556 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.731891] audit: type=1327 audit(1780980350.365:1363): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 101.734350] audit: type=1334 audit(1780980350.365:1364): prog-id=578 op=LOAD [ 101.735595] audit: type=1300 audit(1780980350.365:1364): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc2a5a4dd0 a2=90 a3=2 items=0 ppid=4556 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 101.741084] audit: type=1327 audit(1780980350.365:1364): proctitle=627066746F6F6C00666561747572650070726F6265006D6163726F73 [ 101.743246] audit: type=1334 audit(1780980350.365:1365): prog-id=578 op=UNLOAD [ 104.996279] NET: Registered PF_ALG protocol family This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:53 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:53 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 ip-172-31-16-205 login: This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:54 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:54 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 ip-172-31-16-205 login: [ 106.628288] eth0: renamed from tmpc543f [ 106.641860] eth0: renamed from tmp33620 This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:55 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:55 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 ip-172-31-16-205 login: [ 107.447263] kauditd_printk_skb: 3380 callbacks suppressed [ 107.447268] audit: type=1334 audit(1780980356.100:2492): prog-id=1120 op=LOAD [ 107.452262] audit: type=1300 audit(1780980356.100:2492): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff4e4b7260 a2=74 a3=7fff4e4b7260 items=0 ppid=4556 pid=5038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 107.459994] audit: type=1327 audit(1780980356.100:2492): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003637335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 107.462690] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.465398] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 107.466624] audit: backlog limit exceeded [ 107.466677] audit: type=1334 audit(1780980356.100:2493): prog-id=1120 op=UNLOAD [ 107.470101] audit: type=1300 audit(1780980356.100:2493): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7fff4e4b7260 a2=74 a3=7fff4e4b7260 items=0 ppid=4556 pid=5038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 107.477535] audit: type=1327 audit(1780980356.100:2493): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003637335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 107.485322] audit: type=1334 audit(1780980356.100:2494): prog-id=1121 op=LOAD This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:57 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:57 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 ip-172-31-16-205 login: This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:58 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 This is ip-172-31-16-205 (Linux x86_64 6.12.92-flatcar) 04:45:58 SSH host key: SHA256:xFLUkieztaVGYov8llEbvYsve7FEMd2vWj5R+X7SIkA (RSA) SSH host key: SHA256:Le9chXf0r/Z4inn9aQZZrY8M81ocIcyYOlw/mwaL/fw (ED25519) SSH host key: SHA256:8ZzmTdhQ8oJqU+OXlp8z7B9ZihuFpXmACAf1lJitCe8 (ECDSA) eth0: 172.31.16.205 fe80::408:25ff:fec5:94c5 ip-172-31-16-205 login: [ 112.973125] kauditd_printk_skb: 579 callbacks suppressed [ 112.973129] audit: type=1325 audit(1780980361.626:2690): table=filter:153 family=2 entries=11 op=nft_register_rule pid=5217 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.981821] audit: type=1300 audit(1780980361.626:2690): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe684dc180 a2=0 a3=7ffe684dc16c items=0 ppid=4143 pid=5217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.990782] audit: type=1327 audit(1780980361.626:2690): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 113.007405] audit: type=1325 audit(1780980361.660:2691): table=nat:154 family=2 entries=45 op=nft_register_chain pid=5217 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.012295] audit: type=1300 audit(1780980361.660:2691): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7ffe684dc180 a2=0 a3=7ffe684dc16c items=0 ppid=4143 pid=5217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.019521] audit: type=1327 audit(1780980361.660:2691): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 155.840046] audit: type=1130 audit(1780980404.493:2692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4098-172.31.16.205:22-20.229.252.112:53366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.747949] audit: type=1101 audit(1780980405.401:2693): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.755081] audit: type=1103 audit(1780980405.401:2694): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.760822] audit: type=1006 audit(1780980405.401:2695): pid=5230 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 156.764011] audit: type=1300 audit(1780980405.401:2695): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeb25c8fe0 a2=3 a3=0 items=0 ppid=1 pid=5230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.770131] audit: type=1327 audit(1780980405.401:2695): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 156.782021] audit: type=1105 audit(1780980405.435:2696): pid=5230 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.789246] audit: type=1103 audit(1780980405.440:2697): pid=5235 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 157.985948] audit: type=1106 audit(1780980406.639:2698): pid=5230 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 157.994797] audit: type=1104 audit(1780980406.639:2699): pid=5230 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.152617] kauditd_printk_skb: 1 callbacks suppressed [ 163.152621] audit: type=1130 audit(1780980411.806:2701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4099-172.31.16.205:22-20.229.252.112:36642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.002349] audit: type=1101 audit(1780980412.655:2702): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 164.008938] audit: type=1103 audit(1780980412.656:2703): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 164.014273] audit: type=1006 audit(1780980412.656:2704): pid=5248 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 164.017563] audit: type=1300 audit(1780980412.656:2704): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd378f9a10 a2=3 a3=0 items=0 ppid=1 pid=5248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.024280] audit: type=1327 audit(1780980412.656:2704): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 164.031287] audit: type=1105 audit(1780980412.685:2705): pid=5248 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 164.038462] audit: type=1103 audit(1780980412.687:2706): pid=5252 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 164.588270] audit: type=1106 audit(1780980413.241:2707): pid=5248 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 164.595088] audit: type=1104 audit(1780980413.241:2708): pid=5248 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 169.757306] kauditd_printk_skb: 1 callbacks suppressed [ 169.757311] audit: type=1130 audit(1780980418.410:2710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-7-172.31.16.205:22-20.229.252.112:50222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.621609] audit: type=1101 audit(1780980419.275:2711): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 170.627886] audit: type=1103 audit(1780980419.277:2712): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 170.633588] audit: type=1006 audit(1780980419.277:2713): pid=5266 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 170.636941] audit: type=1300 audit(1780980419.277:2713): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffefe9b4e00 a2=3 a3=0 items=0 ppid=1 pid=5266 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.643113] audit: type=1327 audit(1780980419.277:2713): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 170.652303] audit: type=1105 audit(1780980419.306:2714): pid=5266 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 170.659122] audit: type=1103 audit(1780980419.312:2715): pid=5270 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 171.211576] audit: type=1106 audit(1780980419.865:2716): pid=5266 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 171.218533] audit: type=1104 audit(1780980419.867:2717): pid=5266 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 174.977381] kauditd_printk_skb: 20 callbacks suppressed [ 174.977385] audit: type=1106 audit(1780980423.631:2734): pid=5297 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 174.987273] audit: type=1104 audit(1780980423.631:2735): pid=5297 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 174.993893] audit: type=1131 audit(1780980423.635:2736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-4100-172.31.16.205:22-20.229.252.112:50240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.146063] audit: type=1130 audit(1780980428.799:2737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-9-172.31.16.205:22-20.229.252.112:59262 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.987058] audit: type=1101 audit(1780980429.640:2738): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 180.993439] audit: type=1103 audit(1780980429.642:2739): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 180.999166] audit: type=1006 audit(1780980429.642:2740): pid=5316 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 181.002586] audit: type=1300 audit(1780980429.642:2740): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd086e3560 a2=3 a3=0 items=0 ppid=1 pid=5316 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.008819] audit: type=1327 audit(1780980429.642:2740): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 181.016449] audit: type=1105 audit(1780980429.670:2741): pid=5316 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 181.023237] audit: type=1103 audit(1780980429.675:2742): pid=5320 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 181.554161] audit: type=1106 audit(1780980430.207:2743): pid=5316 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 181.561391] audit: type=1104 audit(1780980430.207:2744): pid=5316 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.726907] kauditd_printk_skb: 1 callbacks suppressed [ 186.726911] audit: type=1130 audit(1780980435.380:2746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4101-172.31.16.205:22-20.229.252.112:59264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.572688] audit: type=1101 audit(1780980436.226:2747): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 187.578916] audit: type=1103 audit(1780980436.228:2748): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 187.584465] audit: type=1006 audit(1780980436.228:2749): pid=5333 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 187.587685] audit: type=1300 audit(1780980436.228:2749): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe444ff1e0 a2=3 a3=0 items=0 ppid=1 pid=5333 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.593787] audit: type=1327 audit(1780980436.228:2749): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 187.603526] audit: type=1105 audit(1780980436.257:2750): pid=5333 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 187.610793] audit: type=1103 audit(1780980436.264:2751): pid=5337 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 188.131581] audit: type=1106 audit(1780980436.785:2752): pid=5333 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 188.138454] audit: type=1104 audit(1780980436.785:2753): pid=5333 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 192.190839] kauditd_printk_skb: 20 callbacks suppressed [ 192.190844] audit: type=1325 audit(1780980440.843:2770): table=filter:155 family=2 entries=20 op=nft_register_rule pid=5377 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.201251] audit: type=1300 audit(1780980440.843:2770): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffcb1908f60 a2=0 a3=7ffcb1908f4c items=0 ppid=4143 pid=5377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.209821] audit: type=1327 audit(1780980440.843:2770): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 192.213547] audit: type=1325 audit(1780980440.854:2771): table=nat:156 family=2 entries=18 op=nft_register_rule pid=5377 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.217580] audit: type=1300 audit(1780980440.854:2771): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffcb1908f60 a2=0 a3=0 items=0 ppid=4143 pid=5377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.223950] audit: type=1327 audit(1780980440.854:2771): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 192.383677] audit: type=1106 audit(1780980441.037:2772): pid=5363 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 192.391387] audit: type=1104 audit(1780980441.037:2773): pid=5363 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 192.405232] audit: type=1131 audit(1780980441.057:2774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4102-172.31.16.205:22-20.229.252.112:56922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.551699] audit: type=1130 audit(1780980441.205:2775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-11-172.31.16.205:22-20.229.252.112:56932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.030651] kauditd_printk_skb: 27 callbacks suppressed [ 198.030655] audit: type=1325 audit(1780980446.684:2795): table=filter:159 family=2 entries=20 op=nft_register_rule pid=5416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.035047] audit: type=1300 audit(1780980446.684:2795): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffca2641c20 a2=0 a3=7ffca2641c0c items=0 ppid=4143 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.041600] audit: type=1327 audit(1780980446.684:2795): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 198.044191] audit: type=1325 audit(1780980446.691:2796): table=nat:160 family=2 entries=102 op=nft_register_chain pid=5416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.050860] audit: type=1300 audit(1780980446.691:2796): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffca2641c20 a2=0 a3=7ffca2641c0c items=0 ppid=4143 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.056731] audit: type=1327 audit(1780980446.691:2796): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 200.891256] audit: type=1130 audit(1780980449.545:2797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4103-172.31.16.205:22-20.229.252.112:41722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.731656] audit: type=1101 audit(1780980450.385:2798): pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 201.737754] audit: type=1103 audit(1780980450.388:2799): pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 201.743395] audit: type=1006 audit(1780980450.388:2800): pid=5418 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 207.439590] kauditd_printk_skb: 7 callbacks suppressed [ 207.439594] audit: type=1130 audit(1780980456.093:2806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4104-172.31.16.205:22-20.229.252.112:41726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 208.280909] audit: type=1101 audit(1780980456.934:2807): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 208.286997] audit: type=1103 audit(1780980456.936:2808): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 208.292570] audit: type=1006 audit(1780980456.936:2809): pid=5436 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 208.295989] audit: type=1300 audit(1780980456.936:2809): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd67cd86a0 a2=3 a3=0 items=0 ppid=1 pid=5436 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.302073] audit: type=1327 audit(1780980456.936:2809): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 208.307970] audit: type=1105 audit(1780980456.961:2810): pid=5436 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 208.315764] audit: type=1103 audit(1780980456.969:2811): pid=5440 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 208.839000] audit: type=1106 audit(1780980457.492:2812): pid=5436 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 208.846900] audit: type=1104 audit(1780980457.493:2813): pid=5436 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'