wer Button [PWRF] [ 23.844694] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 [ 23.848044] ACPI: button: Sleep Button [SLPF] [ 23.868062] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 24.416308] erofs: (device dm-5): mounted with root inode @ nid 40. [ 24.440334] loop6: detected capacity change from 0 to 44152 [ 24.446038] loop6: p1 p2 p3 [ 24.467452] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.469862] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.471499] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 24.473560] device-mapper: ioctl: error adding target to table [ 24.479405] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.525993] erofs: (device dm-5): mounted with root inode @ nid 40. [ 24.566285] loop6: detected capacity change from 0 to 219840 [ 24.596948] loop6: detected capacity change from 0 to 388272 [ 24.601103] loop6: p1 p2 p3 [ 24.621069] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.622525] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.624187] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 24.625812] device-mapper: ioctl: error adding target to table [ 24.630359] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.688327] erofs: (device dm-5): mounted with root inode @ nid 39. [ 24.713509] loop6: detected capacity change from 0 to 183704 [ 24.718401] loop6: p1 p2 p3 [ 24.731496] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.733156] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.734892] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 24.739301] device-mapper: ioctl: error adding target to table [ 24.745391] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.791768] erofs: (device dm-5): mounted with root inode @ nid 39. [ 24.852467] loop6: detected capacity change from 0 to 300096 [ 24.856174] loop6: p1 p2 p3 [ 24.864648] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.866028] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.867578] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 24.869138] device-mapper: ioctl: error adding target to table [ 24.871602] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.903284] erofs: (device dm-5): mounted with root inode @ nid 39. [ 24.927062] loop6: detected capacity change from 0 to 219840 [ 24.950391] loop7: detected capacity change from 0 to 388272 [ 24.954954] loop7: p1 p2 p3 [ 24.965113] device-mapper: verity: sha256 using shash "sha256-avx2" [ 24.966516] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 24.968344] device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) [ 24.969874] device-mapper: ioctl: error adding target to table [ 24.972751] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.018744] erofs: (device dm-5): mounted with root inode @ nid 39. [ 25.022518] loop8: detected capacity change from 0 to 183704 [ 25.027377] loop8: p1 p2 p3 [ 25.038512] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.039775] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.041355] device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) [ 25.042981] device-mapper: ioctl: error adding target to table [ 25.045330] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.088623] erofs: (device dm-6): mounted with root inode @ nid 39. [ 25.091271] loop9: detected capacity change from 0 to 300096 [ 25.095755] loop9: p1 p2 p3 [ 25.107190] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.108242] device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc [ 25.110072] device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) [ 25.111703] device-mapper: ioctl: error adding target to table [ 25.115065] device-mapper: verity: sha256 using shash "sha256-avx2" [ 25.154913] erofs: (device dm-7): mounted with root inode @ nid 39. [ 29.281903] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 29.309754] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/07/29 00:10:58Z: Amazon SSM Agent v3.3.0.0 is running 2026/07/29 00:10:58Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/07/29 00:10:58Z: OsVersion: 4757.0.0 [!p]104\[?7hP+q6E616D65\ This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:11:03 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:11:03 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: [ 44.803791] kauditd_printk_skb: 57 callbacks suppressed [ 44.803795] audit: type=1305 audit(1785283871.629:165): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 44.808674] audit: type=1300 audit(1785283871.629:165): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc8ef70bd0 a2=420 a3=0 items=0 ppid=2666 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 44.814029] audit: type=1327 audit(1785283871.629:165): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 44.815926] audit: type=1130 audit(1785283871.633:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.818849] audit: type=1131 audit(1785283871.633:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.821728] audit: type=1106 audit(1785283871.635:168): pid=2660 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 44.824939] audit: type=1104 audit(1785283871.635:169): pid=2660 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 44.972526] audit: type=1106 audit(1785283871.798:170): pid=2655 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 44.981734] audit: type=1104 audit(1785283871.798:171): pid=2655 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 44.986439] audit: type=1131 audit(1785283871.801:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4098-172.31.30.230:22-20.103.240.199:46420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 51.767710] Initializing XFRM netlink socket [ 51.920553] kauditd_printk_skb: 13 callbacks suppressed [ 51.920558] audit: type=1325 audit(1785283878.746:184): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2781 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.924735] audit: type=1300 audit(1785283878.746:184): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc2285d880 a2=0 a3=0 items=0 ppid=2732 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 51.930701] audit: type=1327 audit(1785283878.746:184): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 51.933856] audit: type=1325 audit(1785283878.753:185): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2783 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.937142] audit: type=1300 audit(1785283878.753:185): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd5f4391e0 a2=0 a3=0 items=0 ppid=2732 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 51.943866] audit: type=1327 audit(1785283878.753:185): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 51.946841] audit: type=1325 audit(1785283878.757:186): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2785 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 51.949551] audit: type=1300 audit(1785283878.757:186): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff73f5ed70 a2=0 a3=0 items=0 ppid=2732 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 51.955072] audit: type=1327 audit(1785283878.757:186): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 51.957924] audit: type=1325 audit(1785283878.760:187): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:11:20 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:11:20 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: [ 58.514724] kauditd_printk_skb: 105 callbacks suppressed [ 58.514728] audit: type=1130 audit(1785283885.340:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.579954] audit: type=1131 audit(1785283885.406:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 60.441110] audit: type=1131 audit(1785283887.267:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.451921] audit: type=1334 audit(1785283887.278:226): prog-id=35 op=UNLOAD [ 69.013110] audit: type=1130 audit(1785283895.839:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.145618] audit: type=1131 audit(1785283895.971:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 71.101364] audit: type=1130 audit(1785283897.927:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.105978] audit: type=1131 audit(1785283897.927:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.313477] zram_generator::config[3269]: No configuration found. [ 71.692746] audit: type=1334 audit(1785283898.518:231): prog-id=39 op=LOAD [ 71.694545] audit: type=1334 audit(1785283898.518:232): prog-id=16 op=UNLOAD [ 71.696317] audit: type=1334 audit(1785283898.518:233): prog-id=40 op=LOAD [ 71.697877] audit: type=1334 audit(1785283898.518:234): prog-id=41 op=LOAD [ 71.699366] audit: type=1334 audit(1785283898.518:235): prog-id=17 op=UNLOAD [ 71.700943] audit: type=1334 audit(1785283898.518:236): prog-id=18 op=UNLOAD [ 74.175865] kauditd_printk_skb: 72 callbacks suppressed [ 74.175869] audit: type=1334 audit(1785283901.002:285): prog-id=59 op=LOAD [ 74.182899] audit: type=1334 audit(1785283901.005:286): prog-id=60 op=LOAD [ 74.188029] audit: type=1300 audit(1785283901.005:286): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=a9cd9a15fd8 a2=98 a3=0 items=0 ppid=3404 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.198185] audit: type=1327 audit(1785283901.005:286): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236636237373063303433633137336665643930613333323334323764 [ 74.204180] audit: type=1334 audit(1785283901.006:287): prog-id=60 op=UNLOAD [ 74.205800] audit: type=1300 audit(1785283901.006:287): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3404 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.211736] audit: type=1327 audit(1785283901.006:287): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236636237373063303433633137336665643930613333323334323764 [ 74.217733] audit: type=1334 audit(1785283901.011:288): prog-id=61 op=LOAD [ 74.217903] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.218393] audit: type=1334 audit(1785283901.012:289): prog-id=62 op=LOAD [ 79.948645] zram_generator::config[3944]: No configuration found. [ 80.333638] kauditd_printk_skb: 122 callbacks suppressed [ 80.333643] audit: type=1334 audit(1785283907.159:332): prog-id=89 op=LOAD [ 80.336637] audit: type=1334 audit(1785283907.159:333): prog-id=59 op=UNLOAD [ 80.338416] audit: type=1334 audit(1785283907.161:334): prog-id=90 op=LOAD [ 80.340043] audit: type=1334 audit(1785283907.162:335): prog-id=39 op=UNLOAD [ 80.341509] audit: type=1334 audit(1785283907.162:336): prog-id=91 op=LOAD [ 80.343169] audit: type=1334 audit(1785283907.162:337): prog-id=92 op=LOAD [ 80.344569] audit: type=1334 audit(1785283907.162:338): prog-id=40 op=UNLOAD [ 80.346202] audit: type=1334 audit(1785283907.162:339): prog-id=41 op=UNLOAD [ 80.347757] audit: type=1334 audit(1785283907.163:340): prog-id=93 op=LOAD [ 80.349277] audit: type=1334 audit(1785283907.163:341): prog-id=42 op=UNLOAD [ 88.146410] kauditd_printk_skb: 54 callbacks suppressed [ 88.146415] audit: type=1334 audit(1785283914.972:396): prog-id=115 op=LOAD [ 88.149291] audit: type=1334 audit(1785283914.973:397): prog-id=116 op=LOAD [ 88.150779] audit: type=1300 audit(1785283914.973:397): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=f5737c9bfd8 a2=98 a3=0 items=0 ppid=4083 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.156869] audit: type=1327 audit(1785283914.973:397): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935613233393665313539376537663236386234653137316436383838 [ 88.162562] audit: type=1334 audit(1785283914.973:398): prog-id=116 op=UNLOAD [ 88.164306] audit: type=1300 audit(1785283914.973:398): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4083 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.170177] audit: type=1327 audit(1785283914.973:398): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935613233393665313539376537663236386234653137316436383838 [ 88.179342] audit: type=1334 audit(1785283914.973:399): prog-id=117 op=LOAD [ 88.180658] audit: type=1300 audit(1785283914.973:399): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=f5737c9c290 a2=98 a3=0 items=0 ppid=4083 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.186582] audit: type=1327 audit(1785283914.973:399): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935613233393665313539376537663236386234653137316436383838 [ 98.126947] kauditd_printk_skb: 224 callbacks suppressed [ 98.126952] audit: type=1334 audit(1785283924.953:476): prog-id=133 op=LOAD [ 98.130183] audit: type=1334 audit(1785283924.953:477): prog-id=134 op=LOAD [ 98.132456] audit: type=1300 audit(1785283924.953:477): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=316f4677fd8 a2=98 a3=0 items=0 ppid=4102 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.139737] audit: type=1327 audit(1785283924.953:477): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163376135323764316266356166323166653036656534303963653630 [ 98.146085] audit: type=1334 audit(1785283924.953:478): prog-id=134 op=UNLOAD [ 98.147754] audit: type=1300 audit(1785283924.953:478): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4102 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.156345] audit: type=1327 audit(1785283924.953:478): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163376135323764316266356166323166653036656534303963653630 [ 98.162979] audit: type=1334 audit(1785283924.953:479): prog-id=135 op=LOAD [ 98.165474] audit: type=1300 audit(1785283924.953:479): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=316f4678290 a2=98 a3=0 items=0 ppid=4102 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.171847] audit: type=1327 audit(1785283924.953:479): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163376135323764316266356166323166653036656534303963653630 [ 103.128350] kauditd_printk_skb: 398 callbacks suppressed [ 103.128354] audit: type=1334 audit(1785283929.954:620): prog-id=207 op=LOAD [ 103.133088] audit: type=1300 audit(1785283929.954:620): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd11432f70 a2=90 a3=2 items=0 ppid=4631 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.140110] audit: type=1327 audit(1785283929.954:620): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.142622] audit: type=1334 audit(1785283929.954:621): prog-id=207 op=UNLOAD [ 103.143893] audit: type=1300 audit(1785283929.954:621): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffd11432f70 a2=90 a3=2 items=0 ppid=4631 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.149182] audit: type=1327 audit(1785283929.954:621): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.151336] audit: type=1334 audit(1785283929.954:622): prog-id=208 op=LOAD [ 103.152554] audit: type=1300 audit(1785283929.954:622): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd11432f70 a2=90 a3=2 items=0 ppid=4631 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 103.157970] audit: type=1327 audit(1785283929.954:622): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 103.159956] audit: type=1334 audit(1785283929.954:623): prog-id=208 op=UNLOAD [ 106.386562] NET: Registered PF_ALG protocol family This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:13 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:13 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:14 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:14 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: [ 107.607260] eth0: renamed from tmp6c8cb [ 107.621516] eth0: renamed from tmpa567d This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:15 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:15 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: [ 108.641860] kauditd_printk_skb: 5600 callbacks suppressed [ 108.641864] audit: type=1334 audit(1785283935.467:2490): prog-id=1120 op=LOAD [ 108.644864] audit: type=1300 audit(1785283935.467:2490): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd4e8cc670 a2=74 a3=7ffd4e8cc670 items=0 ppid=4631 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 108.650574] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.651609] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 108.652833] audit: backlog limit exceeded [ 108.653592] audit: type=1327 audit(1785283935.467:2490): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A0031335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 108.653935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.656897] audit: type=1334 audit(1785283935.467:2491): prog-id=1120 op=UNLOAD [ 108.657985] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 108.658447] audit: type=1300 audit(1785283935.467:2491): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd4e8cc670 a2=74 a3=7ffd4e8cc670 items=0 ppid=4631 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:16 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:16 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:17 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:12:17 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: [ 113.872325] kauditd_printk_skb: 579 callbacks suppressed [ 113.872329] audit: type=1325 audit(1785283940.698:2687): table=filter:153 family=2 entries=11 op=nft_register_rule pid=5295 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.876129] audit: type=1300 audit(1785283940.698:2687): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffbd9c2d60 a2=0 a3=7fffbd9c2d4c items=0 ppid=4211 pid=5295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.881687] audit: type=1327 audit(1785283940.698:2687): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 113.892485] audit: type=1325 audit(1785283940.718:2688): table=nat:154 family=2 entries=45 op=nft_register_chain pid=5295 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.895685] audit: type=1300 audit(1785283940.718:2688): arch=c000003e syscall=46 success=yes exit=19092 a0=3 a1=7fffbd9c2d60 a2=0 a3=7fffbd9c2d4c items=0 ppid=4211 pid=5295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.901590] audit: type=1327 audit(1785283940.718:2688): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 145.963868] audit: type=1130 audit(1785283972.788:2689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4099-172.31.30.230:22-20.103.240.199:36474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 146.878505] audit: type=1101 audit(1785283973.704:2690): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 146.884722] audit: type=1103 audit(1785283973.706:2691): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 146.890783] audit: type=1006 audit(1785283973.706:2692): pid=5305 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 146.893942] audit: type=1300 audit(1785283973.706:2692): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe7af38b00 a2=3 a3=0 items=0 ppid=1 pid=5305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.899927] audit: type=1327 audit(1785283973.706:2692): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 146.911775] audit: type=1105 audit(1785283973.737:2693): pid=5305 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 146.918554] audit: type=1103 audit(1785283973.742:2694): pid=5310 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 148.030076] audit: type=1106 audit(1785283974.856:2695): pid=5305 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 148.037912] audit: type=1104 audit(1785283974.856:2696): pid=5305 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 153.286428] kauditd_printk_skb: 1 callbacks suppressed [ 153.286432] audit: type=1130 audit(1785283980.112:2698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-6-172.31.30.230:22-20.103.240.199:36490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 154.244452] audit: type=1101 audit(1785283981.070:2699): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 154.250685] audit: type=1103 audit(1785283981.073:2700): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 154.256655] audit: type=1006 audit(1785283981.073:2701): pid=5328 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 154.260104] audit: type=1300 audit(1785283981.073:2701): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffe1467e40 a2=3 a3=0 items=0 ppid=1 pid=5328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.266218] audit: type=1327 audit(1785283981.073:2701): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 154.274519] audit: type=1105 audit(1785283981.100:2702): pid=5328 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 154.281864] audit: type=1103 audit(1785283981.107:2703): pid=5333 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 154.865954] audit: type=1106 audit(1785283981.689:2704): pid=5328 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 154.893640] audit: type=1104 audit(1785283981.689:2705): pid=5328 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 160.043858] kauditd_printk_skb: 1 callbacks suppressed [ 160.043862] audit: type=1130 audit(1785283986.869:2707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4100-172.31.30.230:22-20.103.240.199:56110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 160.887508] audit: type=1101 audit(1785283987.713:2708): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 160.893691] audit: type=1103 audit(1785283987.716:2709): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 160.899688] audit: type=1006 audit(1785283987.716:2710): pid=5346 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 160.902884] audit: type=1300 audit(1785283987.716:2710): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcfdb471a0 a2=3 a3=0 items=0 ppid=1 pid=5346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 160.910020] audit: type=1327 audit(1785283987.716:2710): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 160.919710] audit: type=1105 audit(1785283987.745:2711): pid=5346 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 160.927311] audit: type=1103 audit(1785283987.753:2712): pid=5350 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.459884] audit: type=1106 audit(1785283988.285:2713): pid=5346 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.466462] audit: type=1104 audit(1785283988.285:2714): pid=5346 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 166.639232] kauditd_printk_skb: 1 callbacks suppressed [ 166.639235] audit: type=1130 audit(1785283993.465:2716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-172.31.30.230:22-20.103.240.199:47254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.499204] audit: type=1101 audit(1785283994.325:2717): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.506159] audit: type=1103 audit(1785283994.327:2718): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.511672] audit: type=1006 audit(1785283994.327:2719): pid=5362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 167.514992] audit: type=1300 audit(1785283994.327:2719): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeb3533010 a2=3 a3=0 items=0 ppid=1 pid=5362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.520945] audit: type=1327 audit(1785283994.327:2719): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.528680] audit: type=1105 audit(1785283994.354:2720): pid=5362 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.535452] audit: type=1103 audit(1785283994.357:2721): pid=5367 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.055102] audit: type=1106 audit(1785283994.881:2722): pid=5362 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.063688] audit: type=1104 audit(1785283994.881:2723): pid=5362 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 176.392936] kauditd_printk_skb: 23 callbacks suppressed [ 176.392939] audit: type=1130 audit(1785284003.219:2743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-9-172.31.30.230:22-20.103.240.199:33190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.246824] audit: type=1101 audit(1785284004.072:2744): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 177.253092] audit: type=1103 audit(1785284004.074:2745): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 177.259364] audit: type=1006 audit(1785284004.074:2746): pid=5411 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 177.263029] audit: type=1300 audit(1785284004.074:2746): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe8607c970 a2=3 a3=0 items=0 ppid=1 pid=5411 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.270073] audit: type=1327 audit(1785284004.074:2746): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 177.278365] audit: type=1105 audit(1785284004.104:2747): pid=5411 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 177.285226] audit: type=1103 audit(1785284004.108:2748): pid=5415 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 177.844747] audit: type=1106 audit(1785284004.670:2749): pid=5411 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 177.852603] audit: type=1104 audit(1785284004.670:2750): pid=5411 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.864848] kauditd_printk_skb: 20 callbacks suppressed [ 181.864853] audit: type=1325 audit(1785284008.689:2767): table=filter:155 family=2 entries=20 op=nft_register_rule pid=5457 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 181.872294] audit: type=1300 audit(1785284008.689:2767): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe7db6e9a0 a2=0 a3=7ffe7db6e98c items=0 ppid=4211 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.879551] audit: type=1327 audit(1785284008.689:2767): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 181.882931] audit: type=1325 audit(1785284008.697:2768): table=nat:156 family=2 entries=18 op=nft_register_rule pid=5457 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 181.885790] audit: type=1300 audit(1785284008.697:2768): arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffe7db6e9a0 a2=0 a3=0 items=0 ppid=4211 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.892287] audit: type=1327 audit(1785284008.697:2768): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 182.071850] audit: type=1106 audit(1785284008.896:2769): pid=5443 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 182.078365] audit: type=1104 audit(1785284008.896:2770): pid=5443 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 182.084625] audit: type=1131 audit(1785284008.903:2771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4102-172.31.30.230:22-20.103.240.199:33214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.248407] audit: type=1130 audit(1785284009.074:2772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-11-172.31.30.230:22-20.103.240.199:33226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.128937] kauditd_printk_skb: 27 callbacks suppressed [ 188.128941] audit: type=1325 audit(1785284014.954:2792): table=filter:159 family=2 entries=20 op=nft_register_rule pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 188.132959] audit: type=1300 audit(1785284014.954:2792): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffbf8318a0 a2=0 a3=7fffbf83188c items=0 ppid=4211 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.139018] audit: type=1327 audit(1785284014.954:2792): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 188.141720] audit: type=1325 audit(1785284014.962:2793): table=nat:160 family=2 entries=102 op=nft_register_chain pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 188.144586] audit: type=1300 audit(1785284014.962:2793): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7fffbf8318a0 a2=0 a3=7fffbf83188c items=0 ppid=4211 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.150418] audit: type=1327 audit(1785284014.962:2793): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 190.593916] audit: type=1130 audit(1785284017.419:2794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-13-172.31.30.230:22-20.103.240.199:44694 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.439006] audit: type=1101 audit(1785284018.265:2795): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 191.445365] audit: type=1103 audit(1785284018.267:2796): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 191.451418] audit: type=1006 audit(1785284018.267:2797): pid=5496 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 197.161582] kauditd_printk_skb: 7 callbacks suppressed [ 197.161586] audit: type=1130 audit(1785284023.987:2803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-14-172.31.30.230:22-20.103.240.199:34982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.003220] audit: type=1101 audit(1785284024.829:2804): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.009545] audit: type=1103 audit(1785284024.829:2805): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.015698] audit: type=1006 audit(1785284024.829:2806): pid=5512 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 198.018784] audit: type=1300 audit(1785284024.829:2806): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf74a0fb0 a2=3 a3=0 items=0 ppid=1 pid=5512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.025077] audit: type=1327 audit(1785284024.829:2806): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 198.033089] audit: type=1105 audit(1785284024.859:2807): pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.041289] audit: type=1103 audit(1785284024.867:2808): pid=5516 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.561096] audit: type=1106 audit(1785284025.387:2809): pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 198.568784] audit: type=1104 audit(1785284025.387:2810): pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:13:49 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:13:49 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: [ 203.432754] kauditd_printk_skb: 17 callbacks suppressed [ 203.432758] audit: type=1106 audit(1785284030.258:2826): pid=5528 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 203.444643] audit: type=1104 audit(1785284030.258:2827): pid=5528 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 203.452730] audit: type=1131 audit(1785284030.267:2828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4103-172.31.30.230:22-20.103.240.199:34992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.610250] audit: type=1130 audit(1785284030.434:2829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-15-172.31.30.230:22-20.103.240.199:35004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.523181] audit: type=1101 audit(1785284031.349:2830): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.529014] audit: type=1103 audit(1785284031.350:2831): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.534858] audit: type=1006 audit(1785284031.351:2832): pid=5685 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 204.537938] audit: type=1300 audit(1785284031.351:2832): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1fb07630 a2=3 a3=0 items=0 ppid=1 pid=5685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.543783] audit: type=1327 audit(1785284031.351:2832): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 204.549522] audit: type=1105 audit(1785284031.375:2833): pid=5685 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 208.687684] kauditd_printk_skb: 102 callbacks suppressed [ 208.687689] audit: type=1101 audit(1785284035.513:2882): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 208.695185] audit: type=1103 audit(1785284035.516:2883): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 208.702768] audit: type=1006 audit(1785284035.516:2884): pid=5864 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 208.705985] audit: type=1300 audit(1785284035.516:2884): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffafd0ba80 a2=3 a3=0 items=0 ppid=1 pid=5864 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.712475] audit: type=1327 audit(1785284035.516:2884): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 208.721807] audit: type=1105 audit(1785284035.547:2885): pid=5864 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 208.732436] audit: type=1103 audit(1785284035.557:2886): pid=5896 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 208.841322] audit: type=1334 audit(1785284035.667:2887): prog-id=1260 op=LOAD [ 208.843055] audit: type=1334 audit(1785284035.667:2888): prog-id=1261 op=LOAD [ 208.844495] audit: type=1300 audit(1785284035.667:2888): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=cba2d3b9fd8 a2=98 a3=0 items=0 ppid=5713 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.855506] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 213.696950] kauditd_printk_skb: 5826 callbacks suppressed [ 213.696954] audit: type=1325 audit(1785284040.523:4813): table=nat:164 family=2 entries=1 op=nft_register_chain pid=6360 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 213.704412] audit: type=1300 audit(1785284040.523:4813): arch=c000003e syscall=46 success=yes exit=140 a0=3 a1=7fff5c977f40 a2=0 a3=7fff5c977f2c items=0 ppid=5955 pid=6360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 213.711004] audit: type=1327 audit(1785284040.523:4813): proctitle=69707461626C6573002D770035002D74006E6174002D450043494C49554D5F504F53545F6E6174004F4C445F43494C49554D5F504F53545F6E6174 [ 213.717909] audit: type=1325 audit(1785284040.543:4814): table=nat:165 family=2 entries=1 op=nft_register_chain pid=6363 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 213.720793] audit: type=1300 audit(1785284040.543:4814): arch=c000003e syscall=46 success=yes exit=144 a0=3 a1=7ffecad359d0 a2=0 a3=7ffecad359bc items=0 ppid=5955 pid=6363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 213.726637] audit: type=1327 audit(1785284040.543:4814): proctitle=69707461626C6573002D770035002D74006E6174002D450043494C49554D5F4F55545055545F6E6174004F4C445F43494C49554D5F4F55545055545F6E6174 [ 213.733180] audit: type=1325 audit(1785284040.559:4815): table=nat:166 family=2 entries=1 op=nft_register_chain pid=6365 subj=system_u:system_r:spc_t:s0 comm="iptables" [ 213.736030] audit: type=1300 audit(1785284040.559:4815): arch=c000003e syscall=46 success=yes exit=140 a0=3 a1=7ffd33b068e0 a2=0 a3=7ffd33b068cc items=0 ppid=5955 pid=6365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null) [ 213.742455] audit: type=1327 audit(1785284040.559:4815): proctitle=69707461626C6573002D770035002D74006E6174002D450043494C49554D5F5052455F6E6174004F4C445F43494C49554D5F5052455F6E6174 [ 213.747076] audit: type=1325 audit(1785284040.573:4816): table=mangle:167 family=2 entries=1 op=nft_register_chain pid=6367 subj=system_u:system_r:spc_t:s0 comm="iptables" This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:14:03 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 This is ip-172-31-30-230 (Linux x86_64 6.12.96-flatcar) 00:14:03 SSH host key: SHA256:TV3W9FktpkutKf86uU5qr6yiuw9wGLK/p+M2nVq911M (ED25519) SSH host key: SHA256:VsgDEDH6nKq3Zwr4R3Zdp2af93Jw4jFqCOHp+JyEDX0 (RSA) SSH host key: SHA256:1EhSwDYMFr6sdpAwu/rd51db0qFAX/PHXoIn8VrlU8c (ECDSA) eth0: 172.31.30.230 fe80::4f7:eff:feda:cbf9 ip-172-31-30-230 login: [ 220.223056] kauditd_printk_skb: 453 callbacks suppressed [ 220.223060] audit: type=1334 audit(1785284047.049:4974): prog-id=2253 op=LOAD [ 220.227040] audit: type=1300 audit(1785284047.049:4974): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdfcf2ce00 a2=74 a3=7ffdfcf2ce00 items=0 ppid=5955 pid=6604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 220.236550] audit: type=1327 audit(1785284047.049:4974): proctitle=74630066696C746572007265706C61636500646576006C786338323133353238316539326400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003533395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 220.243625] audit: type=1334 audit(1785284047.049:4975): prog-id=2253 op=UNLOAD [ 220.245316] audit: type=1300 audit(1785284047.049:4975): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffdfcf2ce00 a2=74 a3=7ffdfcf2ce00 items=0 ppid=5955 pid=6604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 220.251760] audit: type=1327 audit(1785284047.049:4975): proctitle=74630066696C746572007265706C61636500646576006C786338323133353238316539326400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003533395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 220.257205] audit: type=1334 audit(1785284047.049:4976): prog-id=2254 op=LOAD [ 220.258418] audit: type=1300 audit(1785284047.049:4976): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdfcf2cd90 a2=80 a3=0 items=0 ppid=5955 pid=6604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 220.263481] audit: type=1327 audit(1785284047.049:4976): proctitle=74630066696C746572007265706C61636500646576006C786338323133353238316539326400696E6772657373007072696F00310068616E646C65003100627066006461006F626A003533395F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 220.268024] audit: type=1334 audit(1785284047.049:4977): prog-id=2254 op=UNLOAD [ 236.099183] kauditd_printk_skb: 423 callbacks suppressed [ 236.099187] audit: type=1334 audit(1785284062.925:5123): prog-id=83 op=UNLOAD [ 236.102049] audit: type=1334 audit(1785284062.925:5124): prog-id=108 op=UNLOAD